Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
File: EoEZrBeON5iQNuoposD0YwaWz-g.mft (raw, json)
Hash identifier: RzG/dEYWgju4DfMJBe5apqVHxJDed4oPRknD692MV+o=
Subject key identifier: 76:91:1B:78:F0:71:FB:03:B7:35:CE:56:A3:9F:8B:B0:1C:09:49:F6
Authority key identifier: 12:81:19:AC:17:8E:37:98:90:36:EA:29:A2:C0:F4:63:06:96:CF:E8
Certificate issuer: /CN=128119ac178e37989036ea29a2c0f4630696cfe8
Certificate serial: 019FA7BD41BF63B515DDEF57311B61CA5242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
Manifest number: 024A
Signing time: Tue 28 Jul 2026 08:00:25 +0000
Manifest this update: Tue 28 Jul 2026 08:00:25 +0000
Manifest next update: Wed 29 Jul 2026 08:00:25 +0000
Files and hashes: 1: EoEZrBeON5iQNuoposD0YwaWz-g.crl (hash: 5YamUG0UaIka8MNh+l1CvXuZRRcwlrAakikozvTFQls=)
2: MoyUhaJrKyyg7NdI-cgC8UrZDnc.roa (hash: Blton8K6qNZytZrnFkrDQwMOUJgcucmO6AJ7qz+2/EQ=)
3: XlF1Um0hQjtANHg7MSAgVZmYu7k.asa (hash: vL/L3yXXlyuNpAULKIf/FSlD5vVaZNSSg6lawDMb628=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:41:bf:63:b5:15:dd:ef:57:31:1b:61:ca:52:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128119ac178e37989036ea29a2c0f4630696cfe8
Validity
Not Before: Jul 28 08:00:25 2026 GMT
Not After : Jul 29 08:00:25 2026 GMT
Subject: CN=76911b78f071fb03b735ce56a39f8bb01c0949f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:67:6d:7f:ce:92:75:d7:40:87:7c:01:87:10:
ac:95:92:6c:48:1f:4c:63:9a:3c:ad:10:b7:5f:b3:
d7:fb:7a:47:4a:31:07:26:d3:74:84:35:e5:a5:8f:
b3:53:cc:49:cd:3f:0b:91:88:fb:d7:39:3c:87:af:
30:60:4d:f8:e6:a0:92:da:a8:1b:de:f5:3c:a7:9a:
e9:bb:80:59:e1:b1:31:2b:d3:75:b8:b3:83:b9:43:
b9:bc:2d:1a:ca:57:c4:a1:c0:88:25:53:4c:65:f7:
8a:6e:ce:43:20:6f:89:7c:43:2c:78:b9:90:45:b1:
e1:d6:5d:c3:f4:22:9d:67:1a:2b:cc:08:7a:61:66:
4e:13:49:b6:d0:35:de:99:34:3d:85:16:f1:51:23:
2e:44:ea:88:68:0a:cb:b8:52:bb:85:c1:87:51:10:
a8:2a:21:d9:6b:e2:14:18:b3:e1:d9:db:a9:79:27:
39:72:ce:09:a2:f5:c0:60:ae:af:96:7b:8f:8b:c4:
bc:ce:1c:34:87:04:2c:11:aa:8d:a3:cf:92:26:41:
b4:86:c4:9e:29:67:d9:df:b1:d6:03:50:56:d2:f4:
aa:0d:b0:a5:d0:05:13:76:fc:83:98:7a:4a:fd:bd:
9f:59:18:b2:09:56:7f:90:6b:cf:cb:67:26:e7:66:
55:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:91:1B:78:F0:71:FB:03:B7:35:CE:56:A3:9F:8B:B0:1C:09:49:F6
X509v3 Authority Key Identifier:
keyid:12:81:19:AC:17:8E:37:98:90:36:EA:29:A2:C0:F4:63:06:96:CF:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:27:d4:bc:71:d3:5f:66:5a:e5:c6:35:be:7f:ee:d9:de:8f:
e7:27:94:3a:a1:93:e6:ad:18:db:ab:2e:ac:cc:1a:13:50:c4:
82:a6:de:7d:f8:75:d3:bb:c2:76:12:eb:1f:ac:71:e3:3b:52:
92:0e:b9:f0:58:0f:0d:d2:74:56:0b:95:d7:55:df:2e:fa:c9:
11:11:22:ce:fd:89:7a:c1:3e:7c:e6:0a:13:84:6a:c8:c7:90:
ed:82:98:3a:0a:0d:25:0d:85:4f:91:65:9a:83:a6:98:4b:d9:
d0:d3:ef:fa:89:e4:55:ff:32:1e:59:ad:06:c4:95:1c:fa:0a:
b6:d3:84:a1:a8:e1:70:48:47:41:da:b1:cb:d0:88:4a:2c:68:
d4:8b:52:d0:3c:ef:1f:89:be:a0:cf:3d:55:f6:ca:3d:7e:23:
db:51:13:2a:43:4a:03:f7:9d:f7:68:a9:db:f4:71:83:87:d1:
76:77:19:30:e0:66:96:01:5c:52:45:37:ab:5f:a8:bf:76:d8:
19:3b:74:e1:9d:c9:76:41:b1:fd:9a:52:88:4f:4e:9d:63:35:
6e:56:80:be:6b:b1:c1:9c:ab:12:8f:0a:86:9f:f9:cd:2a:21:
c2:62:92:13:bb:84:6c:ef:6c:e2:84:c1:b3:80:9e:d7:25:57:
aa:f7:bd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:40:17 2026 by rpki-client