Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
File: EoEZrBeON5iQNuoposD0YwaWz-g.mft (raw, json)
Hash identifier: 8ol+YM7IgwwFESJUqL8sjzqdEicKyimt6NF8ONCoLN8=
Subject key identifier: 88:45:0D:2A:8B:21:0B:0A:99:59:C2:12:22:63:12:44:E1:65:8C:FE
Authority key identifier: 12:81:19:AC:17:8E:37:98:90:36:EA:29:A2:C0:F4:63:06:96:CF:E8
Certificate issuer: /CN=128119ac178e37989036ea29a2c0f4630696cfe8
Certificate serial: 019EFD5FA85875C9E7526CF38AFD1B9F80DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
Manifest number: 01F1
Signing time: Thu 25 Jun 2026 06:02:44 +0000
Manifest this update: Thu 25 Jun 2026 06:02:44 +0000
Manifest next update: Fri 26 Jun 2026 06:02:44 +0000
Files and hashes: 1: EoEZrBeON5iQNuoposD0YwaWz-g.crl (hash: 7J330M6YW3+jWd8wHnSvXObTkT3vuIeNH4M0DFeT1Ws=)
2: MoyUhaJrKyyg7NdI-cgC8UrZDnc.roa (hash: Blton8K6qNZytZrnFkrDQwMOUJgcucmO6AJ7qz+2/EQ=)
3: dfjch8XLq-4wXUHU0X4FRj8rZtw.asa (hash: LprVvfFT3+5D2/SGgkoYdn2pNQPb3rgY3LcWQ8dnja0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fd:5f:a8:58:75:c9:e7:52:6c:f3:8a:fd:1b:9f:80:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128119ac178e37989036ea29a2c0f4630696cfe8
Validity
Not Before: Jun 25 06:02:44 2026 GMT
Not After : Jun 26 06:02:44 2026 GMT
Subject: CN=88450d2a8b210b0a9959c21222631244e1658cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:07:7b:12:a9:48:74:c0:48:64:6a:33:e9:98:
c0:18:79:c5:13:06:ce:bb:7d:f6:ac:3a:3e:3c:34:
50:db:3d:be:a3:e1:fa:98:3c:3d:14:c6:4a:76:68:
2c:e3:a6:83:3a:90:64:64:fd:2e:94:4e:71:32:de:
03:68:d9:4b:45:9e:2b:c3:06:24:55:e5:b8:c2:9f:
b8:79:89:aa:01:e6:7c:38:07:4d:5b:1c:1d:1e:53:
af:8f:db:e0:95:1b:c8:4a:ff:6e:99:40:53:0a:d6:
1d:43:07:f9:98:ba:36:23:93:d1:97:20:c5:f2:23:
df:3e:30:7e:df:a0:31:6e:da:47:d3:1d:55:b6:0a:
e9:be:03:58:f0:b6:46:5d:aa:f9:33:4a:74:ff:e8:
60:b1:64:ba:2b:2e:78:93:b8:95:8a:a8:da:54:ad:
38:87:8d:b6:f2:18:be:5e:00:1e:73:15:71:8f:6d:
69:8a:89:b4:7f:80:f6:91:55:b7:6c:d9:df:e8:86:
6d:0b:11:31:11:34:7d:4b:93:cc:82:80:da:e7:62:
31:16:72:6d:9e:52:a5:d6:10:b5:40:45:e3:fb:29:
70:02:6a:a3:bd:37:80:a5:91:5d:3e:cd:8b:3b:cd:
84:25:06:cf:77:33:11:21:f8:ae:ca:39:3e:03:a2:
a7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:45:0D:2A:8B:21:0B:0A:99:59:C2:12:22:63:12:44:E1:65:8C:FE
X509v3 Authority Key Identifier:
keyid:12:81:19:AC:17:8E:37:98:90:36:EA:29:A2:C0:F4:63:06:96:CF:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9e:13:64:16:74:51:23:f4:95:e8:e1:0c:1a:fc:09:6d:0c:
