Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft
File: EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft (raw, json)
Hash identifier: yxuDmN3gizklWSfdas/7LGtB4j4i3D5Q2GPChEd5N7U=
Subject key identifier: 99:B1:8F:41:F5:C1:DC:5A:FF:71:5D:12:B1:1B:72:8C:C8:9E:A3:B0
Authority key identifier: 12:81:FD:01:CC:E2:55:A2:7C:2E:B3:CF:17:53:AF:68:FB:EC:28:FD
Certificate issuer: /CN=1281fd01cce255a27c2eb3cf1753af68fbec28fd
Certificate serial: 01A08C7B0D4895D7A4BD2A7B83E0E14DC8F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EoH9AcziVaJ8LrPPF1OvaPvsKP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:01:09 +0000
Manifest this update: Thu 10 Sep 2026 18:01:09 +0000
Manifest next update: Fri 11 Sep 2026 18:01:09 +0000
Files and hashes: 1: EoH9AcziVaJ8LrPPF1OvaPvsKP0.crl (hash: q3pgqsMEbJq3tV4Ww7TOqrHmqXPxJd8WB4HTaGNqxsc=)
2: UeeOGT1aFWqTWrDFmuASM8XoFWQ.roa (hash: 8GToKI8OvtXj4QOA4NLn7hg/E2c2fghSHtpWrxVk2Dw=)
3: oe-1CFwfBXxRDhex7FkwF1JYZTA.roa (hash: FBEY8qRdvuiENUskWnHAGFekMX8Uope29YCFoFBpnsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EoH9AcziVaJ8LrPPF1OvaPvsKP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:0d:48:95:d7:a4:bd:2a:7b:83:e0:e1:4d:c8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1281fd01cce255a27c2eb3cf1753af68fbec28fd
Validity
Not Before: Sep 10 18:01:09 2026 GMT
Not After : Sep 11 18:01:09 2026 GMT
Subject: CN=99b18f41f5c1dc5aff715d12b11b728cc89ea3b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:32:3c:7b:19:57:87:ea:e6:06:fe:d6:6c:11:
08:35:60:5d:ab:36:30:d4:88:67:e0:66:00:dc:b2:
f7:b2:b6:dd:1d:b9:b0:58:8d:c4:3c:e9:94:a6:a0:
1f:e9:0b:48:76:65:8f:60:4a:e1:02:1b:d7:b6:db:
e8:10:23:7e:c4:c9:9f:f8:71:65:46:d7:5d:16:52:
4c:db:c4:af:88:eb:08:05:28:98:9a:b0:72:35:34:
85:c3:1d:ac:fa:f7:aa:5c:50:06:96:ea:1f:c4:dd:
ad:4b:61:44:d1:40:70:d0:94:b7:b6:db:93:87:f0:
47:c7:8c:33:8a:a3:53:f5:b0:89:e9:1c:66:b8:0e:
b7:0c:23:98:97:d4:f7:98:83:93:6d:75:9d:88:e2:
a8:25:36:79:58:e1:9f:56:5e:2e:ba:f4:0b:87:d2:
d7:3e:2b:54:ac:b1:af:70:3e:bb:e0:56:27:af:ce:
57:40:20:03:ce:c5:50:80:3a:82:43:5c:85:aa:cd:
9b:6b:7b:b9:3f:8c:63:54:f8:a9:a3:f2:53:88:28:
ab:77:b3:8f:37:90:cc:5a:d4:16:d6:27:68:52:85:
79:68:fa:7e:89:da:78:dc:d0:20:9e:18:2a:ad:3e:
53:19:60:79:bc:f6:ba:75:d0:48:15:15:e4:28:83:
d7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B1:8F:41:F5:C1:DC:5A:FF:71:5D:12:B1:1B:72:8C:C8:9E:A3:B0
X509v3 Authority Key Identifier:
