Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
File: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft (raw, json)
Hash identifier: e75VZDswRrsnCm8403dSNX8dZoYIz1wyDkuVc7wxTYc=
Subject key identifier: D2:39:FF:94:C9:42:D6:52:FB:25:76:9E:D9:5F:FC:41:75:33:00:9C
Authority key identifier: D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
Certificate issuer: /CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Certificate serial: 01A000CA3CA3CE141D37096571B25725DE31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
Manifest number: 12B3
Signing time: Fri 14 Aug 2026 15:00:48 +0000
Manifest this update: Fri 14 Aug 2026 15:00:48 +0000
Manifest next update: Sat 15 Aug 2026 15:00:48 +0000
Files and hashes: 1: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl (hash: 0JtWRsYW6JURDohjV7N56+R78A1ZLOCvn5ZMURlSVII=)
2: 9gVKfPDu8oaxgCYhsIHGv4QIfWU.roa (hash: fllRN8SucuRDRWnVjdcisQzmvofCxZ5K6VMo5ZRY8Z0=)
3: YOp__Ry-NGpngn9AjDGoHEbjeCg.roa (hash: ON5r8fZJQGVj6wPi39Ya/7ATYu3d/0MWZ+FMIC4DzPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:3c:a3:ce:14:1d:37:09:65:71:b2:57:25:de:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Validity
Not Before: Aug 14 15:00:48 2026 GMT
Not After : Aug 15 15:00:48 2026 GMT
Subject: CN=d239ff94c942d652fb25769ed95ffc417533009c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:94:6a:14:d6:47:8e:87:55:82:86:34:e9:34:
00:2d:f6:54:66:90:05:b1:dd:6c:51:5d:f0:9f:db:
27:f0:aa:ec:42:09:4a:5f:86:41:fe:e9:35:33:50:
a2:78:c1:66:10:81:3b:25:1f:74:98:01:b2:68:a1:
b2:14:8e:7e:3a:ac:96:68:48:dc:f8:43:3b:e3:45:
ff:95:fc:a9:b2:5b:a3:3b:a8:21:4c:02:a6:94:59:
88:6f:a4:32:da:a3:26:c4:71:92:ff:a4:98:cf:df:
03:48:67:d3:9b:2f:38:77:7f:23:80:6d:1b:bb:30:
ab:a4:3b:79:e7:ab:6b:ef:98:cf:61:0a:79:4a:86:
58:eb:eb:4a:d3:fc:31:0b:d3:df:51:ba:78:56:a3:
c3:df:1f:a4:f7:44:f5:00:7d:18:9d:bb:15:b8:8c:
81:30:1f:ca:bc:c8:f8:b1:79:79:aa:03:cf:c2:33:
bc:5e:e5:48:22:a8:79:70:eb:cb:a8:89:99:0b:3c:
57:bd:60:de:50:43:07:66:c0:cf:6f:15:4c:68:79:
86:44:93:f8:52:08:6a:bf:d8:bc:29:0d:ca:dd:1d:
75:fc:43:fb:0e:06:98:25:18:a9:d2:71:78:15:dd:
57:6d:26:d6:a0:af:e7:cb:db:fb:71:70:64:59:5b:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:39:FF:94:C9:42:D6:52:FB:25:76:9E:D9:5F:FC:41:75:33:00:9C
X509v3 Authority Key Identifier:
keyid:D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:8f:38:d3:e8:73:bd:88:d4:3c:16:99:0d:ea:4c:d4:95:08:
ab:1b:23:43:3f:3b:86:d2:85:a4:5b:a9:39:4f:34:b5:1b:e4:
ac:46:63:c8:fd:f2:25:55:ef:b1:d2:56:98:35:a5:df:44:ff:
c4:1d:af:3a:94:f3:62:5f:be:d9:83:04:67:5d:11:9e:4f:af:
c2:d6:89:d2:1b:52:91:40:5f:15:9c:a4:bc:ae:c5:1a:6e:76:
a3:e9:a2:0f:c8:66:2f:f0:b6:0c:5e:e9:7d:1f:23:5b:97:eb:
34:20:cb:16:02:b9:92:d5:6c:d2:f1:f9:44:61:d0:81:34:c9:
ae:9a:8e:f2:4b:97:c1:9b:36:93:ca:eb:a8:26:1e:29:bf:b6:
36:48:23:5c:b2:3f:72:a6:f1:35:59:80:eb:be:71:46:af:3f:
f7:e1:f3:e6:05:2a:48:60:4d:d5:a6:35:52:3c:14:f5:3e:9b:
60:fc:6f:b3:50:84:a3:66:cf:fc:f2:5b:71:70:d9:e0:7e:44:
4b:50:ca:28:19:80:2e:fd:c6:2b:b0:10:a9:6b:bb:18:a1:4c:
f0:24:46:80:c1:46:c2:9d:de:52:5f:35:c5:64:0a:d4:fe:6b:
29:8e:0b:ea:f7:47:13:f1:83:65:92:5a:68:a6:98:b2:0c:ea:
d2:da:14:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:35 2026 by rpki-client