Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft
File: EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft (raw, json)
Hash identifier: W3a5xc+qCDBcAUkB5V+0R90qPDRGQHFxIQx0LpKZ8pE=
Subject key identifier: 7A:75:07:D7:8E:27:DE:5D:06:72:98:26:56:EC:D3:F0:85:33:B7:B4
Authority key identifier: 12:81:FD:01:CC:E2:55:A2:7C:2E:B3:CF:17:53:AF:68:FB:EC:28:FD
Certificate issuer: /CN=1281fd01cce255a27c2eb3cf1753af68fbec28fd
Certificate serial: 01A183AC66A99EB8E0903422E26646C32FD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EoH9AcziVaJ8LrPPF1OvaPvsKP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft
Manifest number: 0142
Signing time: Wed 28 Oct 2026 18:01:16 +0000
Manifest this update: Wed 28 Oct 2026 18:01:16 +0000
Manifest next update: Thu 29 Oct 2026 18:01:16 +0000
Files and hashes: 1: EoH9AcziVaJ8LrPPF1OvaPvsKP0.crl (hash: kXpsUdK9+F2uk+v8Pa2uenHkhurAeZZaWhsJ0w5AscQ=)
2: UeeOGT1aFWqTWrDFmuASM8XoFWQ.roa (hash: 8GToKI8OvtXj4QOA4NLn7hg/E2c2fghSHtpWrxVk2Dw=)
3: oe-1CFwfBXxRDhex7FkwF1JYZTA.roa (hash: FBEY8qRdvuiENUskWnHAGFekMX8Uope29YCFoFBpnsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EoH9AcziVaJ8LrPPF1OvaPvsKP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 18:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:ac:66:a9:9e:b8:e0:90:34:22:e2:66:46:c3:2f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1281fd01cce255a27c2eb3cf1753af68fbec28fd
Validity
Not Before: Oct 28 18:01:16 2026 GMT
Not After : Oct 29 18:01:16 2026 GMT
Subject: CN=7a7507d78e27de5d0672982656ecd3f08533b7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:17:ac:34:69:21:cd:14:10:70:54:d1:c2:0b:
63:40:3c:d8:4a:71:d6:ed:ed:ae:1e:8c:5e:97:d9:
27:96:f4:89:73:88:eb:ed:7e:30:74:80:5d:d4:71:
f7:eb:7a:81:69:88:f4:b8:00:3e:90:09:4d:91:d2:
0e:c1:9f:1f:25:54:f8:81:99:7d:97:d4:d8:86:2e:
08:f5:55:d9:4f:79:f0:d1:21:13:ca:75:26:5c:28:
ec:74:29:ba:f5:25:e6:cf:30:3d:08:db:39:7c:63:
3d:9f:d0:5c:24:a3:2c:19:0c:2a:53:82:11:ee:dd:
c9:2d:08:68:32:5d:a4:a3:47:c2:f1:96:5b:c5:ea:
48:81:1d:08:e5:b3:c1:a5:8e:93:62:1a:82:2d:9b:
4d:7d:a9:ad:fe:4f:61:e4:a1:b9:c6:2e:c8:85:46:
13:96:53:ce:db:75:f2:58:ff:e3:3c:67:dc:f4:b4:
24:7b:9e:69:2e:1f:ca:5a:4d:aa:ca:30:fb:ff:e5:
f4:3b:e0:d5:50:32:eb:26:db:88:c1:45:ba:45:2c:
e6:d5:e7:e2:0a:ba:16:c9:cc:c6:56:00:05:ba:de:
2c:a1:2d:3a:ac:e1:01:5d:39:98:80:c9:d9:4d:10:
94:72:23:34:68:f7:e0:f8:ef:5e:33:41:80:f6:44:
24:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:75:07:D7:8E:27:DE:5D:06:72:98:26:56:EC:D3:F0:85:33:B7:B4
X509v3 Authority Key Identifier:
