Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
File: 62eoQOQaxm-PNZzL1lNUyRcEK78.mft (raw, json)
Hash identifier: 4CPsfUlPXNsvSp/1OzOAaQh2X0vNfuACUSEZ0kGnos0=
Subject key identifier: 8F:55:E5:B0:8F:83:C1:F7:75:40:D8:D3:05:83:4F:C1:CA:3E:A6:3D
Authority key identifier: EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF
Certificate issuer: /CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
Certificate serial: 019FA89A60FE2D84542EDF457AB80A98A9CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
Manifest number: 0E01
Signing time: Tue 28 Jul 2026 12:01:57 +0000
Manifest this update: Tue 28 Jul 2026 12:01:57 +0000
Manifest next update: Wed 29 Jul 2026 12:01:57 +0000
Files and hashes: 1: 62eoQOQaxm-PNZzL1lNUyRcEK78.crl (hash: b+JPhrXsvrPs7/RqUqHZcSRlTrAZKTEAJz4q5715mfo=)
2: y_DN1NlT3WxnHFjjy8yM8EUu98c.roa (hash: xlreRmvPkwb20CmAYP76if0DKA37CnCWemcHHd4gTDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:60:fe:2d:84:54:2e:df:45:7a:b8:0a:98:a9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
Validity
Not Before: Jul 28 12:01:57 2026 GMT
Not After : Jul 29 12:01:57 2026 GMT
Subject: CN=8f55e5b08f83c1f77540d8d305834fc1ca3ea63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c6:8a:84:29:43:1f:59:d5:5b:12:8c:91:96:
fb:53:8b:ed:f3:5c:c0:d0:fc:04:f8:6f:86:bf:4e:
0a:38:24:6b:fd:9e:60:dd:00:2f:b6:b6:5a:b2:61:
db:b1:00:3f:25:6f:82:d3:01:6a:1e:21:d6:0b:e0:
b1:f4:b3:ea:36:ea:84:b4:63:60:6e:73:60:ee:6d:
4a:9c:c7:99:e7:96:6e:bd:6f:f9:b4:53:2f:c4:2a:
04:31:33:cf:d3:de:aa:c0:5e:ab:94:6d:1b:36:83:
82:68:d9:96:70:ed:bc:db:04:44:61:e7:99:6b:3e:
fc:3d:f9:52:e9:9a:84:9e:43:74:00:53:87:ad:fd:
90:73:29:eb:a2:36:6a:a1:27:7c:d8:e2:a9:75:62:
f4:30:48:e7:f6:e5:ea:15:a3:87:b9:03:52:59:41:
d5:06:08:1a:84:05:00:f3:fb:a1:08:2d:74:e8:ac:
9e:12:8e:95:ae:64:53:c4:0e:c8:6c:b5:4e:0a:ae:
fa:05:ca:12:dc:1c:35:8e:1b:d2:ee:fb:f6:3b:0d:
5c:b8:39:6f:17:22:26:32:ea:d6:43:6b:e2:b8:ad:
d7:ba:f5:14:fa:24:8d:9d:a7:df:ea:2c:23:2c:e5:
f4:7a:31:3f:d2:e8:bd:db:12:25:71:b4:9c:0d:51:
1e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:55:E5:B0:8F:83:C1:F7:75:40:D8:D3:05:83:4F:C1:CA:3E:A6:3D
X509v3 Authority Key Identifier:
keyid:EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:98:3a:ac:16:92:0c:4d:1e:6c:d2:7e:4e:7c:d9:7b:cf:26:
4b:31:78:ac:a6:37:0c:68:c7:0b:f6:ad:06:67:34:03:08:6a:
