Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
File: EoEZrBeON5iQNuoposD0YwaWz-g.mft (raw, json)
Hash identifier: puL5yncZZMHqGW7ip83MnIxiNOgNaWw6+zNF1StmGK4=
Subject key identifier: 6D:66:1C:EB:27:17:B4:93:71:98:10:17:ED:AF:6A:89:EA:A6:85:DA
Authority key identifier: 12:81:19:AC:17:8E:37:98:90:36:EA:29:A2:C0:F4:63:06:96:CF:E8
Certificate issuer: /CN=128119ac178e37989036ea29a2c0f4630696cfe8
Certificate serial: 01A0F00C046DF594B4A0E58AB6C29F8C4C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
Manifest number: 02F4
Signing time: Wed 30 Sep 2026 02:01:54 +0000
Manifest this update: Wed 30 Sep 2026 02:01:54 +0000
Manifest next update: Thu 01 Oct 2026 02:01:54 +0000
Files and hashes: 1: EoEZrBeON5iQNuoposD0YwaWz-g.crl (hash: mQJ6CB5pJzzD5fal/8i4envE3OHIl98kTemIazDxfwg=)
2: MoyUhaJrKyyg7NdI-cgC8UrZDnc.roa (hash: Blton8K6qNZytZrnFkrDQwMOUJgcucmO6AJ7qz+2/EQ=)
3: XlF1Um0hQjtANHg7MSAgVZmYu7k.asa (hash: vL/L3yXXlyuNpAULKIf/FSlD5vVaZNSSg6lawDMb628=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:0c:04:6d:f5:94:b4:a0:e5:8a:b6:c2:9f:8c:4c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128119ac178e37989036ea29a2c0f4630696cfe8
Validity
Not Before: Sep 30 02:01:54 2026 GMT
Not After : Oct 1 02:01:54 2026 GMT
Subject: CN=6d661ceb2717b49371981017edaf6a89eaa685da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:80:f4:02:a4:d6:75:39:c5:9a:b8:7a:0e:f2:
3d:71:95:0d:04:a7:1c:02:a6:2b:19:41:ad:ae:e3:
05:81:6a:f0:8c:3a:71:94:56:53:e3:49:84:60:01:
5c:9f:18:68:79:d0:3b:23:ab:3a:b1:69:2f:a2:65:
47:fa:35:44:9b:31:74:84:a8:82:2c:b3:44:ab:7d:
2e:77:e4:ec:3c:98:9a:31:d7:2c:2f:44:9d:c5:1a:
a1:69:08:4b:6d:01:86:22:b7:90:49:1a:a0:cd:8e:
27:42:69:99:98:a9:5d:ec:9c:97:b2:aa:c8:54:df:
e6:a7:29:a0:f9:83:78:0d:30:7c:ab:57:49:e1:c0:
cf:8c:fb:32:12:30:31:fc:d7:25:b4:36:51:cf:68:
36:95:8c:83:d0:4f:e4:bf:7d:a3:3f:5f:9c:94:68:
64:2b:ec:e1:fe:1f:bc:4e:4e:2e:ab:6b:4a:fe:ba:
53:46:48:f7:4b:8f:52:2e:86:eb:38:b8:7d:4b:44:
74:98:9d:1b:c1:c5:7e:20:16:d2:24:c1:0b:43:ea:
53:6f:53:06:eb:7c:6f:52:08:05:8b:8b:44:ea:11:
ce:9e:14:c6:79:73:24:0e:73:6f:eb:0a:5a:8c:5f:
15:13:29:38:20:88:62:39:a6:67:de:d2:ae:6c:79:
86:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:66:1C:EB:27:17:B4:93:71:98:10:17:ED:AF:6A:89:EA:A6:85:DA
X509v3 Authority Key Identifier:
keyid:12:81:19:AC:17:8E:37:98:90:36:EA:29:A2:C0:F4:63:06:96:CF:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:0a:0c:7f:83:7b:1f:7c:b2:9c:5b:8f:37:7a:06:37:7f:1c:
5c:04:0e:24:20:6f:79:bc:25:40:7f:2c:9b:7a:dd:9e:1c:d2:
a4:8a:e7:51:cb:e7:5d:9b:0e:93:ea:e7:3d:38:f9:09:43:91:
60:90:4d:29:68:77:22:70:f3:44:c4:e5:1b:f5:3c:16:73:bb:
a1:71:45:3a:cc:e1:46:e9:d1:14:38:3b:2d:3b:24:8a:8e:76:
d5:04:eb:9e:7e:73:95:f4:6e:07:a8:64:8c:24:68:ab:c8:38:
fe:fb:58:7b:1d:ff:d4:1c:04:49:87:72:72:2a:c2:02:ef:7f:
00:a3:12:bd:1b:f6:66:cc:24:a1:c1:bd:a9:a1:84:11:9c:3e:
8b:37:cb:ec:e7:ae:e3:8b:9d:51:5b:ab:45:fe:8e:5b:31:ef:
f8:d8:ba:28:30:5a:66:47:d9:c7:17:82:41:7e:4c:86:80:f4:
06:50:5f:8c:dd:fe:44:bf:b4:f8:59:b8:9d:b5:ee:ee:47:6c:
94:18:c7:a0:8a:31:a4:2b:e6:d1:f0:c9:1a:62:bf:06:78:31:
4c:fa:69:4a:f2:46:16:b5:ed:57:8e:76:d1:89:0a:7b:2f:bd:
5e:c6:41:d0:24:e1:9d:dd:2d:b5:34:bf:6e:71:a3:e2:cf:7b:
35:7c:ea:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 12:58:38 2026 by rpki-client