
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
File: EL2oyoaUjZ_gKdoRGgyecNMEalo.mft (raw, json)
Hash identifier: oa8oq6xL+s1L5EeZJL0BoWzUFm59py5rnzuKO+6X5xc=
Subject key identifier: 37:8A:A1:86:85:08:E8:1B:8F:8D:69:A1:26:6B:BD:5E:71:AA:1C:DC
Authority key identifier: 10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A
Certificate issuer: /CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
Certificate serial: 019D97AAD96D18CE20C514474866097CC736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
Manifest number: 0BA1
Signing time: Thu 16 Apr 2026 19:00:49 +0000
Manifest this update: Thu 16 Apr 2026 19:00:49 +0000
Manifest next update: Fri 17 Apr 2026 19:00:49 +0000
Files and hashes: 1: 26reGS5JGM2591eEk2BzmmAasUs.roa (hash: 3M1FfFlULQW8/C7W2Zc2Fn0/lGmaDkz7biCpnx34NUk=)
2: EL2oyoaUjZ_gKdoRGgyecNMEalo.crl (hash: Hz+sG4hvPuZx3CyWrhqCBT1g73Ti7ST5KWpOuRxWgQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:d9:6d:18:ce:20:c5:14:47:48:66:09:7c:c7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
Validity
Not Before: Apr 16 19:00:49 2026 GMT
Not After : Apr 17 19:00:49 2026 GMT
Subject: CN=378aa1868508e81b8f8d69a1266bbd5e71aa1cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:da:15:74:0a:12:13:34:9e:bc:86:15:4b:bd:
c9:a3:b8:73:81:eb:ba:0c:06:57:90:06:8c:9a:34:
6a:29:8b:7a:ed:d9:5c:7d:b1:ab:31:63:74:3f:7c:
f4:0a:14:a8:c5:f2:84:99:37:26:6d:a9:2d:8e:80:
e6:da:af:c9:d6:9f:6c:1a:d7:85:20:bb:14:bf:d0:
1a:28:16:df:a4:e8:20:7a:c5:db:16:ca:6b:22:77:
22:cf:7b:49:70:ec:52:aa:72:83:5e:16:ed:f4:a2:
44:d3:73:3a:ff:be:d7:38:d3:f5:55:60:2a:e4:69:
83:60:ce:a0:4b:a2:1b:d2:57:69:22:16:10:5b:87:
7e:f7:ae:fa:9d:57:a7:82:cc:c1:f2:06:73:81:fe:
7e:e2:94:d2:46:0e:28:e0:00:0f:36:6e:ce:a2:94:
7e:cd:ee:cd:5b:d3:2b:a5:03:d9:40:ec:ca:c9:94:
9a:3e:8a:d5:74:4e:1f:95:47:b1:fd:00:78:15:b6:
75:33:55:2d:89:69:bc:33:57:a8:96:53:50:67:74:
f8:f5:01:4e:ad:69:9c:9e:b8:21:3b:de:bd:71:68:
df:d8:c7:9c:68:df:16:e7:dd:16:4b:28:f8:10:15:
05:cc:5c:9b:2c:ed:10:31:30:fa:71:c3:5a:65:6d:
c3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8A:A1:86:85:08:E8:1B:8F:8D:69:A1:26:6B:BD:5E:71:AA:1C:DC
X509v3 Authority Key Identifier:
keyid:10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4d:07:94:83:b4:14:e3:c3:e0:d3:c5:67:1b:53:1c:b2:ce:
f3:bb:14:cd:b7:a4:8a:04:fc:23:66:e5:84:2c:75:c5:83:a7:
3c:6c:c6:0d:94:07:d5:2e:9e:3f:cb:c7:0c:c1:75:d1:51:57:
55:26:69:5d:bf:f8:7e:a1:b6:37:18:dc:11:c1:35:f1:10:bb:
83:bf:37:c2:bc:f2:20:b3:c8:e4:bd:e0:68:8c:6b:e4:a1:5d:
7a:55:e9:9a:b0:37:21:ea:b4:a3:b7:17:77:e4:e4:bd:a3:92:
0c:6a:3d:0c:a4:51:d1:f6:02:57:7c:5f:93:e1:40:fb:e8:db:
f9:66:0c:df:40:4c:cc:64:21:a3:b9:6b:c7:c1:13:a5:8f:46:
0b:47:33:0c:75:69:0f:71:f9:e6:0d:b2:35:41:3e:ee:32:62:
0f:c3:29:35:7d:78:62:9d:1e:a0:83:f9:b0:05:65:84:1b:89:
8f:db:9e:fe:f3:50:24:74:7d:f4:b6:67:3e:bb:b4:f7:90:37:
4a:79:d9:62:78:9d:16:68:25:d3:cc:54:8f:bc:8b:79:7c:c9:
3e:00:68:32:fb:29:81:a7:45:f0:5d:d9:c9:2f:fa:87:3c:91:
70:e6:53:b2:ba:01:79:b0:6d:da:e2:de:1f:f3:96:63:3a:3c:
54:36:20:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:52:58 2026 by rpki-client