Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.mft
File: EIOmQReWv3Jjh_elXPhLV8qJm-s.mft (raw, json)
Hash identifier: /Rn3a8tV+ebCLg6j2kBMAvndnlkfvdneCTJLY/aucLw=
Subject key identifier: D3:F6:A9:E7:C9:AB:74:FB:30:11:48:54:05:1C:0E:AD:E2:96:7B:4B
Authority key identifier: 10:83:A6:41:17:96:BF:72:63:87:F7:A5:5C:F8:4B:57:CA:89:9B:EB
Certificate issuer: /CN=1083a6411796bf726387f7a55cf84b57ca899beb
Certificate serial: 019D382E7FAEA9DA75441F179D31CAA85CF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIOmQReWv3Jjh_elXPhLV8qJm-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.mft
Manifest number: 0BB0
Signing time: Sun 29 Mar 2026 06:01:04 +0000
Manifest this update: Sun 29 Mar 2026 06:01:04 +0000
Manifest next update: Mon 30 Mar 2026 06:01:04 +0000
Files and hashes: 1: EIOmQReWv3Jjh_elXPhLV8qJm-s.crl (hash: 1ydpeQ12EYGx9S8zQvXLzrsrrZ18p6RpBw7qbVbxUQc=)
2: KMV_MeO0hLhtZCjq1lqwJ3PvI5M.roa (hash: DLpQWgTnYXhTnfUhzszM/E2P2/bQ7PyHbo2We93BLHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/EIOmQReWv3Jjh_elXPhLV8qJm-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:7f:ae:a9:da:75:44:1f:17:9d:31:ca:a8:5c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1083a6411796bf726387f7a55cf84b57ca899beb
Validity
Not Before: Mar 29 06:01:04 2026 GMT
Not After : Mar 30 06:01:04 2026 GMT
Subject: CN=d3f6a9e7c9ab74fb30114854051c0eade2967b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e5:42:de:9f:6d:23:be:3b:d0:ad:ab:0f:4f:
7e:6a:2b:86:96:87:d2:65:63:af:db:03:19:00:26:
90:32:2b:6c:48:25:ec:29:42:d1:21:94:7b:4c:f9:
2b:75:69:bf:13:f5:d3:ec:ab:4b:a3:01:b8:ab:a0:
a2:fd:4f:dd:d5:85:3e:2c:c5:f9:b7:6f:14:29:dd:
ba:34:49:82:a4:ee:ec:6f:56:ac:d8:25:cb:44:1c:
81:3b:2b:b8:3e:b5:6e:2a:6e:c6:31:e5:31:03:77:
31:7f:bd:fe:95:c2:28:ae:e0:ed:a3:78:67:8f:63:
51:18:9a:dc:5e:96:6b:3f:b9:e4:92:6d:c1:7b:6e:
64:f8:29:62:ec:cb:e7:84:45:c8:db:3f:97:78:c5:
24:46:86:97:b1:67:98:ae:df:cb:b7:c3:44:48:57:
8c:1c:6b:11:b9:3c:69:67:24:3e:84:09:fd:e6:4d:
70:45:2f:59:91:4b:ca:16:1a:28:7d:d2:1a:ff:a7:
56:21:6c:4e:4c:d5:06:de:88:1f:5d:bb:23:41:7f:
fa:b3:79:fb:75:45:c9:eb:24:53:c7:35:3b:e8:01:
9e:9f:c3:e5:4e:f5:f3:e5:a1:72:c7:94:e0:b3:70:
e3:63:90:7e:70:22:78:ad:31:8b:a2:55:ba:d9:b2:
84:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F6:A9:E7:C9:AB:74:FB:30:11:48:54:05:1C:0E:AD:E2:96:7B:4B
X509v3 Authority Key Identifier:
keyid:10:83:A6:41:17:96:BF:72:63:87:F7:A5:5C:F8:4B:57:CA:89:9B:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIOmQReWv3Jjh_elXPhLV8qJm-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a5:2d:b2:cb:1e:07:df:26:a6:dc:e3:66:a8:e1:a2:8b:df:
64:dd:f2:90:f2:7f:05:13:a2:14:b7:8a:ce:5e:ab:62:63:cb:
17:ea:a9:f0:a3:18:7d:e8:f5:79:8d:b1:ec:3a:54:c7:9e:cb:
ed:67:7d:bc:28:e5:77:c0:92:18:ba:d5:f8:c9:cf:ec:f2:36:
21:f8:a2:4c:a6:7f:90:ec:12:9d:f5:51:b5:e1:82:98:03:a7:
d3:eb:3b:ae:ea:a4:d9:f2:5e:45:ae:69:a2:c8:9a:19:42:24:
4d:2b:da:cf:31:2b:f7:14:4f:7f:f7:5e:db:6c:c2:cf:c7:db:
bc:d8:98:b6:f8:d0:c7:f5:69:85:91:80:01:f9:97:a0:fc:ea:
9b:9e:1c:8f:5d:c1:18:17:be:3b:f2:6e:61:12:2a:e8:89:03:
63:50:66:b4:24:8d:00:ed:0d:b2:86:31:35:70:69:28:43:a1:
eb:cc:7a:87:ca:ae:02:a0:bd:a3:26:a4:05:54:48:ad:04:ac:
1a:9c:92:e0:de:df:cd:6b:5a:b2:b3:36:33:42:c6:db:3e:df:
a2:8a:df:8c:95:69:22:9d:8f:79:bc:3c:e9:66:c1:a7:e9:42:
6c:d3:a1:5b:be:2e:22:7a:ee:9e:ed:76:20:41:95:7d:27:ff:
e5:33:fe:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:30 2026 by rpki-client