Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
File: EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft (raw, json)
Hash identifier: /pobhUY1AhPS4aWO9rQPnr94HDxQEddXXjcN4tPUoMI=
Subject key identifier: 56:B9:0D:A9:CD:00:DE:10:C4:5B:27:01:44:DC:42:B7:A0:81:E1:00
Authority key identifier: 10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
Certificate issuer: /CN=10eedc33aa442907189f0b3c563836951fb185bb
Certificate serial: 019D37C024E809A84DF87D034E826B83A341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
Manifest number: 189A
Signing time: Sun 29 Mar 2026 04:00:32 +0000
Manifest this update: Sun 29 Mar 2026 04:00:32 +0000
Manifest next update: Mon 30 Mar 2026 04:00:32 +0000
Files and hashes: 1: 1-kqNcEC470FL-8tMUqoOnQYiF9M.roa (hash: EJlZOy6PuzNDvgY+mmcKZwX7cS9939GtFAUq2p+3aFQ=)
2: 9ZZwIsEn5-9xDQwcqsYYTjxbjJA.roa (hash: lZmCKQfLFLci+JYwAKSX3l63iYxIkiAA4w5SsSjJvUg=)
3: EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl (hash: TPnA0ygRSsRRTsD2gdmNDaqdrjykATnodA87Q11XRA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:24:e8:09:a8:4d:f8:7d:03:4e:82:6b:83:a3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10eedc33aa442907189f0b3c563836951fb185bb
Validity
Not Before: Mar 29 04:00:32 2026 GMT
Not After : Mar 30 04:00:32 2026 GMT
Subject: CN=56b90da9cd00de10c45b270144dc42b7a081e100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2b:4a:95:a1:16:67:62:52:b4:31:99:73:35:
b8:01:4a:d0:d4:ab:ed:ed:d2:37:88:94:f1:0c:c2:
39:4a:a3:4f:bb:67:12:5b:2c:f4:1f:c9:4c:41:1b:
68:47:fb:3a:2c:12:e1:10:d5:8a:e4:90:19:20:9e:
b8:93:d0:24:78:b9:a8:19:28:89:71:7f:be:e3:f6:
b1:5d:da:46:71:35:fb:d2:f2:14:e6:55:d4:8d:3c:
c4:b0:d4:34:aa:84:34:9c:d2:9c:b8:7d:f1:87:f5:
47:8e:38:e9:48:6a:1b:b9:03:36:57:f5:a3:29:0b:
ec:47:8f:04:23:af:9d:12:7c:20:76:c4:0a:72:f2:
ed:42:90:a2:cf:9a:01:ad:65:20:be:11:f2:27:00:
36:7b:38:10:d1:02:4d:87:dc:a6:84:8f:a2:f1:5f:
90:94:62:f9:56:a3:f4:d1:20:c3:9e:e6:9c:dc:d1:
36:91:f0:6b:a1:d4:48:f6:61:91:fc:35:2a:ca:97:
9a:3e:ce:d8:41:c0:74:3f:c5:28:e1:49:5a:4e:bc:
7a:69:60:2e:ab:b3:93:8a:de:86:65:4a:aa:de:6d:
bd:02:e3:e1:5e:d9:59:09:05:e0:f1:32:d6:81:fb:
9f:79:d6:e0:79:72:1f:ea:6f:69:e7:f9:ab:bb:19:
4f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B9:0D:A9:CD:00:DE:10:C4:5B:27:01:44:DC:42:B7:A0:81:E1:00
X509v3 Authority Key Identifier:
keyid:10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:5c:86:fd:38:c8:78:93:5c:95:69:cd:42:87:48:24:65:b6:
a7:53:0f:44:6b:af:0e:18:8d:17:43:4b:90:11:e5:3f:f3:34:
80:d8:42:17:4a:51:dd:d4:7f:14:46:fb:56:16:a6:36:c5:13:
93:00:ee:ca:60:7a:3c:be:1d:ff:4d:b1:a7:ea:11:74:76:66:
89:1c:b0:49:22:5f:f1:d8:65:d8:f4:96:51:0a:2d:3b:c6:67:
25:c2:09:5a:56:62:29:f9:18:8b:53:af:9b:64:62:2f:ee:bd:
0d:54:45:86:d1:da:fe:80:c6:82:19:6b:af:cf:be:d1:53:4b:
5a:a3:92:76:03:99:79:3d:f4:44:55:a4:5c:25:9f:42:ae:4c:
e0:8a:f8:2a:df:21:09:d6:d6:9e:3d:43:76:f9:c4:1a:46:09:
82:40:74:67:7e:bc:47:b0:cf:e4:aa:cb:64:d4:3a:c4:56:84:
9b:a2:9b:b6:06:d5:f9:5a:51:7f:90:a1:5a:06:ce:9a:50:73:
13:af:86:ac:cf:d7:5d:01:0d:b5:39:c1:5b:64:24:3f:fd:ba:
9e:19:86:0e:d1:14:6c:e3:93:d5:8a:1e:9a:d5:1f:84:17:4a:
23:6d:9d:9d:cc:19:bc:01:b1:33:80:2e:0b:21:ab:d6:e7:2f:
bb:e4:cf:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:43 2026 by rpki-client