Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
File: Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft (raw, json)
Hash identifier: H+1UwBbYSzCb81Y1rA72YX/914bJswbTwXRX/+JGN10=
Subject key identifier: BC:84:97:C8:6C:5A:E7:7F:36:AE:B3:B8:22:A0:C6:4E:05:C6:DE:B9
Authority key identifier: 12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2
Certificate issuer: /CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2
Certificate serial: 01A06D5E1B2B0F6D2692B46198BD6D852942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
Manifest number: 1A3D
Signing time: Fri 04 Sep 2026 17:01:18 +0000
Manifest this update: Fri 04 Sep 2026 17:01:18 +0000
Manifest next update: Sat 05 Sep 2026 17:01:18 +0000
Files and hashes: 1: 02E3d24-cYfZLV0Glu5j5jr_NxA.roa (hash: HrKA9gSIFPjwKpZcyEJ7If9t0tL8iCIaN1xyRHRej0w=)
2: Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl (hash: LouRthpoheOkL6gZV6XV9HRGjA6uitmlr2UUHXNHCxY=)
3: ck4fqmMue0bgQTx_C7e4u7qQu8Y.roa (hash: 3P+Qk6FSe+iXFNy50RbYcBKfyRXeennfx5/RBemjyco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:5e:1b:2b:0f:6d:26:92:b4:61:98:bd:6d:85:29:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2
Validity
Not Before: Sep 4 17:01:18 2026 GMT
Not After : Sep 5 17:01:18 2026 GMT
Subject: CN=bc8497c86c5ae77f36aeb3b822a0c64e05c6deb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:70:08:58:f9:60:bf:b1:07:76:ae:6a:50:f3:
72:d6:ef:4d:ee:73:fe:22:f7:a3:8f:9f:0a:79:3a:
73:16:f4:26:a7:d1:c4:2a:0a:7d:fd:7a:93:9e:b8:
7c:99:a0:b2:b3:a7:8f:5a:a3:a4:ef:bb:cd:65:52:
4d:9e:80:03:a2:22:76:ea:f3:67:74:9d:6c:ef:73:
1b:65:fc:6a:11:ee:93:2a:c7:82:0e:49:ff:a5:9a:
7a:42:36:7f:f8:f8:56:8a:90:15:2e:d2:27:bc:c5:
7f:86:04:c2:2c:c6:ed:16:bd:a9:b3:26:33:43:91:
52:b2:f9:dd:75:74:25:97:8e:49:14:8a:1f:b5:28:
df:6e:48:92:73:d5:59:7e:a5:65:44:df:44:2b:a0:
22:7d:53:92:34:36:82:a2:c8:8a:50:6d:ba:24:00:
cd:d3:82:ef:4a:d6:4c:eb:92:e5:54:55:03:aa:d1:
f7:47:46:c3:55:5e:83:52:3d:f0:be:14:a4:2e:20:
93:41:fb:ad:f8:a5:df:de:ac:fb:32:82:de:18:b1:
ed:f2:cd:d1:68:1e:8b:df:0c:21:b2:51:d2:1f:84:
4b:ca:8e:e4:a5:a2:c2:dd:f6:30:9d:3e:ed:cc:31:
ff:af:ed:11:f8:df:96:92:6a:89:22:d7:36:a7:33:
8e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:84:97:C8:6C:5A:E7:7F:36:AE:B3:B8:22:A0:C6:4E:05:C6:DE:B9
X509v3 Authority Key Identifier:
keyid:12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b3:27:93:62:ed:6e:51:50:1c:84:57:bc:89:8a:00:ec:3c:
03:0e:e9:26:c3:64:84:d1:a0:ba:bb:82:d7:ea:9a:e5:6e:42:
ee:f7:96:4b:8b:99:8b:be:f1:56:70:6e:30:3d:00:d4:19:47:
e9:e7:52:73:33:79:29:4e:69:70:6b:85:4b:ad:c3:38:8f:a0:
d7:fa:bc:68:e4:9e:27:31:9a:ed:d4:a8:1a:13:9e:7a:ef:17:
3b:a9:cf:19:5c:5e:11:cd:30:28:60:22:bf:c5:9a:ca:b0:68:
68:dc:9c:44:fe:49:c5:c7:b7:06:72:e0:e6:05:9d:96:94:56:
69:c1:ce:4f:c5:7a:87:da:99:00:0e:eb:7d:9c:b3:ac:7b:e0:
1e:ad:47:63:a7:29:da:5b:92:81:ba:13:d3:40:b1:60:be:83:
6e:35:b5:34:99:14:04:6e:fa:d7:19:7b:db:f1:d1:45:6e:7c:
6e:c6:3a:0f:36:db:58:a0:76:50:eb:9d:82:58:96:13:4f:25:
71:db:f0:e3:4b:14:20:59:91:4f:e8:4e:62:41:09:1b:16:27:
2f:4a:c1:02:64:c4:23:d7:f5:ae:7b:db:23:53:53:d7:7a:7d:
c7:19:ae:52:34:a5:df:10:96:23:1a:d8:46:4b:cf:2a:39:c7:
b9:c2:d6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:47:42 2026 by rpki-client