Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
File: EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft (raw, json)
Hash identifier: 79Kq3WhNPkeZ9krMTgE8nyhWyVSrfojJVle/k7oYYho=
Subject key identifier: 7D:30:8A:AD:E1:98:35:49:50:76:FB:8D:0A:60:04:E2:A1:6A:C3:DC
Authority key identifier: 10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
Certificate issuer: /CN=10eedc33aa442907189f0b3c563836951fb185bb
Certificate serial: 01A0024A8EC549B85E1ED1B5B5DBA13006D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
Manifest number: 1A0C
Signing time: Fri 14 Aug 2026 22:00:35 +0000
Manifest this update: Fri 14 Aug 2026 22:00:35 +0000
Manifest next update: Sat 15 Aug 2026 22:00:35 +0000
Files and hashes: 1: 1-kqNcEC470FL-8tMUqoOnQYiF9M.roa (hash: EJlZOy6PuzNDvgY+mmcKZwX7cS9939GtFAUq2p+3aFQ=)
2: 9ZZwIsEn5-9xDQwcqsYYTjxbjJA.roa (hash: lZmCKQfLFLci+JYwAKSX3l63iYxIkiAA4w5SsSjJvUg=)
3: EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl (hash: mOpPfPc6NG1Clt9VXLFeTqHIRs2WGtAAWg47pUCOIks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:8e:c5:49:b8:5e:1e:d1:b5:b5:db:a1:30:06:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10eedc33aa442907189f0b3c563836951fb185bb
Validity
Not Before: Aug 14 22:00:35 2026 GMT
Not After : Aug 15 22:00:35 2026 GMT
Subject: CN=7d308aade19835495076fb8d0a6004e2a16ac3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:44:f1:8a:7a:dd:2b:55:51:40:eb:a8:b0:fc:
84:9e:17:83:fc:de:2d:df:6a:b2:04:47:b1:d8:fb:
13:5f:a0:c1:70:51:1d:04:ff:dd:fd:9b:d0:ae:3f:
b4:42:c1:c2:7a:8b:a0:5c:43:58:14:b8:96:4d:c9:
5c:85:5e:d2:cc:bf:cf:ee:79:49:31:8d:9a:65:dd:
b0:62:73:86:a3:fe:33:3e:f6:2b:86:e0:1a:f1:a7:
3e:00:69:93:a0:a2:00:f1:d6:8c:21:6e:11:94:90:
fa:d4:b8:6d:82:8d:ad:82:cf:bc:c3:14:15:a1:65:
0a:20:f7:e2:8d:4a:b4:18:55:2c:c8:66:eb:b3:21:
b8:12:77:9d:eb:d1:5f:50:9e:ad:5e:8e:a8:39:8d:
ce:11:c1:bb:d9:fa:fa:29:a2:00:d4:04:04:a8:d5:
00:89:9a:d5:fb:32:c1:59:0b:f6:92:aa:a8:ba:04:
b1:ee:59:a0:38:d1:d8:23:2c:74:b9:2a:31:d5:b7:
ee:cc:e0:1e:bf:d5:9e:39:ab:f4:39:c2:33:69:fe:
25:4f:06:73:e2:92:b3:c4:d4:21:0a:eb:79:7e:d7:
dd:5e:56:36:94:7f:8c:21:9a:63:95:b1:4c:db:c6:
43:1c:58:ee:90:9e:29:67:f3:19:1c:bc:58:9f:a3:
a5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:30:8A:AD:E1:98:35:49:50:76:FB:8D:0A:60:04:E2:A1:6A:C3:DC
X509v3 Authority Key Identifier:
keyid:10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:8f:4d:02:51:50:58:7d:96:f2:49:5a:b1:b4:66:66:78:ca:
c0:e8:64:f3:88:9a:47:50:e9:b7:aa:c2:6a:74:4d:8e:b7:27:
77:eb:74:58:16:56:66:57:40:dc:e3:c0:3e:08:13:04:39:f5:
8b:b4:a6:81:0c:58:6c:46:e1:11:82:18:c8:92:14:3b:47:5c:
0d:0a:e0:99:6d:07:0f:d2:7e:c0:64:1b:87:ed:8c:07:20:e1:
a3:16:81:35:01:2e:2d:70:f3:b2:e4:a3:c4:82:86:54:58:30:
35:88:ea:bc:fe:ac:ce:db:0e:25:c3:20:2d:19:05:85:48:8a:
32:2a:0c:e2:86:9a:34:04:08:77:d7:80:67:19:08:23:33:7e:
9d:e6:a3:34:f9:b3:ec:0e:4c:b7:bb:72:89:ca:eb:71:89:75:
f3:78:00:01:80:11:1f:43:62:e2:90:d1:7b:e2:61:47:04:fd:
a7:96:4e:5b:0c:b2:42:b7:5f:18:77:ee:95:65:19:07:05:dc:
5b:f2:b1:61:d5:ad:dc:9e:f6:62:4b:68:53:97:29:63:f9:e9:
74:1f:26:eb:8d:d6:6c:56:5a:c3:93:81:1d:4b:ea:b7:0d:a3:
64:37:3e:05:db:61:9a:d0:f8:57:4a:96:49:f9:a0:b1:b5:00:
a4:d2:b0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:11 2026 by rpki-client