Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
File: Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft (raw, json)
Hash identifier: 9Vy+z9dkSvnqtIn331iRQPmqk8m9r5/p0lsWTm1YDwY=
Subject key identifier: 61:4F:12:3A:54:B1:BD:EA:F0:43:8A:C8:23:08:3C:06:3F:BB:7B:C7
Authority key identifier: 12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B
Certificate issuer: /CN=121a37282dd992d88658160559e048392798c84b
Certificate serial: 019DD0F5EC8E4990279AB5F10288AA248C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
Manifest number: 109A
Signing time: Mon 27 Apr 2026 22:01:10 +0000
Manifest this update: Mon 27 Apr 2026 22:01:10 +0000
Manifest next update: Tue 28 Apr 2026 22:01:10 +0000
Files and hashes: 1: 1I6xXRp2MIVm80sw3U3Tfku76Z4.roa (hash: f523msZqQLAjCeDR2b4rSYrcaIntt3g/koqAV5ProOw=)
2: Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl (hash: WRe2uRfU5Ltrvub9EBlo8xe68zqEYeOl2ZBlQyh7m4Y=)
3: WPpx-izSeflERwTZTBDMUjusV5s.roa (hash: cWk+1ANHgFtlvOQuSevrBNEAZRGbynzPPc7h5zNZTe0=)
4: bN4b_Ro1UEHJNER_9HcU775UCQk.roa (hash: RK/VwkDkfRH19Tjgu6wUkuqkclNxNJAitWxY+C+QqsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:f5:ec:8e:49:90:27:9a:b5:f1:02:88:aa:24:8c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121a37282dd992d88658160559e048392798c84b
Validity
Not Before: Apr 27 22:01:10 2026 GMT
Not After : Apr 28 22:01:10 2026 GMT
Subject: CN=614f123a54b1bdeaf0438ac823083c063fbb7bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:95:13:91:e5:62:5c:63:43:80:77:e0:7a:cb:
4e:bf:a5:75:f6:6d:5e:ff:3d:fa:3a:70:52:04:1c:
f4:86:d8:e0:e6:91:cf:24:08:f2:65:15:90:7c:04:
54:f2:da:06:02:ae:a3:bd:5d:38:36:00:15:81:fa:
5a:6e:cb:3d:a4:a5:f4:1e:1c:10:40:7d:4f:19:33:
ae:08:3b:5d:4c:bf:43:78:6c:ed:1d:9e:d2:28:87:
b5:d2:c9:2e:9d:a1:a0:43:e7:07:5a:c2:1f:94:42:
f9:e4:c3:af:13:25:ae:e3:ee:0f:6d:bc:90:fa:3f:
4e:1f:c9:62:2e:f7:6f:66:06:c9:40:cb:57:43:9a:
62:a5:3f:55:4e:f8:6e:e4:ac:d8:ed:21:c2:5c:3a:
5d:9e:d4:76:04:9b:18:0f:dd:82:45:54:86:b6:2b:
1b:45:ad:4d:c5:d1:72:3f:ea:80:cb:ac:ef:fb:2f:
9d:0e:a1:53:e8:82:e6:df:fa:01:ab:ec:79:2c:df:
ab:89:ea:4d:d5:45:7f:2a:0e:2a:fb:8d:ab:03:79:
b3:30:96:4d:01:c8:d0:96:e4:21:c8:08:cf:a2:92:
99:43:ca:cf:0f:26:8e:0d:c1:b5:b9:ae:e2:e9:ee:
47:0d:28:ba:77:f4:92:f4:d8:7c:83:93:35:96:b3:
65:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4F:12:3A:54:B1:BD:EA:F0:43:8A:C8:23:08:3C:06:3F:BB:7B:C7
X509v3 Authority Key Identifier:
keyid:12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1b:21:1d:da:36:4f:86:d7:56:6c:4d:24:40:10:21:d7:00:
d0:e7:7f:af:60:b2:50:ef:f9:13:cf:58:65:a9:03:7d:4e:49:
b8:01:2e:1e:96:bc:ef:10:e8:24:02:5e:a7:84:b8:91:84:57:
de:c2:b9:5d:1d:63:76:11:4a:68:a4:ae:0d:85:ee:01:7d:0f:
21:30:02:de:3b:d0:22:68:e4:bf:b8:fc:b2:2f:3c:a2:d9:64:
96:47:77:c4:45:d0:22:db:39:ae:fd:72:ff:ef:4c:58:f9:4d:
31:fe:58:d6:7f:be:09:42:fa:09:b7:35:39:f6:15:22:18:8d:
fa:25:36:77:24:b5:91:52:07:60:ad:8d:8a:95:34:59:d9:82:
1e:a8:51:3d:bc:f4:26:27:51:9e:b1:74:87:db:3b:d2:e8:8a:
cb:92:05:17:17:a5:35:26:78:bb:74:16:a6:18:47:e1:04:61:
d6:bb:4c:07:fc:42:5b:91:05:02:68:08:79:49:1b:e2:14:ea:
6e:6a:ba:0e:0c:d4:90:bf:5d:25:9e:52:b5:f9:e4:f2:17:05:
ee:b9:e6:c4:bc:60:7c:ea:df:71:f0:83:9a:08:58:df:9d:fd:
37:95:a2:f9:15:01:cf:b6:f9:59:1b:6c:2c:62:00:16:c5:31:
56:57:f1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 04:50:35 2026 by rpki-client