Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
File: EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft (raw, json)
Hash identifier: p59NOcNjzDsSVnJeb88h/0Vs4hHMAjNoIciX5qMvstI=
Subject key identifier: F6:77:30:11:88:7C:22:18:82:6B:C4:95:6E:DC:A2:EE:5B:E2:A3:AE
Authority key identifier: 10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
Certificate issuer: /CN=10eedc33aa442907189f0b3c563836951fb185bb
Certificate serial: 01A13F0278801DC057B6C903F80A3140D1C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
Manifest number: 1AB0
Signing time: Thu 15 Oct 2026 10:01:28 +0000
Manifest this update: Thu 15 Oct 2026 10:01:28 +0000
Manifest next update: Fri 16 Oct 2026 10:01:28 +0000
Files and hashes: 1: 1-kqNcEC470FL-8tMUqoOnQYiF9M.roa (hash: EJlZOy6PuzNDvgY+mmcKZwX7cS9939GtFAUq2p+3aFQ=)
2: 9ZZwIsEn5-9xDQwcqsYYTjxbjJA.roa (hash: lZmCKQfLFLci+JYwAKSX3l63iYxIkiAA4w5SsSjJvUg=)
3: EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl (hash: 2U57oCS1qJoZg10UO0TpuYkPtpJAAIE+O2wNjd5nEMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:78:80:1d:c0:57:b6:c9:03:f8:0a:31:40:d1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10eedc33aa442907189f0b3c563836951fb185bb
Validity
Not Before: Oct 15 10:01:28 2026 GMT
Not After : Oct 16 10:01:28 2026 GMT
Subject: CN=f6773011887c2218826bc4956edca2ee5be2a3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9e:ae:a4:9a:2d:cb:54:16:d9:70:7e:62:3f:
c2:08:96:ad:9d:55:10:23:ba:33:da:fa:ab:fb:01:
f6:c2:6a:a0:1a:6d:02:02:dc:c5:b8:89:12:33:de:
33:59:39:6b:b1:e9:b2:96:8b:e9:33:48:59:68:f7:
c0:12:a8:17:47:94:03:8c:3a:5d:7c:8c:6b:ac:75:
c7:68:89:be:4c:fd:15:83:c4:c8:9f:e6:09:99:75:
82:e9:fb:87:fa:e1:66:d3:b3:8a:0b:ec:bc:d8:e7:
f3:2e:93:23:ea:06:a6:96:98:a0:02:4e:ac:86:94:
d8:b7:5a:01:1f:eb:e3:08:0a:d7:3e:3f:a2:fd:c2:
b1:04:06:3f:21:60:6b:ac:09:e5:18:e0:0f:4e:d2:
b1:b0:60:d0:39:d5:12:8e:35:cd:5b:fe:39:e6:7d:
76:0f:9c:18:36:ca:d1:c2:af:b0:cc:bd:d2:e2:65:
bb:f6:a4:4e:7c:c0:23:2a:00:86:27:6d:85:3e:75:
28:1b:3e:57:70:b7:77:0c:c3:c6:d8:2a:e0:b4:50:
d1:63:a0:6f:54:1a:fe:ec:4d:47:42:bb:f4:02:fd:
72:8a:0a:d8:ac:5c:a8:11:86:51:26:22:c9:a4:8b:
2f:3e:9c:2f:1f:ad:e7:00:26:b7:17:50:88:fe:c5:
2b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:77:30:11:88:7C:22:18:82:6B:C4:95:6E:DC:A2:EE:5B:E2:A3:AE
X509v3 Authority Key Identifier:
keyid:10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a7:fe:7c:11:fe:e1:89:4e:2f:27:8c:75:97:3b:99:ab:f6:
81:3c:c9:2c:3f:9e:4c:79:f6:bc:19:a7:9c:f0:83:c6:fb:0b:
ee:f9:98:cf:e5:40:62:c2:75:c8:99:85:5e:8e:11:5b:8b:9b:
22:20:7b:ed:ad:4e:c0:7d:f5:77:61:df:40:4d:e2:5b:c2:d3:
ca:32:aa:c4:0c:01:43:9e:be:db:8a:e9:e9:27:ed:8c:6d:78:
f3:2d:8e:93:28:b4:8e:ed:0b:95:a9:d2:6c:37:22:9b:4f:0c:
03:99:32:73:37:01:60:71:97:6e:c5:34:b9:06:d7:e5:56:19:
eb:1f:74:13:cd:7a:4a:38:9d:a7:41:51:d9:5e:ac:dc:fd:e2:
c8:17:3d:88:23:c9:c0:5f:ed:e4:5e:56:40:8f:95:e4:5a:dd:
1b:f0:86:a9:5d:d5:6c:74:d1:3b:1d:e0:c1:c3:c9:c3:8e:92:
96:9e:b5:9b:43:4e:50:b2:d2:f1:9f:d2:c9:20:ba:31:99:93:
e1:85:ef:5a:03:ea:46:de:df:70:69:27:3d:d8:08:0e:72:2f:
e4:2d:82:4c:19:67:97:d3:81:d7:97:87:c2:a4:4c:70:a5:ea:
f5:61:90:ca:cb:2a:31:53:2c:76:2e:ff:22:53:e6:cf:a4:26:
f6:27:48:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:18:34 2026 by rpki-client