Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
File: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft (raw, json)
Hash identifier: 4SXCRmtkBK2chr3FR70ZBD4IigdrOwJCIH3HR6WGXOY=
Subject key identifier: 00:F2:15:B9:55:19:02:A1:47:EA:70:46:BC:F0:C6:99:FE:8C:98:89
Authority key identifier: D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
Certificate issuer: /CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Certificate serial: 019FA9E304850705EAC0A1AD5EABACA0776D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
Manifest number: 1286
Signing time: Tue 28 Jul 2026 18:00:55 +0000
Manifest this update: Tue 28 Jul 2026 18:00:55 +0000
Manifest next update: Wed 29 Jul 2026 18:00:55 +0000
Files and hashes: 1: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl (hash: bqN4eO6yR6gKrzKiC7bMSmvmuaFVh2Cj2foN8yJh4g0=)
2: 9gVKfPDu8oaxgCYhsIHGv4QIfWU.roa (hash: fllRN8SucuRDRWnVjdcisQzmvofCxZ5K6VMo5ZRY8Z0=)
3: YOp__Ry-NGpngn9AjDGoHEbjeCg.roa (hash: ON5r8fZJQGVj6wPi39Ya/7ATYu3d/0MWZ+FMIC4DzPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:04:85:07:05:ea:c0:a1:ad:5e:ab:ac:a0:77:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Validity
Not Before: Jul 28 18:00:55 2026 GMT
Not After : Jul 29 18:00:55 2026 GMT
Subject: CN=00f215b9551902a147ea7046bcf0c699fe8c9889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:85:24:77:64:c0:8c:a7:c1:dc:da:21:4b:0b:
d0:17:31:dc:26:b9:1b:9d:3e:b4:36:8f:fd:bc:2b:
80:51:88:a1:2f:0a:f6:7b:df:aa:8d:38:c9:38:de:
f9:2e:12:da:95:04:65:2f:cc:47:a8:36:77:01:04:
cb:65:0b:55:cd:e6:3a:1e:6f:0b:c9:dc:d5:fc:42:
b7:a8:97:af:1b:c2:5d:3d:6d:7d:1d:a8:f4:ce:f0:
fb:1f:9e:12:a2:7a:5d:01:ff:08:9b:0c:b9:0f:7d:
e4:35:f0:01:ac:3b:83:f3:95:1d:d5:a6:92:b1:8a:
ae:75:30:fb:34:7a:ee:10:9a:67:32:13:64:7b:42:
3b:de:d4:fc:a7:01:88:d8:9b:ed:23:a3:a9:ee:29:
13:31:88:b7:3b:f5:1d:17:e1:5c:09:84:3c:26:69:
b8:16:22:88:e9:3e:90:d9:94:16:df:66:bc:3d:95:
6d:b8:33:80:43:39:bc:ce:40:c8:8f:70:9f:b1:6e:
a7:d6:12:21:4d:1e:8d:16:3a:f6:bb:8e:e6:16:a4:
94:df:cf:ca:2f:6d:bd:ed:86:6d:96:70:8c:7a:d8:
9e:ee:f3:d8:5f:0d:80:ef:c5:31:d2:9c:c8:01:38:
b1:61:c2:ff:61:19:d2:35:c6:be:c5:38:0e:bc:7e:
c3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F2:15:B9:55:19:02:A1:47:EA:70:46:BC:F0:C6:99:FE:8C:98:89
X509v3 Authority Key Identifier:
keyid:D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ba:b6:3f:84:21:55:8d:5a:a0:68:8d:d0:08:7a:35:b3:35:
cb:d6:29:48:95:ec:40:d5:92:60:7e:ab:a9:5d:ce:b6:08:45:
a5:06:9f:1e:b6:79:a3:01:40:57:11:ed:57:89:91:0a:39:58:
a4:39:76:d3:2e:ea:61:ee:26:f7:38:85:bf:74:da:97:d1:c8:
ea:3b:1d:ef:13:9e:7a:cb:3e:41:13:3a:17:7b:7f:5b:f5:5c:
69:bf:06:a4:c2:64:7c:ff:3b:16:5b:3e:78:6f:98:fa:cf:08:
b5:62:d3:d3:c1:24:dd:5f:e3:08:40:86:52:a7:63:77:9e:78:
76:b0:80:d9:6e:dc:bd:f4:b9:5f:b7:74:81:cd:dd:b8:8d:20:
47:2d:9c:f1:fd:72:2a:4e:02:2f:5d:04:5e:b7:49:49:de:a0:
c2:c6:b7:f3:2d:cb:86:3b:03:41:2d:69:23:e8:74:40:f0:8b:
e8:e3:28:ba:f7:48:29:be:02:48:23:03:e7:e1:41:8b:f6:57:
42:4c:b4:af:15:b9:62:f5:df:cf:fc:81:02:30:73:9d:e2:b7:
d8:91:65:07:fb:e2:fe:ee:a2:5b:87:3f:cb:b4:64:3b:5d:01:
00:39:3c:db:51:5d:05:a0:a3:93:7c:a1:50:84:08:41:35:c5:
b1:2c:54:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:33:27 2026 by rpki-client