Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft
File: eooeg2-pIdKa-JxKbtagRQADkzw.mft (raw, json)
Hash identifier: MytI8QgiYG9U8NoOvkq3E0MJ9adN0hf7Vf+YVIT3ArM=
Subject key identifier: 40:9F:30:79:E4:3A:A0:57:7F:A7:21:C8:A9:76:B5:62:04:F6:A0:61
Authority key identifier: 7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C
Certificate issuer: /CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c
Certificate serial: 01A17AA8C7309EC768EEB49BD9839E6991EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft
Manifest number: 1AC4
Signing time: Tue 27 Oct 2026 00:00:43 +0000
Manifest this update: Tue 27 Oct 2026 00:00:43 +0000
Manifest next update: Wed 28 Oct 2026 00:00:43 +0000
Files and hashes: 1: Xw-YfGo9dbYYynT4e8fytlvPIDM.roa (hash: GIydqVz0uBGXp6zRLhHB8inOB1N9/5K9aw+gLa9sp4c=)
2: eooeg2-pIdKa-JxKbtagRQADkzw.crl (hash: 1M3CVf8KWlFhnj07ulUOiL5bY3z3tmxcRJk2H0DBz9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 00:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:a8:c7:30:9e:c7:68:ee:b4:9b:d9:83:9e:69:91:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c
Validity
Not Before: Oct 27 00:00:43 2026 GMT
Not After : Oct 28 00:00:43 2026 GMT
Subject: CN=409f3079e43aa0577fa721c8a976b56204f6a061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e9:0e:12:b5:02:44:40:b5:6c:96:12:c3:d6:
4b:7e:ff:a9:e5:4b:11:be:d7:44:a1:84:74:85:f2:
00:ec:39:21:be:8f:38:72:4e:e0:fb:59:48:15:f3:
7e:b1:93:3e:49:f9:e0:98:10:28:a1:df:0b:c8:52:
b2:89:94:1b:56:41:e7:30:de:f5:0e:5b:51:bb:86:
73:2a:6f:f3:32:81:ab:5f:5c:46:f2:13:f8:49:5d:
6d:ac:dc:08:e1:80:e0:e3:e2:cb:65:b1:2f:ef:7e:
8c:86:45:57:e2:e3:e8:c5:cb:87:07:fd:a3:2f:2f:
c8:56:e3:63:9c:6e:40:e0:71:37:f3:0c:88:5e:6c:
3c:8f:85:c8:3c:6c:ab:82:28:04:ee:cd:4a:57:ea:
0e:24:45:23:9a:83:4e:aa:f3:33:1b:28:31:83:d3:
13:03:6d:1a:b8:14:d8:be:a8:fb:48:1b:67:38:34:
46:21:a6:4c:20:c6:9b:1e:17:ff:d1:ac:3b:a2:ab:
1a:71:a2:dd:a8:29:f1:96:1a:6b:f7:f5:36:e9:ce:
6a:4c:58:20:d1:22:01:fc:41:d0:0d:bb:5f:9b:e8:
f6:bd:56:25:cd:0d:46:fb:61:99:e9:a5:6e:3a:25:
2a:32:7c:56:34:ab:08:b0:a4:e0:49:40:ab:ec:f3:
19:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9F:30:79:E4:3A:A0:57:7F:A7:21:C8:A9:76:B5:62:04:F6:A0:61
X509v3 Authority Key Identifier:
keyid:7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b8:24:98:1e:df:da:50:83:34:43:76:f5:c2:9c:45:34:72:
40:d3:f5:8d:61:c4:a7:98:f2:66:c7:13:af:51:af:31:5b:2a:
09:f9:75:88:a1:43:37:99:d0:de:30:b6:a0:37:96:08:c9:0b:
1e:e8:7f:e4:60:35:ff:dd:b8:25:7d:5a:6c:27:31:8d:01:b9:
2f:12:d3:7e:6e:aa:c6:df:45:2d:87:6a:78:00:8e:3b:47:37:
38:8b:a7:fe:54:ae:e8:a0:4e:bf:d6:fe:29:8d:09:20:8c:0b:
a9:56:71:05:27:24:89:bf:37:85:57:aa:7e:c5:dd:d9:b8:2c:
3b:3b:28:e3:ab:4c:2b:9b:03:1a:7d:ef:4c:89:27:c3:04:b1:
91:67:3b:ba:e1:6a:0b:ac:4b:61:c4:65:35:81:88:14:1a:97:
66:95:9b:da:40:2f:8b:34:bd:5b:70:d6:b3:11:1b:6b:c2:1b:
86:43:49:33:22:55:86:47:8e:a6:92:b3:43:68:4d:2a:b8:6e:
52:37:ae:4d:fe:37:1e:f6:81:cb:52:65:51:1a:3d:26:d7:9b:
68:7c:39:62:e2:a5:ce:82:e3:b1:5a:05:06:ce:72:7a:6f:89:
31:fa:4e:8f:d1:48:8c:27:5b:7e:be:2a:e5:2d:5c:65:ca:80:
75:c2:02:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:21:08 2026 by rpki-client