Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
File: 2eeOhm6SBNAab1LTn9hP8JALIdQ.mft (raw, json)
Hash identifier: l6VO0LfF8iWEDUY0Ni3/ieHCVp9kANfCq9MZ9nPqG6o=
Subject key identifier: 99:83:34:C8:26:56:A2:2F:BE:7E:0C:F0:08:81:D1:0A:AF:67:22:55
Authority key identifier: D9:E7:8E:86:6E:92:04:D0:1A:6F:52:D3:9F:D8:4F:F0:90:0B:21:D4
Certificate issuer: /CN=d9e78e866e9204d01a6f52d39fd84ff0900b21d4
Certificate serial: 01A0005C51D812A7038AE86B4FDD85F4E86F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
Manifest number: 07C3
Signing time: Fri 14 Aug 2026 13:00:45 +0000
Manifest this update: Fri 14 Aug 2026 13:00:45 +0000
Manifest next update: Sat 15 Aug 2026 13:00:45 +0000
Files and hashes: 1: 2eeOhm6SBNAab1LTn9hP8JALIdQ.crl (hash: cwvKk/uX5919xNr2GGiIQ7BeZnAqISVVWpJtRUHqd54=)
2: KvxEQrxDZmBIxkbUUNQp6HsFC_0.roa (hash: BSUmQnkTle9HViYYJkRZjSse8w3JaRvHWOR9HNyaels=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:51:d8:12:a7:03:8a:e8:6b:4f:dd:85:f4:e8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e78e866e9204d01a6f52d39fd84ff0900b21d4
Validity
Not Before: Aug 14 13:00:45 2026 GMT
Not After : Aug 15 13:00:45 2026 GMT
Subject: CN=998334c82656a22fbe7e0cf00881d10aaf672255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:19:cb:f8:6e:29:3b:e8:fe:78:b2:59:cc:fd:
d9:d3:6e:5e:a5:20:ef:2d:19:84:77:c9:cb:2b:7e:
0e:1e:79:52:47:52:31:45:0c:a5:98:78:ac:6b:a6:
37:08:7e:59:a6:24:91:54:c9:fd:34:84:33:6b:57:
35:0b:55:55:4a:3c:ae:d4:46:8d:57:25:0d:f7:fd:
dc:0c:fb:92:e6:36:4f:b8:4c:61:72:0a:f6:2f:0e:
f3:6f:94:28:8f:ce:67:fe:a0:1c:46:88:4b:27:09:
0d:dd:0b:e8:77:c2:e3:ce:f3:ee:55:c7:d9:f6:32:
11:5d:17:2d:9e:dd:ff:50:fc:d6:d7:1b:86:58:72:
6f:e4:9f:ac:69:fd:d5:fb:7b:6f:a5:42:44:c0:1a:
7f:e7:ba:85:b2:bd:54:53:75:25:dd:a5:f4:2a:7d:
f2:32:b7:76:5e:07:19:1a:e8:5f:1a:d7:e7:f7:be:
cd:fa:d7:f5:ae:49:b0:a0:d4:58:c2:d8:eb:19:95:
97:eb:b3:38:56:2b:cd:b0:24:c9:a1:a5:43:2c:da:
93:7e:97:8d:1c:19:bc:7e:2d:c6:45:fe:a1:48:48:
26:6e:c5:b3:a9:86:ca:f4:b4:8e:cc:b2:e6:a9:27:
f1:f7:be:66:59:82:6b:68:87:fc:04:9d:9b:24:da:
6c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:83:34:C8:26:56:A2:2F:BE:7E:0C:F0:08:81:D1:0A:AF:67:22:55
X509v3 Authority Key Identifier:
keyid:D9:E7:8E:86:6E:92:04:D0:1A:6F:52:D3:9F:D8:4F:F0:90:0B:21:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f4:b9:4d:1f:60:32:16:84:90:bb:6c:28:b3:aa:cf:3d:6a:
5e:51:ba:fb:0e:4d:9a:5d:5a:57:07:40:e8:73:58:52:86:71:
20:89:cd:b2:21:6c:13:a9:1a:32:9b:d2:ac:ca:4d:41:93:c3:
68:ae:dc:20:e3:3f:f6:cd:e2:60:71:34:51:33:d4:f5:d3:0e:
27:fe:d5:77:21:b4:57:e5:94:eb:a1:10:34:bd:12:e2:a7:44:
91:ef:a0:8e:1e:c9:aa:be:60:0c:34:48:06:17:09:0e:87:0e:
09:b6:93:44:19:7c:e7:b1:cf:71:5d:2c:bf:b9:df:67:fa:30:
aa:0b:c8:f9:48:f8:c8:2d:b4:c5:8a:4e:98:24:55:3f:5f:c1:
ac:15:fb:6b:02:00:09:ed:a6:5c:1c:1c:88:6c:79:c1:3a:05:
a1:a5:d8:a9:29:47:fc:3c:c9:e2:98:78:32:f9:cf:8a:24:3f:
31:47:da:a7:3f:ca:65:94:44:87:c7:b9:25:9a:48:a1:08:1a:
4e:56:89:c6:d3:44:1a:04:27:09:d6:8f:c6:a0:b5:69:6c:60:
aa:04:39:6b:df:9a:2e:a9:36:3a:e5:11:47:03:65:63:b3:cb:
f2:2e:c6:e3:fb:3f:53:ae:e5:d0:f1:de:a4:f9:6c:8c:56:3e:
92:74:09:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:10 2026 by rpki-client