32:7b:01:6a:03:81:fb:79:20:76:0b:65:56:bd:3f:2b:7f:4d:
e1:70:8d:0a:19:c6:a2:a1:a1:5a:6d:41:9f:ef:66:2e:9d:c1:
b5:3d:d1:a9:1b:4e:28:0e:99:7f:48:8b:21:0c:18:90:cc:cc:
a9:34:1d:08:aa:6c:29:0b:ea:6f:f3:74:9a:b7:ca:18:9b:5b:
3a:72:63:5d:62:8b:81:61:2a:9b:f2:2d:23:77:e0:e3:45:f0:
a1:6e:f6:dc:e1:a2:78:24:86:a4:4e:87:08:30:00:8e:db:0e:
2b:86:98:33:e1:70:66:16:13:90:0e:bb:eb:a4:1a:1a:cb:cd:
9c:a1:cb:a2:34:c5:f0:97:f7:43:85:8d:5e:09:8a:95:38:c2:
7f:28:9b:5d:e7:26:36:c8:6b:79:40:8a:ff:6d:bf:cb:35:c8:
ef:3d:45:00:2e:73:e9:00:8f:3b:66:4c:c9:79:3a:87:ff:eb:
c2:99:e3:2d:c3:d7:a1:2a:eb:09:a1:6a:b7:94:14:b4:ba:37:
00:31:ba:9f:ff:f7:12:f2:8a:bd:87:a8:96:da:c2:b9:e2:a4:
11:0b:49:52:00:2e:43:01:89:62:43:1a:eb:3a:38:41:08:68:
d6:5a:f5:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ79X6hYdcnnUmzziv0bn4DbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyODExOWFjMTc4ZTM3OTg5MDM2ZWEyOWEyYzBmNDYzMDY5
NmNmZTgwHhcNMjYwNjI1MDYwMjQ0WhcNMjYwNjI2MDYwMjQ0WjAzMTEwLwYDVQQD
Eyg4ODQ1MGQyYThiMjEwYjBhOTk1OWMyMTIyMjYzMTI0NGUxNjU4Y2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQd7EqlIdMBIZGoz6ZjAGHnFEwbO
u332rDo+PDRQ2z2+o+H6mDw9FMZKdmgs46aDOpBkZP0ulE5xMt4DaNlLRZ4rwwYk
VeW4wp+4eYmqAeZ8OAdNWxwdHlOvj9vglRvISv9umUBTCtYdQwf5mLo2I5PRlyDF
8iPfPjB+36AxbtpH0x1VtgrpvgNY8LZGXar5M0p0/+hgsWS6Ky54k7iViqjaVK04
h4228hi+XgAecxVxj21piom0f4D2kVW3bNnf6IZtCxExETR9S5PMgoDa52IxFnJt
nlKl1hC1QEXj+ylwAmqjvTeApZFdPs2LO82EJQbPdzMRIfiuyjk+A6KnYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhFDSqLIQsKmVnCEiJjEkThZYz+MB8GA1UdIwQY
MBaAFBKBGawXjjeYkDbqKaLA9GMGls/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW9FWnJCZU9ONWlRTnVvcG9zRDBZd2FXei1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84MGM4M2ItNDcwNi00ZDE2LTlmMjAt
N2VhMGRlYjgzMGFiLzEvRW9FWnJCZU9ONWlRTnVvcG9zRDBZd2FXei1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC84MGM4M2ItNDcwNi00ZDE2LTlmMjAtN2VhMGRlYjgzMGFi
LzEvRW9FWnJCZU9ONWlRTnVvcG9zRDBZd2FXei1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQp4TZBZ0
USP0lejhDBr8CW0MMnsBagOB+3kgdgtlVr0/K39N4XCNChnGoqGhWm1Bn+9mLp3B
tT3RqRtOKA6Zf0iLIQwYkMzMqTQdCKpsKQvqb/N0mrfKGJtbOnJjXWKLgWEqm/It
I3fg40XwoW723OGieCSGpE6HCDAAjtsOK4aYM+FwZhYTkA6766QaGsvNnKHLojTF
8Jf3Q4WNXgmKlTjCfyibXecmNshreUCK/22/yzXI7z1FAC5z6QCPO2ZMyXk6h//r
wpnjLcPXoSrrCaFqt5QUtLo3ADG6n//3EvKKvYeoltrCueKkEQtJUgAuQwGJYkMa
6zo4QQho1lr1Yw==
-----END CERTIFICATE-----
Generated at Thu Jun 25 09:42:20 2026 by rpki-client