keyid:12:81:FD:01:CC:E2:55:A2:7C:2E:B3:CF:17:53:AF:68:FB:EC:28:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoH9AcziVaJ8LrPPF1OvaPvsKP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:29:95:6a:21:79:75:48:6b:db:be:a5:d8:7c:83:fd:8b:50:
e6:73:b2:84:9f:3e:30:26:e1:c9:b7:cd:91:dc:28:e8:11:ca:
d8:9b:12:ac:ac:22:e1:23:38:6e:d6:e5:65:01:94:b0:df:8f:
3d:33:4e:8c:b5:ef:0a:28:d4:51:5f:13:70:66:a4:0a:17:a5:
2d:d7:67:a2:2a:b5:80:11:15:30:1f:1a:f1:54:69:70:56:88:
71:2f:c4:f4:3a:e7:18:f5:e6:47:b8:d5:ef:b0:96:16:bf:be:
ff:f8:d4:03:4d:90:ab:cc:ad:51:b3:ae:89:9b:ee:85:49:aa:
c6:5e:4a:df:48:0c:7c:b2:14:b3:bf:f9:e8:15:92:9a:c9:1d:
d8:97:b2:32:fd:52:09:99:b8:18:1b:e9:dd:6a:11:de:d9:e5:
3a:ca:9c:ae:9d:fe:e9:6b:33:c7:2f:96:41:77:3c:cb:da:ee:
eb:59:44:53:87:95:47:68:91:19:a5:d2:dd:f5:6e:4e:11:4f:
d9:a3:07:2a:81:42:00:d2:92:2a:95:2f:6d:5f:c0:c8:ae:d5:
46:c1:5e:99:42:7c:7a:e3:05:14:b4:24:76:9f:8e:f0:73:da:
6d:de:b2:a8:ee:c6:7b:1f:aa:fd:b8:4a:88:03:cb:e7:d5:28:
eb:96:07:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMew1IldekvSp7g+DhTcj0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyODFmZDAxY2NlMjU1YTI3YzJlYjNjZjE3NTNhZjY4ZmJl
YzI4ZmQwHhcNMjYwOTEwMTgwMTA5WhcNMjYwOTExMTgwMTA5WjAzMTEwLwYDVQQD
Eyg5OWIxOGY0MWY1YzFkYzVhZmY3MTVkMTJiMTFiNzI4Y2M4OWVhM2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DI8exlXh+rmBv7WbBEINWBdqzYw
1Ihn4GYA3LL3srbdHbmwWI3EPOmUpqAf6QtIdmWPYErhAhvXttvoECN+xMmf+HFl
RtddFlJM28SviOsIBSiYmrByNTSFwx2s+veqXFAGluofxN2tS2FE0UBw0JS3ttuT
h/BHx4wziqNT9bCJ6RxmuA63DCOYl9T3mIOTbXWdiOKoJTZ5WOGfVl4uuvQLh9LX
PitUrLGvcD674FYnr85XQCADzsVQgDqCQ1yFqs2ba3u5P4xjVPipo/JTiCird7OP
N5DMWtQW1idoUoV5aPp+idp43NAgnhgqrT5TGWB5vPa6ddBIFRXkKIPXOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmxj0H1wdxa/3FdErEbcozInqOwMB8GA1UdIwQY
MBaAFBKB/QHM4lWifC6zzxdTr2j77Cj9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW9IOUFjemlWYUo4THJQUEYxT3ZhUHZzS1AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83MmE0MDUtMTU5OC00MDMzLThlMmIt
ODc4NTA3ZWQ0NmY3LzEvRW9IOUFjemlWYUo4THJQUEYxT3ZhUHZzS1AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy83MmE0MDUtMTU5OC00MDMzLThlMmItODc4NTA3ZWQ0NmY3
LzEvRW9IOUFjemlWYUo4THJQUEYxT3ZhUHZzS1AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyimVaiF5
dUhr276l2HyD/YtQ5nOyhJ8+MCbhybfNkdwo6BHK2JsSrKwi4SM4btblZQGUsN+P
PTNOjLXvCijUUV8TcGakChelLddnoiq1gBEVMB8a8VRpcFaIcS/E9DrnGPXmR7jV
77CWFr++//jUA02Qq8ytUbOuiZvuhUmqxl5K30gMfLIUs7/56BWSmskd2JeyMv1S
CZm4GBvp3WoR3tnlOsqcrp3+6Wszxy+WQXc8y9ru61lEU4eVR2iRGaXS3fVuThFP
2aMHKoFCANKSKpUvbV/AyK7VRsFemUJ8euMFFLQkdp+O8HPabd6yqO7Gex+q/bhK
iAPL59Uo65YH4g==
-----END CERTIFICATE-----
Generated at Fri Sep 11 02:49:42 2026 by rpki-client