a6:1f:fb:b1:73:be:10:0d:ed:2b:23:1c:e2:f9:02:d8:df:77:
56:98:3a:1c:29:9a:9a:3c:da:f6:bf:c1:f9:c8:a0:54:fd:ed:
bf:fd:97:ab:99:d3:4a:e8:75:21:ad:8d:6a:a0:3d:f8:74:f1:
90:7c:fe:10:e3:66:85:15:57:87:e0:a2:64:22:03:56:11:04:
62:2a:ad:79:2e:59:a6:7c:e2:dc:00:3d:53:74:cb:ed:1d:cf:
5a:ba:f7:6a:5f:35:04:ff:d0:aa:b6:39:55:0d:ef:34:95:4f:
39:30:1d:76:3a:79:2b:fe:5d:0a:88:a6:ab:20:a0:cb:64:13:
d8:8b:ac:4a:15:5c:c6:c6:c1:31:d9:5a:18:ad:5b:1c:f8:c2:
51:74:5f:b1:06:dd:e8:1e:ac:7f:20:95:c9:98:a3:41:3d:3e:
37:58:a0:cb:b1:43:72:c9:54:8d:3d:79:a2:a0:7e:19:14:82:
ad:d3:a7:89:98:de:bf:70:82:2e:1f:a0:20:d4:f7:37:ba:b6:
b5:f8:04:71:9a:f7:2f:4f:9c:36:e1:58:a4:a6:52:c8:54:3b:
d7:5d:0e:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+ommD+LYRULt9FergKmKnKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNjdhODQwZTQxYWM2NmY4ZjM1OWNjYmQ2NTM1NGM5MTcw
NDJiYmYwHhcNMjYwNzI4MTIwMTU3WhcNMjYwNzI5MTIwMTU3WjAzMTEwLwYDVQQD
Eyg4ZjU1ZTViMDhmODNjMWY3NzU0MGQ4ZDMwNTgzNGZjMWNhM2VhNjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusaKhClDH1nVWxKMkZb7U4vt81zA
0PwE+G+Gv04KOCRr/Z5g3QAvtrZasmHbsQA/JW+C0wFqHiHWC+Cx9LPqNuqEtGNg
bnNg7m1KnMeZ55ZuvW/5tFMvxCoEMTPP096qwF6rlG0bNoOCaNmWcO282wREYeeZ
az78PflS6ZqEnkN0AFOHrf2QcynrojZqoSd82OKpdWL0MEjn9uXqFaOHuQNSWUHV
BggahAUA8/uhCC106KyeEo6VrmRTxA7IbLVOCq76BcoS3Bw1jhvS7vv2Ow1cuDlv
FyImMurWQ2viuK3XuvUU+iSNnaff6iwjLOX0ejE/0ui92xIlcbScDVEeewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9V5bCPg8H3dUDY0wWDT8HKPqY9MB8GA1UdIwQY
MBaAFOtnqEDkGsZvjzWcy9ZTVMkXBCu/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjJlb1FPUWF4bS1QTlp6TDFsTlV5UmNFSzc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wMzQwOTUtOTFlNS00MWIyLWE2YmMt
MzRmY2M0MTg3MTQ0LzEvNjJlb1FPUWF4bS1QTlp6TDFsTlV5UmNFSzc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wMzQwOTUtOTFlNS00MWIyLWE2YmMtMzRmY2M0MTg3MTQ0
LzEvNjJlb1FPUWF4bS1QTlp6TDFsTlV5UmNFSzc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJg6rBaS
DE0ebNJ+TnzZe88mSzF4rKY3DGjHC/atBmc0Awhqph/7sXO+EA3tKyMc4vkC2N93
Vpg6HCmamjza9r/B+cigVP3tv/2Xq5nTSuh1Ia2NaqA9+HTxkHz+EONmhRVXh+Ci
ZCIDVhEEYiqteS5Zpnzi3AA9U3TL7R3PWrr3al81BP/QqrY5VQ3vNJVPOTAddjp5
K/5dCoimqyCgy2QT2IusShVcxsbBMdlaGK1bHPjCUXRfsQbd6B6sfyCVyZijQT0+
N1igy7FDcslUjT15oqB+GRSCrdOniZjev3CCLh+gINT3N7q2tfgEcZr3L0+cNuFY
pKZSyFQ7110OOQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:40:22 2026 by rpki-client