Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
File: EL2oyoaUjZ_gKdoRGgyecNMEalo.mft (raw, json)
Hash identifier: BSDzBMMESQdzC7hKYKnu5TYu18IqD7FxRXL3wGxt7IY=
Subject key identifier: D2:2A:0C:31:78:DB:24:9A:A2:2F:DB:87:2C:AC:03:2A:28:07:28:45
Authority key identifier: 10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A
Certificate issuer: /CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
Certificate serial: 019D371B963CFA03D0815F1A984FD35C5A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
Manifest number: 0B6F
Signing time: Sun 29 Mar 2026 01:00:47 +0000
Manifest this update: Sun 29 Mar 2026 01:00:47 +0000
Manifest next update: Mon 30 Mar 2026 01:00:47 +0000
Files and hashes: 1: 26reGS5JGM2591eEk2BzmmAasUs.roa (hash: 3M1FfFlULQW8/C7W2Zc2Fn0/lGmaDkz7biCpnx34NUk=)
2: EL2oyoaUjZ_gKdoRGgyecNMEalo.crl (hash: 8HA48DhwM3dFoXsA3MywsZhj+H7/8Jxt+iFI67SNn6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:96:3c:fa:03:d0:81:5f:1a:98:4f:d3:5c:5a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
Validity
Not Before: Mar 29 01:00:47 2026 GMT
Not After : Mar 30 01:00:47 2026 GMT
Subject: CN=d22a0c3178db249aa22fdb872cac032a28072845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dd:2e:45:23:a6:93:1c:21:40:8e:be:8e:37:
17:df:74:c8:20:6c:78:06:9e:e9:f0:6d:91:17:b7:
80:ae:0c:60:92:6b:62:4b:d2:eb:5f:59:ca:23:0c:
3a:30:0d:75:18:a2:49:2d:ea:b0:6b:33:c3:44:c3:
07:87:5f:11:96:db:d9:21:ce:30:d1:78:2c:ad:00:
e8:95:04:62:3e:13:af:f9:bf:0d:f2:49:df:87:3c:
30:5b:25:75:9d:09:51:2c:aa:84:61:b5:53:d2:45:
c6:29:7f:08:9d:e7:95:4e:27:d6:b9:c5:7d:1c:1e:
e8:9a:f2:82:d8:19:3e:9a:36:8d:d9:65:8a:9a:38:
b1:6e:81:85:5d:82:46:fc:0b:ea:0e:f5:17:51:c0:
3f:44:1c:b4:6c:f8:88:b6:ed:f5:d0:fe:25:77:8d:
cc:96:37:2d:a7:e8:8b:ca:28:19:00:75:b7:fb:c5:
31:97:7b:c9:df:0d:63:71:af:b0:20:3d:3e:f6:fa:
93:65:5f:ab:1a:e7:b8:50:d2:8b:cb:ca:a4:0e:64:
fe:39:5b:e1:56:94:56:15:8f:7c:4e:c5:74:ac:55:
31:cf:e5:a9:88:25:aa:e8:98:6e:89:34:1a:da:f3:
26:66:bb:70:6e:91:15:fb:07:93:91:79:72:cf:42:
a5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2A:0C:31:78:DB:24:9A:A2:2F:DB:87:2C:AC:03:2A:28:07:28:45
X509v3 Authority Key Identifier:
keyid:10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9a:da:8c:90:65:f9:90:24:e7:44:57:c4:dc:90:0f:f4:83:
72:54:e8:c8:f5:91:85:1d:04:89:f7:4f:0e:b8:db:bf:94:70:
bd:25:28:f5:52:f6:76:ae:24:2e:11:06:ba:e9:4a:39:64:89:
13:27:81:4b:1a:58:df:ff:99:fa:08:7e:00:a4:11:7f:bc:6e:
7a:04:f4:4a:22:b6:2d:82:cb:42:c8:59:34:e9:4e:f2:bb:e7:
5e:b7:b1:d9:77:bb:f1:89:93:3d:0f:3a:34:8a:3f:c1:81:be:
f1:ff:b9:53:1c:4e:b3:5d:45:54:9d:87:56:69:29:6f:a8:4a:
fb:97:bb:a3:cc:3e:cc:ce:4c:fb:e1:d5:c6:0c:5b:59:5d:47:
85:4a:ef:87:2b:1a:71:25:fd:a0:f2:1b:da:92:70:8e:73:65:
aa:f5:5c:fa:d8:0d:71:5b:0c:96:3d:ef:73:c3:f4:22:43:f2:
68:30:fe:b7:c6:e3:41:28:06:b7:c1:2f:6e:17:d6:fa:df:cf:
f5:22:da:e2:f0:fa:07:2a:c7:9a:cc:1d:71:1e:c9:6d:30:32:
69:82:2b:34:f0:4c:63:c0:75:ae:02:03:d9:4c:c6:9b:eb:e9:
3e:b6:49:f4:bd:32:63:de:d9:73:01:25:29:f4:e9:fc:d8:ae:
01:aa:41:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:37 2026 by rpki-client