Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft
File: EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft (raw, json)
Hash identifier: W7E/a3l+tMa+5T2+phXaRXQoQ5APEgm57O9QzGABdow=
Subject key identifier: 0E:E4:DA:8C:CB:E6:BA:0B:E5:12:DE:4B:E6:3C:21:A2:C7:FD:4A:4D
Authority key identifier: 10:E0:5D:AB:BC:F1:4D:53:01:5A:B8:FF:1E:4B:D7:29:7A:CB:0E:77
Certificate issuer: /CN=10e05dabbcf14d53015ab8ff1e4bd7297acb0e77
Certificate serial: 019CAD9044C48BA2A82CB4DA043001CBDF0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft
Manifest number: 01AC
Signing time: Mon 02 Mar 2026 08:00:38 +0000
Manifest this update: Mon 02 Mar 2026 08:00:38 +0000
Manifest next update: Tue 03 Mar 2026 08:00:38 +0000
Files and hashes: 1: 6XKN9mbXIZSOV6lIZCe171oGYFI.roa (hash: y46Uc83KEsrnQfYqTwtEh8WVRZS0uyMCAN5uYCStLoQ=)
2: EOBdq7zxTVMBWrj_HkvXKXrLDnc.crl (hash: H2qKECPeWkKaNGKc004QaDmWnJJGzmaHY/4YPYGbbHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:44:c4:8b:a2:a8:2c:b4:da:04:30:01:cb:df:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10e05dabbcf14d53015ab8ff1e4bd7297acb0e77
Validity
Not Before: Mar 2 08:00:38 2026 GMT
Not After : Mar 3 08:00:38 2026 GMT
Subject: CN=0ee4da8ccbe6ba0be512de4be63c21a2c7fd4a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1f:a6:e4:9a:0d:dd:ba:3f:63:6a:d6:c0:9f:
b3:56:4a:2f:00:33:73:a9:b4:4e:98:66:ee:9b:94:
66:65:b3:79:b9:f3:e9:c5:67:ca:4b:9b:0f:3c:af:
9c:d2:f7:f9:0c:29:2b:a9:eb:4a:d2:8d:ba:9d:16:
80:18:61:78:61:f5:06:d5:5e:aa:d6:d2:34:f6:52:
e8:2e:8a:84:4d:e7:3d:10:dc:8c:68:8c:56:c6:36:
7b:27:06:90:fc:00:99:6f:28:2d:3e:3a:bc:bb:5b:
14:42:34:99:35:e4:46:52:6e:68:99:7a:fa:5c:bb:
b6:be:55:09:22:a3:5d:2f:8f:ae:95:22:e7:6e:8f:
2a:51:77:c9:61:b6:79:47:35:b8:bc:f0:12:7e:75:
06:55:26:1c:b1:2c:70:16:5d:f8:a3:12:94:e5:0e:
1a:82:85:60:ff:b2:8d:99:7c:d3:7e:6c:69:2a:0c:
25:17:83:81:9d:95:aa:10:ed:ba:f5:1a:a6:87:5a:
75:1f:fa:59:06:ea:fe:4a:78:6d:21:6f:60:39:bc:
46:b4:40:57:81:8d:35:40:58:42:2c:d8:9e:e1:86:
93:91:55:55:80:e8:1d:7e:dc:87:6d:ba:4e:da:ec:
0d:d0:82:a4:75:02:1d:27:21:86:e9:55:e1:96:86:
7d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E4:DA:8C:CB:E6:BA:0B:E5:12:DE:4B:E6:3C:21:A2:C7:FD:4A:4D
X509v3 Authority Key Identifier:
keyid:10:E0:5D:AB:BC:F1:4D:53:01:5A:B8:FF:1E:4B:D7:29:7A:CB:0E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f2:b4:a1:cb:76:ea:20:cf:1d:65:a6:23:0d:33:69:09:64:
c3:87:93:e4:2d:fb:3c:f7:b1:1d:a9:6c:7e:30:c0:ef:20:46:
ce:a4:78:b0:de:2b:d1:42:46:40:44:36:58:55:42:47:ae:c2:
07:ea:a0:77:01:2e:83:a3:52:e5:31:5f:38:fd:d6:a6:dc:d0:
a6:56:95:ae:62:cd:bb:00:66:af:07:48:c9:ea:ce:af:2f:25:
b1:f2:8a:c8:ba:b7:b3:67:39:1c:e9:39:4d:92:7d:61:4a:48:
40:b1:f6:f2:a0:f0:46:3b:3c:eb:99:ce:2f:7d:41:98:e5:20:
de:af:5f:4a:0d:d8:49:57:dd:98:40:8f:3a:e8:dc:3b:ca:b3:
38:7e:7a:eb:c3:62:f4:59:e0:91:d1:33:a5:a7:e5:12:ca:aa:
2f:4a:7a:c4:5e:63:e8:c5:0b:01:bc:ce:e1:f1:59:a4:11:a6:
42:23:ac:be:cf:9a:14:fc:9a:bf:af:45:17:70:58:ae:66:78:
b0:a2:8f:4b:b2:2b:2c:a2:b6:1d:c2:3f:6d:cc:5b:3f:ba:86:
0e:d6:21:53:c6:f3:8a:7c:6b:f0:86:4b:65:77:1f:6b:c9:d4:
89:9c:b1:6e:2c:fd:48:ad:72:07:31:c9:51:41:22:12:64:19:
a4:ce:ab:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:36:10 2026 by rpki-client