
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
File: EL2oyoaUjZ_gKdoRGgyecNMEalo.mft (raw, json)
Hash identifier: 3jg6mZSS1LJWurWTk4VtAsaY+tPJGjjuG4PNarFzRnk=
Subject key identifier: 0B:BA:6B:68:52:F4:C9:DC:93:12:C6:B6:AE:1D:89:2B:60:87:7F:2F
Authority key identifier: 10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A
Certificate issuer: /CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
Certificate serial: 019FA8D08B6D9DD832C38372F86D9D126A52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
Manifest number: 0CB3
Signing time: Tue 28 Jul 2026 13:01:07 +0000
Manifest this update: Tue 28 Jul 2026 13:01:07 +0000
Manifest next update: Wed 29 Jul 2026 13:01:07 +0000
Files and hashes: 1: 26reGS5JGM2591eEk2BzmmAasUs.roa (hash: 3M1FfFlULQW8/C7W2Zc2Fn0/lGmaDkz7biCpnx34NUk=)
2: EL2oyoaUjZ_gKdoRGgyecNMEalo.crl (hash: z4tkG1+Z8R/eBpAxbt3PyBejGG9jFjAQsgOg9hjWJsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:8b:6d:9d:d8:32:c3:83:72:f8:6d:9d:12:6a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
Validity
Not Before: Jul 28 13:01:07 2026 GMT
Not After : Jul 29 13:01:07 2026 GMT
Subject: CN=0bba6b6852f4c9dc9312c6b6ae1d892b60877f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4a:5f:f7:85:d9:4a:10:2f:75:5d:76:d5:53:
f8:e2:ba:5d:a6:df:2c:a5:33:5e:85:d3:68:76:2e:
f7:5d:30:a6:18:d6:39:d6:a1:a5:82:2d:1b:10:d8:
22:e5:b0:89:d8:1c:f1:47:31:b9:40:85:14:96:c9:
8a:73:5e:4e:b8:d6:5e:ee:14:90:54:36:88:2b:a6:
ed:6a:31:cc:32:40:2a:a6:69:55:5d:84:0e:bc:82:
78:8c:19:99:e2:21:44:ac:00:34:a5:7c:12:b0:a9:
64:a9:21:ad:53:0f:e7:11:7c:27:cb:87:86:1b:7b:
1e:77:29:39:3c:95:a2:46:4b:e9:73:21:4f:7a:f5:
7f:19:3e:9b:c3:78:a5:e3:2b:e5:15:52:44:3b:0a:
16:94:64:93:40:26:26:8b:0f:10:75:6b:76:00:8f:
ca:cb:7e:98:be:11:cc:53:6d:c2:ac:c9:0a:81:25:
06:41:09:98:42:38:a6:1d:c8:3e:82:4b:04:34:4f:
d7:e2:3e:fc:ff:d9:c0:62:ca:54:ee:4a:ac:d6:2d:
e8:fb:f1:84:79:e2:85:ed:16:e2:3f:d1:45:6f:8c:
21:bc:1a:aa:21:de:a7:57:2f:d5:21:f7:f6:b9:a6:
9d:11:2a:a0:b2:05:98:a6:9d:4c:f3:3e:27:4e:2d:
f2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BA:6B:68:52:F4:C9:DC:93:12:C6:B6:AE:1D:89:2B:60:87:7F:2F
X509v3 Authority Key Identifier:
keyid:10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a4:9a:ee:91:44:9b:b8:45:ab:87:f9:b4:79:17:81:7f:54:
49:c1:65:bb:df:e7:95:30:a4:66:63:32:f0:fa:65:69:3b:3f:
87:63:d0:8c:02:bc:03:ba:5e:fd:b8:61:53:76:48:41:1e:01:
05:4f:dd:a2:b3:5e:67:4f:96:a4:b6:0e:a5:3c:7b:bd:a1:c2:
2e:5f:b1:9c:27:2d:45:56:51:b2:4a:60:87:6f:f3:b3:62:60:
91:ba:7e:f4:22:67:47:81:15:4f:d6:08:ff:03:bc:48:a5:da:
18:26:66:73:1e:1c:bc:ae:d8:7b:35:8a:4b:96:88:6a:32:c5:
77:d0:a7:72:2e:81:39:20:48:43:aa:a4:ef:d8:dc:f0:59:87:
85:ee:e8:68:52:dd:12:87:d1:ef:04:5a:65:ec:7b:64:71:9f:
d5:02:01:71:90:b2:11:9e:51:0a:51:18:65:da:6f:c8:d9:de:
2f:c1:e0:cc:7c:3a:af:8d:f8:be:cc:c9:ec:2a:e6:99:57:76:
7c:64:61:de:14:2f:8c:77:38:24:76:bc:38:44:b0:28:cf:3f:
ff:2e:bd:2a:75:ed:f8:45:f4:12:d7:47:80:7f:ca:9b:bd:80:
b0:14:08:ba:ec:16:f4:0d:6c:91:b7:85:b1:a1:ad:3a:14:c9:
86:46:af:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:58:45 2026 by rpki-client