Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
File: EoEZrBeON5iQNuoposD0YwaWz-g.mft (raw, json)
Hash identifier: nLcdHCclmv7uo3A3pobkqF/ctl6vWDSfjzwIpf/uEnQ=
Subject key identifier: 6B:4E:0D:CA:38:8A:05:76:29:6C:DD:5D:71:B0:30:99:0F:A9:83:CF
Authority key identifier: 12:81:19:AC:17:8E:37:98:90:36:EA:29:A2:C0:F4:63:06:96:CF:E8
Certificate issuer: /CN=128119ac178e37989036ea29a2c0f4630696cfe8
Certificate serial: 019DDD9F47CF1B953C1C7ECF9FC4BC9DA207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
Manifest number: 015C
Signing time: Thu 30 Apr 2026 09:01:36 +0000
Manifest this update: Thu 30 Apr 2026 09:01:36 +0000
Manifest next update: Fri 01 May 2026 09:01:36 +0000
Files and hashes: 1: EoEZrBeON5iQNuoposD0YwaWz-g.crl (hash: 6eD4o7j2pcq0jeuDWe7KnsIDCcJInBNtloTow1D3xFM=)
2: MoyUhaJrKyyg7NdI-cgC8UrZDnc.roa (hash: Blton8K6qNZytZrnFkrDQwMOUJgcucmO6AJ7qz+2/EQ=)
3: dfjch8XLq-4wXUHU0X4FRj8rZtw.asa (hash: LprVvfFT3+5D2/SGgkoYdn2pNQPb3rgY3LcWQ8dnja0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:9f:47:cf:1b:95:3c:1c:7e:cf:9f:c4:bc:9d:a2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128119ac178e37989036ea29a2c0f4630696cfe8
Validity
Not Before: Apr 30 09:01:36 2026 GMT
Not After : May 1 09:01:36 2026 GMT
Subject: CN=6b4e0dca388a0576296cdd5d71b030990fa983cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:51:7a:b6:6e:04:41:ac:19:d4:40:b4:01:9e:
db:c1:aa:77:63:a3:74:26:6a:ac:29:47:dc:ca:11:
e2:f7:41:21:a8:b3:fa:3a:eb:27:ba:08:5e:a0:80:
8a:2f:43:54:83:a1:88:85:57:0f:ed:6c:a4:e6:7e:
a7:35:21:c6:b1:92:24:a1:b8:20:14:de:1f:a3:e7:
29:7f:7b:e0:50:96:7b:ac:46:76:11:6e:00:44:bb:
7d:b4:49:88:cf:ef:a9:e6:c2:33:bb:43:6a:c6:8a:
32:fb:99:b5:98:1f:3b:af:f6:66:3c:ca:54:c1:b5:
fd:04:79:d2:30:9f:23:fa:de:ee:34:ce:08:dc:9e:
4a:49:57:9b:aa:20:d0:10:7f:ba:c2:43:c5:21:98:
fd:c5:79:d1:85:78:6d:35:d9:b1:43:ca:3f:7c:5b:
95:c5:9d:1d:2f:03:d9:9c:4e:8c:d1:57:0c:21:75:
b9:cc:65:b2:a6:06:2e:b6:42:17:07:da:c9:89:84:
b6:56:16:e7:45:c5:7f:b4:3a:23:c6:84:7d:c0:77:
bf:c0:c6:f5:08:3b:d2:fe:94:3a:f0:c4:7d:11:6d:
c7:59:93:06:b4:15:53:d2:e8:12:26:2d:d2:98:4f:
5a:1f:72:02:51:52:a6:a9:c9:24:36:6a:b5:2a:36:
d5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4E:0D:CA:38:8A:05:76:29:6C:DD:5D:71:B0:30:99:0F:A9:83:CF
X509v3 Authority Key Identifier:
keyid:12:81:19:AC:17:8E:37:98:90:36:EA:29:A2:C0:F4:63:06:96:CF:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:22:ec:1e:dc:3e:81:47:e5:b5:f4:f0:ca:59:18:ae:21:61:
8c:39:3f:f5:2d:5b:7b:bb:b6:fb:b8:39:c1:c5:41:8e:49:70:
ea:84:e1:fb:89:eb:2e:2a:e3:d5:0e:f7:5c:f3:c3:14:38:d7:
34:0d:0d:0f:d3:26:97:ad:11:b5:6e:97:d9:2d:b8:83:f6:58:
79:43:9e:92:e2:ed:e1:4c:d6:b1:71:d2:72:dd:0e:45:5d:67:
8e:06:a9:e5:3f:b1:03:8e:31:23:53:d7:eb:46:c7:92:19:9b:
4f:62:91:ab:8e:ad:e8:d9:55:70:31:f8:73:75:28:80:0a:02:
60:53:0c:e4:6d:02:f1:43:32:67:87:5e:0e:e4:6b:d1:69:da:
dd:ca:1b:0f:2e:99:8e:fc:2c:8b:ac:56:d1:fa:5a:e5:32:c6:
e6:7e:94:c6:df:5b:9a:df:2a:ea:68:19:2b:55:5f:37:9a:49:
57:a6:13:84:30:32:73:40:bc:df:6b:c0:73:e4:33:9e:94:fa:
2f:8f:95:66:02:51:0a:35:ef:ec:21:fb:54:7d:31:e4:3d:95:
ec:c8:fb:d7:ac:f0:d9:8e:8a:60:f3:62:22:b2:55:ea:30:af:
4e:ec:62:e6:29:bc:66:10:07:cd:0d:8b:bf:a3:15:72:d9:e0:
7b:16:c2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:06:50 2026 by rpki-client