Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft
File: EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft (raw, json)
Hash identifier: a1zstWjV5TbCNWu7+QrosUeALCTpFkybsryLVwxGYAU=
Subject key identifier: 61:68:DF:76:16:DC:EC:12:7B:57:FA:D4:D7:06:EA:64:4B:80:41:0E
Authority key identifier: 12:81:FD:01:CC:E2:55:A2:7C:2E:B3:CF:17:53:AF:68:FB:EC:28:FD
Certificate issuer: /CN=1281fd01cce255a27c2eb3cf1753af68fbec28fd
Certificate serial: 019FA0E0DB76FAECCD0D959C0C757F1CC030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EoH9AcziVaJ8LrPPF1OvaPvsKP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:01:58 +0000
Manifest this update: Mon 27 Jul 2026 00:01:58 +0000
Manifest next update: Tue 28 Jul 2026 00:01:58 +0000
Files and hashes: 1: EoH9AcziVaJ8LrPPF1OvaPvsKP0.crl (hash: INLvRRp06ap5UVgjHAN2wdk3ArGQB4LMIbl3LpEXmOA=)
2: UeeOGT1aFWqTWrDFmuASM8XoFWQ.roa (hash: 8GToKI8OvtXj4QOA4NLn7hg/E2c2fghSHtpWrxVk2Dw=)
3: oe-1CFwfBXxRDhex7FkwF1JYZTA.roa (hash: FBEY8qRdvuiENUskWnHAGFekMX8Uope29YCFoFBpnsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EoH9AcziVaJ8LrPPF1OvaPvsKP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:db:76:fa:ec:cd:0d:95:9c:0c:75:7f:1c:c0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1281fd01cce255a27c2eb3cf1753af68fbec28fd
Validity
Not Before: Jul 27 00:01:58 2026 GMT
Not After : Jul 28 00:01:58 2026 GMT
Subject: CN=6168df7616dcec127b57fad4d706ea644b80410e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:c6:19:e3:6a:07:5b:61:23:f6:13:02:14:
45:36:87:81:42:ad:dd:05:1a:58:b6:15:5c:64:d7:
bd:9a:b3:bf:3c:43:ad:a0:8f:6d:0a:85:42:80:de:
fe:51:7a:d8:0e:5d:d3:56:ce:1e:99:d6:36:d6:ba:
6f:73:ea:3f:0d:d4:a0:d6:96:38:02:fd:fc:a5:ee:
7e:99:b2:b5:36:5c:f9:cb:cb:0c:41:a8:3a:21:13:
32:ee:92:c5:bd:02:c1:d6:ab:7a:e4:f4:71:a4:f9:
d3:2f:f5:21:1c:e2:8c:51:db:e3:08:5f:fb:9d:32:
25:a8:55:87:a1:d3:9e:7c:b9:55:58:fd:48:8e:13:
00:bc:45:98:35:c2:29:9b:34:65:46:24:39:27:a8:
e1:4c:1b:f2:bc:5a:62:72:4d:46:df:20:0e:e1:c1:
db:d1:2d:59:93:3b:1f:97:67:c4:85:67:2b:bd:38:
8f:0d:c6:14:c1:cf:df:6f:f1:f2:e2:82:2c:63:4f:
47:96:ed:3b:22:ef:0f:7a:3b:b8:9a:96:68:59:e8:
aa:5f:e4:a8:3a:8b:94:97:2b:4f:2a:7e:5c:ad:fd:
73:43:71:90:ce:f6:3b:b3:79:08:23:00:a1:18:1c:
11:49:86:b6:ec:78:66:f9:c1:ac:40:49:34:b0:77:
0f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:68:DF:76:16:DC:EC:12:7B:57:FA:D4:D7:06:EA:64:4B:80:41:0E
X509v3 Authority Key Identifier:
keyid:12:81:FD:01:CC:E2:55:A2:7C:2E:B3:CF:17:53:AF:68:FB:EC:28:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoH9AcziVaJ8LrPPF1OvaPvsKP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ef:90:0d:66:49:b8:9b:62:00:d4:cd:ee:5d:79:ab:34:7d:
64:93:d5:57:75:38:5f:83:eb:92:2e:6a:14:75:37:99:bd:f9:
54:5b:a8:18:9e:8f:05:37:18:7f:d5:30:7c:f0:c2:a6:ab:67:
ef:1a:6a:25:cc:37:16:6b:cc:a9:93:91:a0:e6:57:f7:9d:81:
e0:32:50:f4:ad:4e:ec:91:36:71:f8:be:c9:d5:70:e7:1e:d4:
83:78:6e:5b:88:a8:6e:a9:2b:d6:73:59:28:d0:35:80:4d:91:
e3:b3:80:18:d6:92:e6:12:a7:c9:42:ac:61:59:17:88:3f:9f:
94:01:02:ca:58:3d:63:92:b5:ad:56:7f:1f:6f:61:24:17:7c:
d4:b3:9c:05:46:79:f3:a4:57:2d:ae:00:7a:26:dc:2c:c9:d9:
45:f8:eb:f9:4d:0b:1d:15:85:f2:3c:af:72:43:0f:41:87:bf:
a8:cc:56:e1:35:b1:15:02:37:b7:40:72:80:2d:ff:f1:a3:fd:
e5:39:8b:62:1d:da:dc:9a:bd:f5:ef:f8:ba:61:b6:36:13:38:
13:1b:18:7e:5c:90:df:9c:fe:a2:05:7b:87:87:20:08:b1:a9:
ae:c7:55:26:95:0e:4c:70:81:1e:0e:ed:df:af:14:d0:66:e5:
c7:9f:08:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:32:28 2026 by rpki-client