Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft
File: EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft (raw, json)
Hash identifier: WFTte3HlQLMHlIvYOyNCvSeW1eIMP6lWYwDLV+C9+4g=
Subject key identifier: BE:64:49:09:65:A6:5F:0E:C5:B6:81:A7:C0:EB:8B:9C:1F:F7:15:B6
Authority key identifier: 12:86:8F:5E:34:EE:FE:FC:E6:55:C1:BB:83:83:29:9F:A5:6C:5C:82
Certificate issuer: /CN=12868f5e34eefefce655c1bb8383299fa56c5c82
Certificate serial: 019D38D373A765571EC579A45B078076E1DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EoaPXjTu_vzmVcG7g4Mpn6VsXII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft
Manifest number: 140D
Signing time: Sun 29 Mar 2026 09:01:14 +0000
Manifest this update: Sun 29 Mar 2026 09:01:14 +0000
Manifest next update: Mon 30 Mar 2026 09:01:14 +0000
Files and hashes: 1: EoaPXjTu_vzmVcG7g4Mpn6VsXII.crl (hash: saxUkGw7zTBBrPwbSEbWxtRE0aMlzCYUJRBHaBZgO6M=)
2: c3TZ80LQFPNTdNL7tvVVaimWE50.roa (hash: BloeRWk/RRwEgQcAGk6aFEwqm1qphUForCGmrYa3jto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft
rsync://rpki.ripe.net/repository/DEFAULT/EoaPXjTu_vzmVcG7g4Mpn6VsXII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:73:a7:65:57:1e:c5:79:a4:5b:07:80:76:e1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12868f5e34eefefce655c1bb8383299fa56c5c82
Validity
Not Before: Mar 29 09:01:14 2026 GMT
Not After : Mar 30 09:01:14 2026 GMT
Subject: CN=be64490965a65f0ec5b681a7c0eb8b9c1ff715b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b2:f2:25:df:05:d3:50:08:2b:cd:ae:4d:e4:
2e:7d:a3:4a:46:82:b1:fc:85:b0:32:ba:b5:a1:69:
de:01:d6:e8:f8:7c:50:8e:9e:2f:8b:60:46:2a:da:
1e:9c:70:9c:39:3c:d3:f7:db:e7:21:89:32:8d:b7:
1a:0b:da:98:1b:35:4a:7c:ca:01:fb:1d:3d:f5:38:
f4:52:76:51:81:26:8a:d4:fc:1f:7c:b2:68:22:bc:
51:a8:ad:d0:b7:0a:00:88:49:b6:8e:f2:60:25:a8:
8d:7e:1b:3c:c6:b3:32:0e:19:78:4c:56:d2:72:56:
ef:fb:71:19:da:f3:16:08:23:0b:90:80:b9:78:9d:
7a:3c:2e:c5:ce:b0:44:b6:2d:cc:34:4a:75:cc:f6:
32:b0:49:be:18:a7:b6:a3:24:59:d2:d1:c4:5b:8a:
ba:04:1c:9e:bc:73:b8:95:86:a2:70:2f:de:2c:81:
e8:08:a6:0e:aa:b8:51:2d:3c:bd:f2:db:d3:0c:b4:
2b:85:77:01:34:30:25:4d:cf:99:7f:95:24:74:3f:
dc:ce:c8:51:45:ea:41:28:43:46:e2:2b:1d:ec:09:
eb:e9:21:05:91:7d:87:46:f8:6b:37:62:e6:95:6c:
7c:f3:e3:0e:4a:0d:38:90:4a:da:bc:25:1c:56:d9:
53:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:64:49:09:65:A6:5F:0E:C5:B6:81:A7:C0:EB:8B:9C:1F:F7:15:B6
X509v3 Authority Key Identifier:
