Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
File: EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft (raw, json)
Hash identifier: r8am2aK83dPZkyISC/ubAKPUEaAzdU481qqulLFejmo=
Subject key identifier: D0:C8:B0:B0:1D:8A:A1:02:7A:66:D3:40:D3:3F:A9:34:09:7A:3E:35
Authority key identifier: 10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
Certificate issuer: /CN=10eedc33aa442907189f0b3c563836951fb185bb
Certificate serial: 019F189ECFCE6A54A22C82FF2C46F5F1280D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
Manifest number: 1993
Signing time: Tue 30 Jun 2026 13:01:28 +0000
Manifest this update: Tue 30 Jun 2026 13:01:28 +0000
Manifest next update: Wed 01 Jul 2026 13:01:28 +0000
Files and hashes: 1: 1-kqNcEC470FL-8tMUqoOnQYiF9M.roa (hash: EJlZOy6PuzNDvgY+mmcKZwX7cS9939GtFAUq2p+3aFQ=)
2: 9ZZwIsEn5-9xDQwcqsYYTjxbjJA.roa (hash: lZmCKQfLFLci+JYwAKSX3l63iYxIkiAA4w5SsSjJvUg=)
3: EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl (hash: FNupQytqLnbr0GfHedlikfdLiK+XwALESdAjrgMGYQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:cf:ce:6a:54:a2:2c:82:ff:2c:46:f5:f1:28:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10eedc33aa442907189f0b3c563836951fb185bb
Validity
Not Before: Jun 30 13:01:28 2026 GMT
Not After : Jul 1 13:01:28 2026 GMT
Subject: CN=d0c8b0b01d8aa1027a66d340d33fa934097a3e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1d:aa:19:f1:3b:03:66:22:46:cf:71:39:f4:
be:21:ec:ab:55:ed:cf:97:47:dd:51:bc:a8:4e:42:
bc:f3:d6:91:f2:5b:a5:ec:f6:76:53:1f:ab:a5:85:
a1:9f:2b:4e:4d:4f:a2:2d:da:45:22:86:b8:6e:cb:
5d:5e:b9:c2:0a:c5:13:22:32:75:a7:34:17:b7:fa:
5c:9a:a8:01:d0:90:93:e0:1a:04:96:79:0d:05:c2:
06:fd:3c:ba:41:65:21:f1:c1:dc:30:4e:b6:32:67:
2c:ed:ca:60:a9:d8:f6:c6:c4:b5:ee:75:db:d8:d3:
f4:ba:fa:b2:a1:75:cb:b2:84:94:01:70:d4:c6:d5:
a4:44:b7:64:02:31:f9:35:09:6b:92:6a:96:7a:14:
10:56:e5:32:3f:ed:50:97:cf:15:b4:a9:b7:b6:25:
cc:20:99:22:f6:f5:a8:07:b4:55:d6:57:ec:81:2e:
79:7c:2d:9f:b7:da:34:19:17:b8:e0:3a:a3:82:da:
02:57:c8:18:8f:15:e9:f6:67:2b:20:b0:6a:ad:b5:
4c:9c:bc:ac:85:5a:7a:a9:2d:0c:39:02:8e:f0:dc:
a9:ac:8e:ff:86:e1:d7:14:34:97:d0:a9:cd:8e:94:
b5:c0:93:a0:03:43:0c:80:15:5b:16:fc:b2:da:6d:
86:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C8:B0:B0:1D:8A:A1:02:7A:66:D3:40:D3:3F:A9:34:09:7A:3E:35
X509v3 Authority Key Identifier:
keyid:10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a8:23:4d:b2:30:6f:62:57:53:b9:96:7a:fa:c0:7c:d5:20:
fb:0a:ef:dd:d4:b0:ca:fa:95:48:74:81:14:df:c9:f7:b3:82:
21:6b:79:4e:de:88:88:51:17:3c:ec:48:b6:c6:3a:e8:46:ec:
80:fe:5d:df:0c:e6:52:d2:b4:4c:b2:80:28:52:81:a2:0a:d1:
b5:d1:92:1a:57:44:22:c8:b9:21:fa:6a:41:4d:f7:7e:9d:da:
05:64:ef:20:b7:2a:cf:6f:ae:62:c4:f9:43:c2:f9:7e:4b:4c:
78:dd:93:4d:cd:27:dd:c7:8f:cd:3a:12:81:ac:1d:d7:e8:66:
92:ba:6f:57:9c:99:b1:b8:4a:49:b7:7e:59:d0:06:d5:04:18:
93:52:92:2b:6e:a6:7b:69:7b:d6:16:a8:2a:29:75:35:49:f0:
cf:1e:a6:5c:e4:d3:9e:ac:18:e0:ca:04:1c:c4:b4:25:45:de:
82:6e:b7:1e:9d:84:04:01:08:1f:99:ca:35:4f:4b:99:3c:37:
d6:9e:46:1c:15:fe:83:0f:23:74:08:91:d1:18:f2:fb:05:fa:
18:c4:03:48:7e:78:6b:a6:88:d0:a9:ba:e4:5d:3a:03:29:5e:
8e:e6:77:06:08:b7:bd:37:61:f5:80:b3:92:be:77:c5:6d:e6:
01:95:12:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:58 2026 by rpki-client