Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
File: EL2oyoaUjZ_gKdoRGgyecNMEalo.mft (raw, json)
Hash identifier: VFgY7NquRg0QKsM25OyS7VTy81nDBkOI6wgyln1qRhc=
Subject key identifier: 89:9A:B3:D5:BF:29:21:45:25:2E:03:A5:A4:8F:CF:EF:E5:13:6E:58
Authority key identifier: 10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A
Certificate issuer: /CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
Certificate serial: 01A0C0D5C993FD20CBE24F02E82D89DEA667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
Manifest number: 0D44
Signing time: Sun 20 Sep 2026 22:00:31 +0000
Manifest this update: Sun 20 Sep 2026 22:00:31 +0000
Manifest next update: Mon 21 Sep 2026 22:00:31 +0000
Files and hashes: 1: 26reGS5JGM2591eEk2BzmmAasUs.roa (hash: 3M1FfFlULQW8/C7W2Zc2Fn0/lGmaDkz7biCpnx34NUk=)
2: EL2oyoaUjZ_gKdoRGgyecNMEalo.crl (hash: cbOLVojaEWXyDSdNRPF7XlhjKnFX+n1aSqESkqcA6L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:d5:c9:93:fd:20:cb:e2:4f:02:e8:2d:89:de:a6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
Validity
Not Before: Sep 20 22:00:31 2026 GMT
Not After : Sep 21 22:00:31 2026 GMT
Subject: CN=899ab3d5bf292145252e03a5a48fcfefe5136e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5d:5a:af:fa:2a:df:99:2f:8f:c2:63:60:9f:
13:38:b9:00:0b:0b:8e:68:53:b6:9a:25:29:b5:4f:
cd:49:6d:40:bf:47:38:f2:c6:a6:cd:e6:ce:45:c7:
07:3b:1f:41:59:8a:74:5e:62:66:92:69:56:c4:00:
b0:f8:99:77:b9:bf:3d:ad:d4:6e:b2:15:ae:5f:b6:
cb:13:08:13:85:77:66:78:38:c6:be:8a:8a:af:4f:
e2:79:e6:72:f5:64:e9:15:be:7f:73:58:ce:e9:60:
51:da:b2:6d:12:b1:70:69:e5:62:88:8f:82:c1:4c:
70:10:c3:1d:a0:01:80:99:bc:bf:2b:41:a6:f7:a9:
fa:f4:a8:63:90:a6:52:89:26:da:e4:55:5e:31:21:
33:c8:1e:51:92:75:fe:8e:2f:d9:7d:8a:1a:0f:a9:
8b:75:66:ec:5f:5c:ac:62:17:1b:64:33:8d:f1:98:
e5:9b:15:48:4c:44:c0:b8:e3:3f:bd:ee:4b:cf:2d:
70:91:27:ef:d9:90:b5:cd:80:90:39:d3:2d:16:13:
50:86:76:76:2d:97:ff:05:29:8a:4c:e7:a5:4d:29:
2c:4f:c1:be:39:84:8b:e9:b3:24:63:9b:d4:6e:47:
2c:d8:77:ed:b4:9c:7d:28:39:0c:78:ce:8e:b5:f7:
15:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9A:B3:D5:BF:29:21:45:25:2E:03:A5:A4:8F:CF:EF:E5:13:6E:58
X509v3 Authority Key Identifier:
keyid:10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:30:75:39:9a:31:66:61:40:7a:c0:bc:e4:da:c5:e7:f8:f5:
2f:63:2c:ca:1e:69:02:e8:b6:80:8c:69:78:0a:aa:d8:44:c6:
3c:d2:61:df:e3:cb:34:1a:d5:a2:07:b1:7a:2b:10:17:88:00:
51:02:6f:d7:b3:87:f1:64:fa:e9:54:ab:79:23:55:cc:6f:95:
e3:1a:6f:90:49:3c:0a:9c:a4:a2:16:de:7f:4a:e5:92:c8:84:
4c:f0:71:09:b6:02:c7:86:27:5b:ac:82:7c:28:26:23:03:86:
4d:19:b8:54:ad:5e:09:10:9b:55:f1:0d:7c:6a:c5:60:be:7a:
2b:b0:6a:99:29:07:f3:51:ab:fe:71:34:66:7d:85:06:3b:dc:
dd:bc:63:c4:88:b9:1c:24:6b:e7:54:42:fe:d2:6b:1d:be:fc:
39:a1:b8:f4:e6:51:d8:5b:96:4a:97:89:09:89:b1:6a:ff:b4:
3a:f9:c1:18:d6:e2:96:94:a4:de:c1:1d:37:38:59:2b:fb:26:
d8:e1:82:08:62:51:36:38:d5:55:9f:e1:ac:32:8c:66:71:b1:
bb:da:b7:bd:c2:ba:9d:fa:75:d3:99:01:cb:4b:e7:de:77:56:
4f:56:85:f5:be:f2:20:c7:e4:61:f6:fc:dd:ad:a0:8a:10:34:
d3:62:f8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:16:09 2026 by rpki-client