Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
File: Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft (raw, json)
Hash identifier: YFbuds7XqyoKvFv6oWmPQVUQWP3T74XwSSCb0ir5dqQ=
Subject key identifier: 23:F1:A4:90:91:4B:BC:12:2A:3A:9B:EE:A7:0D:6C:7A:97:BB:D9:9D
Authority key identifier: 12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2
Certificate issuer: /CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2
Certificate serial: 01A0BE79A56655BB9C4180839E45F6DBD636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
Manifest number: 1A67
Signing time: Sun 20 Sep 2026 11:00:38 +0000
Manifest this update: Sun 20 Sep 2026 11:00:38 +0000
Manifest next update: Mon 21 Sep 2026 11:00:38 +0000
Files and hashes: 1: 02E3d24-cYfZLV0Glu5j5jr_NxA.roa (hash: HrKA9gSIFPjwKpZcyEJ7If9t0tL8iCIaN1xyRHRej0w=)
2: Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl (hash: 62wBGb2g8JZ4uErcpVFrc/rOR7TVWI03S466hVCRYLs=)
3: ck4fqmMue0bgQTx_C7e4u7qQu8Y.roa (hash: 3P+Qk6FSe+iXFNy50RbYcBKfyRXeennfx5/RBemjyco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:79:a5:66:55:bb:9c:41:80:83:9e:45:f6:db:d6:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2
Validity
Not Before: Sep 20 11:00:38 2026 GMT
Not After : Sep 21 11:00:38 2026 GMT
Subject: CN=23f1a490914bbc122a3a9beea70d6c7a97bbd99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7c:38:81:33:18:bb:41:4e:32:b5:46:02:b7:
88:75:46:24:f6:a5:47:ca:76:52:39:55:2d:a3:cb:
76:ca:4f:f8:0e:79:7b:00:f2:36:c2:e2:2d:c4:57:
87:32:97:01:db:92:4e:bf:1b:61:fa:c7:bb:27:b8:
3c:d0:c0:e0:f1:d2:42:14:99:ee:0f:14:f9:cc:26:
d8:b0:30:5a:d1:ca:15:cf:46:93:1c:e0:a5:5c:cf:
86:6b:72:73:d5:fd:52:86:fb:6b:2a:de:fe:1b:02:
24:d5:a2:61:79:9f:2a:2f:14:41:70:fe:54:e3:c5:
20:14:65:9e:7a:3f:6e:4f:f2:68:e0:db:0c:03:7b:
f9:79:cd:87:38:58:43:5e:ad:85:08:a9:a0:5b:b6:
e0:c8:f2:9e:ef:bd:41:85:58:6d:cf:88:c6:85:d8:
a3:ab:36:50:c3:c6:b9:e5:6f:c3:93:17:cd:07:ba:
a6:cc:d6:4b:94:e8:9c:fd:e9:93:34:14:a5:95:e1:
05:51:d7:be:87:db:1d:f0:7c:aa:33:a0:73:15:8d:
ff:83:98:54:98:b2:4c:bd:1b:de:7a:f6:a0:90:0d:
a3:7c:49:be:bc:c3:cd:69:0e:f8:4d:97:01:41:6f:
c2:b3:61:22:b8:25:fa:99:48:e4:27:d6:1c:25:b8:
d8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F1:A4:90:91:4B:BC:12:2A:3A:9B:EE:A7:0D:6C:7A:97:BB:D9:9D
X509v3 Authority Key Identifier:
keyid:12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2b:44:32:a9:d2:b2:a8:92:4c:db:dd:4a:97:78:2c:5d:2d:
6a:37:2a:18:d0:79:6e:94:61:b3:38:a3:d9:e7:89:40:a3:b2:
d0:0a:31:5c:c8:fe:32:24:31:3a:0f:1c:32:1b:ed:19:8f:0d:
85:6b:b1:d8:ba:98:b6:d5:fd:4f:1b:b0:72:d4:f7:d8:ab:f6:
b6:c8:26:19:86:e8:f3:85:a8:9a:e9:88:4f:9a:05:72:4c:40:
e1:a1:52:95:2f:ad:fe:8c:15:fd:dc:a7:ce:47:b3:8a:b3:c3:
6c:7a:f8:da:96:02:9b:e5:9f:6d:f1:4f:ed:36:b2:06:7d:23:
18:87:ca:00:25:2e:9b:ba:4c:24:07:b8:f6:db:3d:68:06:c9:
47:c7:83:bc:31:c2:94:f7:63:59:5d:f9:89:63:74:c7:2b:ba:
03:97:4d:28:25:51:46:c9:91:b4:8a:30:26:86:ee:df:77:69:
ae:36:0a:d0:4f:b9:35:4b:14:55:57:d0:ed:64:cb:53:04:ea:
32:9b:77:e7:0e:84:a8:dd:bd:cc:0c:21:9a:1b:d8:e2:b6:d2:
51:e9:d0:f5:b4:3a:9b:42:c9:12:96:f9:9e:87:dd:09:d5:41:
69:4e:91:f0:cf:6a:8d:4a:23:84:66:0a:9f:1a:00:49:e1:1e:
0a:49:e9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:41:22 2026 by rpki-client