keyid:12:81:FD:01:CC:E2:55:A2:7C:2E:B3:CF:17:53:AF:68:FB:EC:28:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoH9AcziVaJ8LrPPF1OvaPvsKP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e1:8e:ac:6e:66:98:4f:f0:70:eb:78:99:90:b2:32:83:66:
2b:27:94:98:18:b1:76:9c:d9:14:7d:a6:72:cd:e0:d0:1b:61:
22:25:13:04:2f:79:35:88:0b:e0:db:66:70:6b:77:5b:1a:61:
0b:cd:75:d8:58:16:a0:ee:37:d7:8f:46:e9:bc:d2:ac:e6:6d:
7e:c7:ca:9e:a5:e3:87:c4:57:34:b0:f7:34:cf:7e:9b:6d:f1:
2a:79:6a:b8:44:73:1c:47:75:f0:59:30:4a:11:67:56:79:c2:
cb:aa:bb:d1:e1:18:d6:10:70:3e:3b:08:da:83:bb:c4:21:b8:
ae:b4:de:3f:aa:fd:e5:40:58:ff:7c:79:35:25:9d:4a:f3:69:
b6:dd:14:60:d7:ff:a9:e0:96:ad:5e:cf:71:ce:b3:e8:98:14:
c7:02:70:75:3c:de:10:2a:93:66:3c:6e:cc:a3:2d:8f:20:1a:
7d:84:81:f3:ad:81:ff:6e:c1:e5:73:e2:f0:48:7a:a0:ac:cd:
87:1c:ff:b9:6e:d8:34:81:13:1b:42:82:b2:2d:13:df:7c:3f:
f5:31:d1:c6:71:7d:27:83:8b:2f:5a:f7:4c:0b:b4:2d:01:e9:
2a:c6:31:db:74:84:ed:b2:51:b7:fe:a3:76:1f:3f:a8:c3:3a:
a2:e8:15:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGDrGapnrjgkDQi4mZGwy/XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyODFmZDAxY2NlMjU1YTI3YzJlYjNjZjE3NTNhZjY4ZmJl
YzI4ZmQwHhcNMjYxMDI4MTgwMTE2WhcNMjYxMDI5MTgwMTE2WjAzMTEwLwYDVQQD
Eyg3YTc1MDdkNzhlMjdkZTVkMDY3Mjk4MjY1NmVjZDNmMDg1MzNiN2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhesNGkhzRQQcFTRwgtjQDzYSnHW
7e2uHoxel9knlvSJc4jr7X4wdIBd1HH363qBaYj0uAA+kAlNkdIOwZ8fJVT4gZl9
l9TYhi4I9VXZT3nw0SETynUmXCjsdCm69SXmzzA9CNs5fGM9n9BcJKMsGQwqU4IR
7t3JLQhoMl2ko0fC8ZZbxepIgR0I5bPBpY6TYhqCLZtNfamt/k9h5KG5xi7IhUYT
llPO23XyWP/jPGfc9LQke55pLh/KWk2qyjD7/+X0O+DVUDLrJtuIwUW6RSzm1efi
CroWyczGVgAFut4soS06rOEBXTmYgMnZTRCUciM0aPfg+O9eM0GA9kQkmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHp1B9eOJ95dBnKYJlbs0/CFM7e0MB8GA1UdIwQY
MBaAFBKB/QHM4lWifC6zzxdTr2j77Cj9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW9IOUFjemlWYUo4THJQUEYxT3ZhUHZzS1AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83MmE0MDUtMTU5OC00MDMzLThlMmIt
ODc4NTA3ZWQ0NmY3LzEvRW9IOUFjemlWYUo4THJQUEYxT3ZhUHZzS1AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy83MmE0MDUtMTU5OC00MDMzLThlMmItODc4NTA3ZWQ0NmY3
LzEvRW9IOUFjemlWYUo4THJQUEYxT3ZhUHZzS1AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZeGOrG5m
mE/wcOt4mZCyMoNmKyeUmBixdpzZFH2mcs3g0BthIiUTBC95NYgL4NtmcGt3Wxph
C8112FgWoO43149G6bzSrOZtfsfKnqXjh8RXNLD3NM9+m23xKnlquERzHEd18Fkw
ShFnVnnCy6q70eEY1hBwPjsI2oO7xCG4rrTeP6r95UBY/3x5NSWdSvNptt0UYNf/
qeCWrV7Pcc6z6JgUxwJwdTzeECqTZjxuzKMtjyAafYSB862B/27B5XPi8Eh6oKzN
hxz/uW7YNIETG0KCsi0T33w/9THRxnF9J4OLL1r3TAu0LQHpKsYx23SE7bJRt/6j
dh8/qMM6ougVCg==
-----END CERTIFICATE-----
Generated at Thu Oct 29 01:51:54 2026 by rpki-client