Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
File: ean2o4HOSlo-zLJJOmhGCcmIoPw.mft (raw, json)
Hash identifier: pcU+2tT1Mp020vhYOLPNfV40xiToXlGWbVPyo3Jbjxc=
Subject key identifier: 05:61:45:7D:A3:7B:16:DB:B8:D9:46:14:65:4D:E4:7E:C3:8C:37:60
Authority key identifier: 79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
Certificate issuer: /CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Certificate serial: 01A1212F5E97BD93389DCE8365BF5B11FBE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
Manifest number: 1957
Signing time: Fri 09 Oct 2026 15:01:54 +0000
Manifest this update: Fri 09 Oct 2026 15:01:54 +0000
Manifest next update: Sat 10 Oct 2026 15:01:54 +0000
Files and hashes: 1: Ala0VEiwCJ-XgbkKMuOQm4WQGUM.roa (hash: kHPaxmGFnvypL4VtsE3od5qxMzTcY3hqjMVSes+1x+o=)
2: ean2o4HOSlo-zLJJOmhGCcmIoPw.crl (hash: rja3Sdd1diKL5zF23Pwyh6ICb1Tz8n2reqNe4CiEZtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:2f:5e:97:bd:93:38:9d:ce:83:65:bf:5b:11:fb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Validity
Not Before: Oct 9 15:01:54 2026 GMT
Not After : Oct 10 15:01:54 2026 GMT
Subject: CN=0561457da37b16dbb8d94614654de47ec38c3760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:b7:47:e3:d1:ef:5a:37:9e:24:bc:9e:e3:
cd:02:5b:48:e8:9c:53:8a:5c:7e:fe:b6:be:06:d4:
c0:69:b4:32:78:05:9a:63:29:89:58:3e:cb:24:be:
75:46:be:85:e5:d4:d2:0e:05:0a:73:63:23:30:96:
07:87:ff:16:b9:53:72:64:36:01:6c:a8:19:53:c9:
78:d8:e1:85:d4:d3:51:ee:35:7e:19:c0:f0:62:55:
82:c6:cf:81:cd:c5:08:05:12:23:fc:2f:3f:4f:f7:
67:5e:90:2a:ea:09:64:5d:0b:65:27:10:2d:a8:9e:
e7:6d:e7:93:49:a7:20:6b:98:b3:80:cf:78:0f:14:
3a:1a:43:e9:0a:a2:31:99:df:8d:58:39:b0:48:98:
15:3c:7b:95:2f:51:7e:c0:6c:0a:0e:c6:31:e1:b7:
c0:54:7c:40:e5:80:75:3d:b3:af:e2:dc:46:38:4d:
fa:1c:40:b8:a5:2e:62:2e:e0:b6:e2:40:d4:c0:c6:
b5:75:83:8f:e9:f8:d5:42:f8:f5:ce:49:b0:14:b2:
57:6b:fe:bb:8c:a7:56:28:b1:11:94:27:01:e2:5b:
fa:48:68:8a:ff:da:0e:d7:04:b3:b2:02:fa:09:d2:
3e:8f:55:3f:fd:e8:69:c9:23:62:e0:31:f3:0f:75:
82:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:61:45:7D:A3:7B:16:DB:B8:D9:46:14:65:4D:E4:7E:C3:8C:37:60
X509v3 Authority Key Identifier:
keyid:79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:eb:0f:89:d9:a8:f7:b4:e4:29:b4:9f:c3:7a:ad:22:24:86:
b5:d9:11:0f:75:bf:bc:e1:6c:ef:14:74:de:d3:b3:69:d7:59:
a5:fb:dd:f4:47:ed:b6:90:6c:ce:fe:cc:2a:94:2c:71:dd:35:
33:db:4f:be:65:4b:c7:b2:71:58:f0:23:3d:92:4c:fa:a1:58:
97:ac:cc:f6:df:60:2c:b7:10:b7:ad:84:85:9b:af:96:e9:5a:
17:91:14:b0:d6:4c:4e:30:b3:68:36:e0:80:7d:d6:60:56:5e:
bb:ce:2c:3d:b5:07:82:e7:be:35:16:72:30:21:c3:ad:25:ba:
e9:cd:4c:29:1a:5a:6d:4e:18:2b:4f:a0:a2:44:aa:cd:01:9b:
08:32:a1:70:30:ac:43:c8:65:13:26:ef:86:24:8a:4c:0d:12:
eb:6d:1c:b1:13:d9:a7:63:1e:f1:9f:ed:94:63:6f:55:71:29:
0a:be:e6:27:1f:68:fc:89:bf:60:5e:5e:48:f7:8b:d6:e5:61:
10:5d:f2:bc:37:84:8c:19:c7:0a:e4:b1:23:5e:af:58:79:74:
bb:1f:3f:37:84:d6:24:1c:d3:05:0c:07:fb:0d:76:e6:48:e2:
e2:e4:f9:e2:b0:86:20:a7:39:c4:db:23:16:1a:4e:b2:0f:59:
5f:ea:2e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 18:32:59 2026 by rpki-client