Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft
File: EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft (raw, json)
Hash identifier: SxgK4S3lrK1VKcldwB20sOMgVoC01BbHqPmWMGUjMXg=
Subject key identifier: 00:3B:0C:E9:ED:90:BB:B1:1A:5A:0D:28:F8:CB:A5:9E:27:E4:7B:1B
Authority key identifier: 10:E0:5D:AB:BC:F1:4D:53:01:5A:B8:FF:1E:4B:D7:29:7A:CB:0E:77
Certificate issuer: /CN=10e05dabbcf14d53015ab8ff1e4bd7297acb0e77
Certificate serial: 01A0563109619C667BD47746836B37EFF262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft
Manifest number: 0391
Signing time: Mon 31 Aug 2026 05:00:49 +0000
Manifest this update: Mon 31 Aug 2026 05:00:49 +0000
Manifest next update: Tue 01 Sep 2026 05:00:49 +0000
Files and hashes: 1: 6XKN9mbXIZSOV6lIZCe171oGYFI.roa (hash: y46Uc83KEsrnQfYqTwtEh8WVRZS0uyMCAN5uYCStLoQ=)
2: EOBdq7zxTVMBWrj_HkvXKXrLDnc.crl (hash: SscOJSM7wS0+rkMrffqaPvpaxWhfF25yI43/4Y39U7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:56:31:09:61:9c:66:7b:d4:77:46:83:6b:37:ef:f2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10e05dabbcf14d53015ab8ff1e4bd7297acb0e77
Validity
Not Before: Aug 31 05:00:49 2026 GMT
Not After : Sep 1 05:00:49 2026 GMT
Subject: CN=003b0ce9ed90bbb11a5a0d28f8cba59e27e47b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:63:1d:66:5a:9b:18:bc:8c:20:f6:a7:72:4f:
94:71:70:4a:77:4a:99:ae:c8:25:f8:72:d8:38:27:
a3:a9:bc:bf:4d:3f:75:9f:c6:ee:95:c4:e0:3d:39:
17:76:8f:0a:96:46:f3:78:24:c1:a0:83:ac:79:95:
ed:9a:74:27:d3:88:81:81:59:0f:72:ce:d7:d4:2e:
92:fb:d0:c8:89:24:77:74:c8:47:af:93:9c:4b:e3:
8d:4e:1d:a8:9a:2b:42:70:b3:4e:74:90:2e:86:73:
b3:92:e3:3e:22:c0:84:52:6f:55:0c:b1:c8:26:7e:
28:c5:84:b5:95:e9:09:93:bb:b1:15:5d:9d:5b:1b:
11:26:cd:d4:5a:ec:87:c6:82:14:7e:89:03:03:e0:
45:d1:75:f6:2f:d7:ff:8b:02:56:02:4e:db:19:df:
4c:90:e2:7a:8d:b4:03:b5:f5:00:70:55:d2:65:5a:
d6:75:8b:49:cb:7d:19:21:bc:21:24:6d:fe:bb:b0:
89:10:48:d9:f4:37:f3:3f:5a:fd:fe:c1:53:73:b8:
1f:6d:e0:94:58:6d:12:bd:dd:0b:42:c6:df:3a:38:
33:bd:c6:19:38:c1:a2:97:60:7c:4c:60:ac:0f:1f:
b3:6a:22:02:dc:eb:21:9c:b2:7a:07:15:46:1d:1c:
a4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3B:0C:E9:ED:90:BB:B1:1A:5A:0D:28:F8:CB:A5:9E:27:E4:7B:1B
X509v3 Authority Key Identifier:
keyid:10:E0:5D:AB:BC:F1:4D:53:01:5A:B8:FF:1E:4B:D7:29:7A:CB:0E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:7a:5b:e2:13:98:4c:fc:fb:e8:75:8d:de:55:e6:08:4f:dd:
b5:13:05:d9:e1:ac:ae:d3:61:24:1e:3a:6e:76:1d:7d:a3:4e:
c6:18:2e:73:77:cc:b6:d5:25:43:2b:75:b1:45:15:4a:22:a3:
d5:02:e3:1f:80:3e:5b:0a:10:27:ee:3d:72:1b:87:89:c1:02:
3f:c6:d0:82:e5:d8:00:6e:2b:65:82:0c:06:73:76:fd:ae:37:
6f:cd:d3:62:05:69:54:66:c1:1b:2a:f5:66:d3:21:9e:36:94:
74:44:07:10:12:f1:c0:2b:8a:50:ab:62:3e:48:a1:41:31:91:
37:db:60:22:d6:0f:33:c2:40:45:72:ac:57:61:c0:ce:a4:a1:
4d:f5:17:b2:05:3a:f7:58:d2:23:49:44:f2:5b:61:3f:c6:be:
ca:57:00:de:0f:f9:a9:1d:34:ae:23:c0:6a:e6:65:22:25:56:
71:af:1c:3b:cb:b3:4b:f3:5b:f0:fb:5b:19:02:71:b8:fa:28:
3c:5d:f9:e3:0d:c8:e2:4b:b3:ed:09:4d:4c:01:c0:a7:6b:15:
8d:b7:bf:42:8a:7e:4f:d0:99:65:5b:93:dd:e7:5b:57:bf:7d:
de:15:2b:8c:78:78:d3:73:ed:c0:bd:a8:8b:bc:93:b6:00:c0:
b4:d6:b5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:09:52 2026 by rpki-client