Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft
File: eojTDTUC0d-66TDV6pzJ1yY-lQg.mft (raw, json)
Hash identifier: lFSVoYjiRU0mqXrQfn5FG2OWE+pi8KATlDS1iQJVA4M=
Subject key identifier: 40:2E:2A:4C:EA:09:F2:0E:28:54:52:9F:9C:6A:56:94:1F:69:FA:C9
Authority key identifier: 7A:88:D3:0D:35:02:D1:DF:BA:E9:30:D5:EA:9C:C9:D7:26:3E:95:08
Certificate issuer: /CN=7a88d30d3502d1dfbae930d5ea9cc9d7263e9508
Certificate serial: 019D3AF8BA90E0A2EB37BE11D51DEBBC62F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eojTDTUC0d-66TDV6pzJ1yY-lQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft
Manifest number: 0586
Signing time: Sun 29 Mar 2026 19:01:12 +0000
Manifest this update: Sun 29 Mar 2026 19:01:12 +0000
Manifest next update: Mon 30 Mar 2026 19:01:12 +0000
Files and hashes: 1: 1-4K1IVOJn7nAT0rq7-vBNKDfOH0.roa (hash: zpB+4xP9DfxiPXYyO76KcFfYZAOeUtNUuwf832esy4E=)
2: eojTDTUC0d-66TDV6pzJ1yY-lQg.crl (hash: p6yMCzWB8tqA/x2lSMzQqC86z9QnJbyT9QnDestGYQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eojTDTUC0d-66TDV6pzJ1yY-lQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:f8:ba:90:e0:a2:eb:37:be:11:d5:1d:eb:bc:62:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a88d30d3502d1dfbae930d5ea9cc9d7263e9508
Validity
Not Before: Mar 29 19:01:12 2026 GMT
Not After : Mar 30 19:01:12 2026 GMT
Subject: CN=402e2a4cea09f20e2854529f9c6a56941f69fac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2a:69:0a:9f:58:ef:df:62:bc:44:79:3c:d2:
07:0e:19:71:55:3c:46:29:1a:27:48:18:5b:47:ec:
a0:ba:c8:6d:68:92:03:16:35:26:eb:46:8d:85:07:
49:15:5b:00:18:3f:f5:74:55:cb:2a:5c:4a:20:43:
de:73:f4:34:f9:3e:28:0a:10:b4:40:ab:13:f2:8e:
e8:17:5f:5c:53:d5:48:9d:50:eb:86:ad:30:9b:3c:
b4:c1:f9:ad:b0:44:32:7d:cd:13:54:81:66:fc:da:
5a:66:0b:40:9e:d5:a9:9f:0c:97:39:69:3a:f9:4c:
ab:c6:dd:c2:2d:13:ec:36:9c:66:3b:57:71:1c:c4:
d4:49:35:1c:9e:e1:ef:78:50:51:19:11:ba:0b:ba:
47:c1:85:47:49:a1:b5:84:b9:24:50:20:b6:e5:b1:
3e:d8:10:fa:c4:a8:1c:de:86:7b:6c:c9:f5:c7:b0:
d0:76:e0:27:d5:56:46:50:3d:45:45:c6:d9:4d:0c:
77:f8:ec:53:6f:ec:f8:d6:75:72:ed:28:ed:9b:a0:
0b:5e:9c:37:c6:9e:54:dc:10:23:86:0c:88:fe:b6:
3d:f2:6a:9d:03:d7:33:fc:ea:ce:71:3c:5c:0d:80:
fb:47:34:a7:8f:af:8f:7d:97:75:6c:a5:d6:ce:cb:
1d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2E:2A:4C:EA:09:F2:0E:28:54:52:9F:9C:6A:56:94:1F:69:FA:C9
X509v3 Authority Key Identifier:
keyid:7A:88:D3:0D:35:02:D1:DF:BA:E9:30:D5:EA:9C:C9:D7:26:3E:95:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eojTDTUC0d-66TDV6pzJ1yY-lQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:bc:9b:0e:81:26:35:5c:68:e1:11:b4:d2:b1:c9:3d:4f:a7:
b6:e2:ed:85:b1:a0:78:0a:ae:a0:d0:dd:99:a4:02:3f:d4:e8:
c7:e8:d6:3a:cd:0f:7a:47:4a:fb:ca:aa:94:50:50:8c:e3:fe:
6e:a5:20:15:b2:f6:58:3f:e2:99:31:a8:e1:a3:bf:4e:f5:2c:
3b:2a:73:4a:cd:32:42:4f:4f:02:11:88:28:e2:c9:57:84:1d:
df:eb:d5:fc:b1:6b:ff:c5:9a:4f:ef:c2:63:56:56:6a:07:c7:
bf:57:f8:54:d1:36:f1:87:8a:d2:ef:8d:85:0c:64:55:2a:08:
ca:2e:d3:c0:ae:35:84:1b:59:4a:7d:e3:3a:58:db:f6:e5:94:
91:29:13:c1:bb:28:39:b6:ff:d8:12:f3:5c:fb:06:50:34:56:
65:00:7d:b8:81:08:82:7d:24:e3:13:a0:89:a4:a7:2c:70:cb:
fb:a1:c9:be:63:88:ce:f8:19:72:51:c9:b2:b2:03:7f:92:9c:
d7:46:86:20:06:94:7e:25:42:ad:0e:fc:a3:71:3c:b3:fb:48:
07:a1:ee:1c:cf:3a:e0:0b:78:be:cb:59:03:d0:11:62:0f:5f:
3a:78:af:a9:7c:17:ab:76:99:b4:43:e5:54:d7:43:fe:6a:0a:
46:49:4c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:11:19 2026 by rpki-client