
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft
File: EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft (raw, json)
Hash identifier: rkV9QX7kB9jQgx0yIAMkGrotN9YrghNUVAqtP5scIPg=
Subject key identifier: 86:DB:5E:EA:CA:35:BE:14:F8:FA:35:25:BD:D8:36:0E:71:9C:5A:F1
Authority key identifier: 10:E0:5D:AB:BC:F1:4D:53:01:5A:B8:FF:1E:4B:D7:29:7A:CB:0E:77
Certificate issuer: /CN=10e05dabbcf14d53015ab8ff1e4bd7297acb0e77
Certificate serial: 019F32950EDCD7286CEC6FD1C0BB099F2E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft
Manifest number: 02FA
Signing time: Sun 05 Jul 2026 14:00:57 +0000
Manifest this update: Sun 05 Jul 2026 14:00:57 +0000
Manifest next update: Mon 06 Jul 2026 14:00:57 +0000
Files and hashes: 1: 6XKN9mbXIZSOV6lIZCe171oGYFI.roa (hash: y46Uc83KEsrnQfYqTwtEh8WVRZS0uyMCAN5uYCStLoQ=)
2: EOBdq7zxTVMBWrj_HkvXKXrLDnc.crl (hash: 3dABfO7lB6TY0YSOdJbZcNc8ipl4duAEh1HAl7wNZkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Jul 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:32:95:0e:dc:d7:28:6c:ec:6f:d1:c0:bb:09:9f:2e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10e05dabbcf14d53015ab8ff1e4bd7297acb0e77
Validity
Not Before: Jul 5 14:00:57 2026 GMT
Not After : Jul 6 14:00:57 2026 GMT
Subject: CN=86db5eeaca35be14f8fa3525bdd8360e719c5af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:eb:cf:32:19:16:74:da:70:87:86:e6:21:e4:
45:18:40:31:e8:80:ec:4b:fd:f2:f5:01:75:72:31:
7d:aa:13:a4:10:d0:5c:6a:d0:ca:89:c0:da:80:1a:
aa:e8:3a:eb:fc:60:a5:c4:32:fa:fc:31:ed:69:7b:
9d:9b:87:13:99:a2:ee:5c:33:a0:4f:2a:40:5b:ba:
eb:f0:a3:93:02:b5:8e:15:33:b4:a0:f2:77:7f:1e:
84:90:5b:ef:26:44:14:1f:33:36:8d:70:09:47:f8:
d4:c2:92:0a:a6:4e:f0:7d:9a:8e:1c:58:4a:d7:61:
90:80:3d:f9:9b:42:f2:53:5d:41:98:8a:4c:94:7a:
8a:bf:55:4f:14:45:ca:87:35:9d:80:ee:56:4d:f4:
04:7c:e7:9f:fd:14:91:9d:b7:3f:95:65:3d:bd:d0:
f7:ea:fd:8f:e9:fb:e5:5f:a9:e2:aa:aa:9b:d7:17:
3b:c0:73:72:05:b3:67:18:c8:41:71:3f:8b:f0:bb:
69:16:76:ce:f4:a3:3c:00:6d:0d:a9:d0:51:1e:9f:
c9:fe:b8:0e:f8:7c:b4:ea:00:b0:c6:55:92:a6:15:
92:5b:6d:96:7d:8f:bb:92:70:47:0e:3c:70:5d:25:
0c:1a:d9:21:d4:2f:ea:ec:a3:8e:e5:5f:f3:de:6f:
ba:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DB:5E:EA:CA:35:BE:14:F8:FA:35:25:BD:D8:36:0E:71:9C:5A:F1
X509v3 Authority Key Identifier:
keyid:10:E0:5D:AB:BC:F1:4D:53:01:5A:B8:FF:1E:4B:D7:29:7A:CB:0E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:3a:39:eb:e6:b5:7f:5c:2f:c4:95:67:fa:96:9f:a2:9c:c2:
64:44:8c:60:00:7f:4f:97:86:76:a0:5b:50:1b:c7:b8:d4:62:
27:73:9a:64:b5:f2:e7:e2:04:fa:a8:43:ef:17:63:67:a1:c9:
c1:47:22:a2:0d:24:c3:12:ab:e0:24:a6:5c:7c:04:03:33:b0:
43:88:c7:54:2c:6c:9e:ea:3c:53:b6:ed:cc:80:2e:3e:83:8c:
52:ee:8b:05:41:a1:16:b3:c8:af:62:3c:e2:9a:48:a1:19:db:
51:95:ef:e4:7f:bc:24:18:84:40:12:0c:34:a9:17:74:ab:a3:
1d:45:2c:77:ce:62:59:02:d0:de:c2:2a:f2:48:ad:1c:94:28:
16:47:ba:2c:b9:b9:83:ee:4f:02:a4:cb:ed:ce:26:d5:9a:5c:
64:35:1b:1b:e5:a2:50:d6:c7:d6:5b:5e:6a:ff:80:7e:35:4f:
ea:92:3f:69:96:ac:34:9b:52:73:e0:48:1f:83:03:35:b3:bc:
4e:f1:b0:55:c3:85:77:91:0c:8c:be:8d:c6:18:f2:0d:d4:04:
34:1b:58:c7:89:36:f0:a7:a2:ee:5c:ec:56:eb:6a:5b:cb:1d:
73:c5:9a:13:eb:f0:39:23:00:6d:ef:44:11:1e:61:e4:aa:32:
9e:43:98:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 19:58:17 2026 by rpki-client