Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
File: EoEZrBeON5iQNuoposD0YwaWz-g.mft (raw, json)
Hash identifier: j1XuhDw36qDn5VcrVF3szeCKo2uKdIQIVA8i6XTVARs=
Subject key identifier: E5:F9:04:0E:F6:D8:B7:CA:5C:71:6B:DB:F5:47:09:C4:AF:42:2B:DC
Authority key identifier: 12:81:19:AC:17:8E:37:98:90:36:EA:29:A2:C0:F4:63:06:96:CF:E8
Certificate issuer: /CN=128119ac178e37989036ea29a2c0f4630696cfe8
Certificate serial: 019DA59D2E4F25E42DF71C35E5636794E588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
Manifest number: 013F
Signing time: Sun 19 Apr 2026 12:00:34 +0000
Manifest this update: Sun 19 Apr 2026 12:00:34 +0000
Manifest next update: Mon 20 Apr 2026 12:00:34 +0000
Files and hashes: 1: EoEZrBeON5iQNuoposD0YwaWz-g.crl (hash: 2cVOJ1WFMtyb79CseAlMVbcKOMa4Yyf3O37pw2nfhQs=)
2: MoyUhaJrKyyg7NdI-cgC8UrZDnc.roa (hash: Blton8K6qNZytZrnFkrDQwMOUJgcucmO6AJ7qz+2/EQ=)
3: dfjch8XLq-4wXUHU0X4FRj8rZtw.asa (hash: LprVvfFT3+5D2/SGgkoYdn2pNQPb3rgY3LcWQ8dnja0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:9d:2e:4f:25:e4:2d:f7:1c:35:e5:63:67:94:e5:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128119ac178e37989036ea29a2c0f4630696cfe8
Validity
Not Before: Apr 19 12:00:34 2026 GMT
Not After : Apr 20 12:00:34 2026 GMT
Subject: CN=e5f9040ef6d8b7ca5c716bdbf54709c4af422bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:af:8d:5a:2d:ff:67:12:45:6b:03:09:04:57:
d6:20:06:89:c9:5f:f1:0c:95:82:45:f3:d9:5b:83:
06:28:26:c9:6f:b5:df:2b:28:58:c8:45:6f:7d:81:
7e:35:66:78:12:72:09:df:75:b5:2a:9f:2a:26:47:
e8:07:6e:50:f1:ba:6d:83:6f:2d:08:b8:bd:33:e1:
51:88:55:fe:70:bc:08:5f:bf:3f:f4:d7:f6:0b:42:
7e:94:86:38:af:3e:ef:18:d8:b7:0a:81:6d:0f:60:
07:1d:43:85:c2:da:7f:fa:a9:19:71:79:a9:f1:6a:
7e:bc:4a:db:9e:f6:24:09:e6:ff:f0:ac:47:05:2f:
53:86:1d:28:d8:7b:be:3a:fa:d4:de:d5:11:3d:6a:
a1:5a:5d:c9:13:67:6c:e1:47:46:f6:3b:5e:63:8e:
12:8f:5e:f0:df:12:64:ba:24:82:49:c5:63:6b:3f:
7f:84:f4:73:99:cb:07:c4:89:74:b4:14:c9:cc:ef:
47:51:04:16:0d:8c:df:fd:85:9e:d2:c4:28:e0:10:
3c:62:c6:69:6f:84:b7:41:c3:29:d6:c1:ac:04:f2:
3a:5c:22:00:85:77:08:2c:a2:c5:14:37:6e:53:2c:
05:d7:d1:fa:03:78:c0:de:c5:7d:2b:54:cc:f7:57:
e0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F9:04:0E:F6:D8:B7:CA:5C:71:6B:DB:F5:47:09:C4:AF:42:2B:DC
X509v3 Authority Key Identifier:
keyid:12:81:19:AC:17:8E:37:98:90:36:EA:29:A2:C0:F4:63:06:96:CF:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:86:b8:5a:0d:ce:6e:b1:10:74:40:88:da:64:d8:a4:0e:a3:
4b:fc:84:d8:32:a8:7e:a2:fd:ba:6c:63:ef:b8:88:3d:1a:7b:
cc:7c:c5:6f:5a:b2:12:b4:36:7a:6b:41:20:e3:d8:d0:c6:8d:
bb:db:ce:4e:62:10:c2:6b:2a:37:f9:3c:b0:f4:da:e7:f2:2f:
6d:9e:7a:4a:76:79:57:18:e4:3f:dc:57:23:2b:95:10:c5:32:
9e:de:43:9f:a4:3a:fc:46:9c:86:0c:de:cb:5b:22:77:41:42:
28:00:ec:e2:58:09:6d:1a:f3:e8:41:ae:1b:47:28:fc:00:02:
13:0d:89:e9:05:cd:80:c1:12:2c:df:8b:33:f6:99:41:17:58:
5d:88:e6:eb:79:75:a1:d1:73:56:eb:ec:6a:70:12:d8:ae:31:
1a:92:84:00:a9:19:1b:b6:ab:69:ac:a5:76:39:91:c7:0b:50:
ef:8c:99:fc:bd:55:01:98:df:79:ba:97:6c:0f:19:4d:b9:3a:
67:8f:60:39:30:64:2c:6b:a6:99:ba:8c:3b:5b:22:d0:ad:9e:
dd:af:ea:a3:78:19:f9:c8:d3:bd:7f:1a:9c:8b:56:8c:bf:a8:
ca:79:a1:02:71:73:89:76:23:a0:5d:a5:a1:4d:7e:f9:26:5f:
53:9c:54:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:13:19 2026 by rpki-client