keyid:12:86:8F:5E:34:EE:FE:FC:E6:55:C1:BB:83:83:29:9F:A5:6C:5C:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoaPXjTu_vzmVcG7g4Mpn6VsXII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:96:b4:c7:b3:74:4f:0f:98:39:77:7f:52:d7:cb:3e:c9:3f:
ee:21:09:85:5e:17:b4:c7:5c:bd:8d:ac:7a:61:db:4e:47:78:
b4:7a:eb:8b:e8:d7:ec:2e:c7:6e:a2:7a:81:68:d5:e2:d8:c4:
e0:c5:4c:a6:0f:57:bd:f0:bb:63:8d:5f:91:30:4d:68:d1:ae:
e5:be:7f:df:94:a5:2d:ff:3c:67:21:2f:a1:f6:e5:6f:bf:6c:
5f:87:17:d9:d9:0d:30:9b:c5:80:7f:31:91:a3:a9:25:48:3f:
c8:7e:c7:e0:09:4b:6a:a1:48:0c:1e:42:6d:4a:56:68:f5:c7:
d7:62:06:96:60:fc:8f:25:19:7a:bb:8a:cd:79:23:41:9e:39:
06:c6:ed:3f:25:b4:07:a0:92:2e:cb:88:4c:c7:9a:64:a0:0e:
64:42:0e:da:4a:4f:a2:fb:13:0f:56:f2:8a:4e:40:3e:47:3c:
57:28:8a:40:6c:c5:ff:fe:6b:18:a8:e2:60:27:b9:35:66:3b:
d8:f0:e4:c7:4f:08:09:69:39:14:6f:ca:0f:5b:5d:65:86:3b:
ae:a2:b1:6a:3e:48:4d:f8:61:f7:92:71:04:4d:e0:7d:df:59:
ae:ba:ca:75:5e:b7:39:2c:22:ae:49:28:38:e3:c9:a2:47:86:
c0:37:31:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0403OnZVcexXmkWweAduHcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyODY4ZjVlMzRlZWZlZmNlNjU1YzFiYjgzODMyOTlmYTU2
YzVjODIwHhcNMjYwMzI5MDkwMTE0WhcNMjYwMzMwMDkwMTE0WjAzMTEwLwYDVQQD
EyhiZTY0NDkwOTY1YTY1ZjBlYzViNjgxYTdjMGViOGI5YzFmZjcxNWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbLyJd8F01AIK82uTeQufaNKRoKx
/IWwMrq1oWneAdbo+HxQjp4vi2BGKtoenHCcOTzT99vnIYkyjbcaC9qYGzVKfMoB
+x099Tj0UnZRgSaK1PwffLJoIrxRqK3QtwoAiEm2jvJgJaiNfhs8xrMyDhl4TFbS
clbv+3EZ2vMWCCMLkIC5eJ16PC7FzrBEti3MNEp1zPYysEm+GKe2oyRZ0tHEW4q6
BByevHO4lYaicC/eLIHoCKYOqrhRLTy98tvTDLQrhXcBNDAlTc+Zf5UkdD/czshR
RepBKENG4isd7Anr6SEFkX2HRvhrN2LmlWx88+MOSg04kEravCUcVtlT1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5kSQllpl8OxbaBp8Dri5wf9xW2MB8GA1UdIwQY
MBaAFBKGj1407v785lXBu4ODKZ+lbFyCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW9hUFhqVHVfdnptVmNHN2c0TXBuNlZzWElJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi80MzZhYTEtZjQ3YS00Y2Q1LTg3YTIt
MWYzNGVmYjViN2QxLzEvRW9hUFhqVHVfdnptVmNHN2c0TXBuNlZzWElJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi80MzZhYTEtZjQ3YS00Y2Q1LTg3YTItMWYzNGVmYjViN2Qx
LzEvRW9hUFhqVHVfdnptVmNHN2c0TXBuNlZzWElJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw5a0x7N0
Tw+YOXd/UtfLPsk/7iEJhV4XtMdcvY2semHbTkd4tHrri+jX7C7HbqJ6gWjV4tjE
4MVMpg9XvfC7Y41fkTBNaNGu5b5/35SlLf88ZyEvofblb79sX4cX2dkNMJvFgH8x
kaOpJUg/yH7H4AlLaqFIDB5CbUpWaPXH12IGlmD8jyUZeruKzXkjQZ45BsbtPyW0
B6CSLsuITMeaZKAOZEIO2kpPovsTD1byik5APkc8VyiKQGzF//5rGKjiYCe5NWY7
2PDkx08ICWk5FG/KD1tdZYY7rqKxaj5ITfhh95JxBE3gfd9ZrrrKdV63OSwirkko
OOPJokeGwDcxNg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:03 2026 by rpki-client