Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft
File: EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft (raw, json)
Hash identifier: BRad2AYGdRvTjq1Wh8omdHbLwct+/jwEJ0WwxV+SleM=
Subject key identifier: 7B:8D:C7:59:DE:2B:33:26:6C:9B:D0:4E:40:94:C3:5F:58:F8:E8:09
Authority key identifier: 12:81:FD:01:CC:E2:55:A2:7C:2E:B3:CF:17:53:AF:68:FB:EC:28:FD
Certificate issuer: /CN=1281fd01cce255a27c2eb3cf1753af68fbec28fd
Certificate serial: 01A0CE249FD2FDE0F71542B6C6693E6B9F97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EoH9AcziVaJ8LrPPF1OvaPvsKP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft
Manifest number: E4
Signing time: Wed 23 Sep 2026 12:01:41 +0000
Manifest this update: Wed 23 Sep 2026 12:01:41 +0000
Manifest next update: Thu 24 Sep 2026 12:01:41 +0000
Files and hashes: 1: EoH9AcziVaJ8LrPPF1OvaPvsKP0.crl (hash: 9idhdYMf2tp90RmkE0E4Mqs0IhSlxysSoJVg7a4S1Do=)
2: UeeOGT1aFWqTWrDFmuASM8XoFWQ.roa (hash: 8GToKI8OvtXj4QOA4NLn7hg/E2c2fghSHtpWrxVk2Dw=)
3: oe-1CFwfBXxRDhex7FkwF1JYZTA.roa (hash: FBEY8qRdvuiENUskWnHAGFekMX8Uope29YCFoFBpnsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EoH9AcziVaJ8LrPPF1OvaPvsKP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:9f:d2:fd:e0:f7:15:42:b6:c6:69:3e:6b:9f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1281fd01cce255a27c2eb3cf1753af68fbec28fd
Validity
Not Before: Sep 23 12:01:41 2026 GMT
Not After : Sep 24 12:01:41 2026 GMT
Subject: CN=7b8dc759de2b33266c9bd04e4094c35f58f8e809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6d:69:c3:8d:9a:ad:16:fa:0e:9b:ce:32:d3:
ae:d8:b9:f0:68:bf:5d:31:78:65:4d:17:6a:eb:1d:
23:ab:03:ec:f3:df:98:9e:4a:61:ef:7b:06:ca:6d:
5e:ea:f4:77:2e:3b:e3:9e:fb:50:94:28:3c:a7:9f:
7d:e2:2c:ab:ff:8c:f4:e2:aa:14:7a:c1:ac:6a:4b:
88:41:6c:36:ce:e4:12:30:29:fe:30:1e:2d:6c:37:
a6:11:6a:72:1a:7f:48:09:99:da:ce:3d:12:44:6e:
c5:b8:bc:8a:13:b4:a7:a3:d6:92:e0:b9:53:1c:c6:
f2:ca:11:64:08:2e:0f:61:36:d8:14:d1:c2:65:2e:
0c:97:ff:4d:af:92:b6:cc:20:47:a3:61:b7:d8:16:
71:06:c6:9c:84:af:7b:40:f7:5e:ed:82:cd:4d:7a:
5c:48:82:2a:88:db:f0:72:df:da:4a:7d:63:29:0e:
60:f4:15:d6:9a:54:e2:f7:06:59:60:0b:c7:b8:c7:
70:27:40:3c:e5:96:6b:b5:e4:3f:9f:c6:14:4d:d2:
fe:01:c1:20:2f:f7:d2:93:a7:b1:d7:51:a8:03:2f:
20:33:d1:7f:e9:c1:64:12:d1:8e:88:fa:12:f6:53:
a6:be:c3:eb:14:fd:b9:e7:45:f5:7e:b0:29:56:2d:
7e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8D:C7:59:DE:2B:33:26:6C:9B:D0:4E:40:94:C3:5F:58:F8:E8:09
X509v3 Authority Key Identifier:
keyid:12:81:FD:01:CC:E2:55:A2:7C:2E:B3:CF:17:53:AF:68:FB:EC:28:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoH9AcziVaJ8LrPPF1OvaPvsKP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:76:b6:0e:ee:e1:73:4e:e2:20:42:b8:d2:67:f2:96:51:0a:
55:a9:a2:6e:67:5e:73:cc:a5:e4:50:1d:c3:e1:42:97:18:7e:
e8:ef:61:a9:ee:8f:c9:c0:ff:c8:4c:ad:33:9e:76:36:c3:06:
df:60:ff:22:e5:57:a3:83:57:58:b0:05:3a:b8:0a:e4:fd:12:
5b:b2:69:d2:13:2e:59:3b:d6:12:ba:5b:43:88:da:c0:98:94:
f9:91:28:13:2c:f9:db:1f:3a:94:a1:0b:56:ab:ab:de:01:93:
99:e6:cb:a8:59:be:12:18:7b:dd:9f:b1:8b:65:fd:a4:9b:c9:
b4:af:6e:be:69:22:24:a6:db:c6:9e:58:eb:05:9f:90:20:1c:
93:0d:91:8f:9a:ba:c3:b4:3d:a4:e9:08:f8:c9:1a:18:c7:f8:
78:2b:7b:88:fa:0c:ce:4c:f3:ff:7e:94:7d:f5:0d:12:ba:83:
1e:cf:9b:5b:93:28:e0:a6:76:10:84:45:d4:78:9f:db:db:6c:
a5:0b:bd:48:2b:01:8a:72:04:fd:b7:aa:a0:52:76:09:91:4a:
a9:cc:d4:b6:e9:02:7e:0f:aa:c1:4b:0b:ab:88:9b:a8:22:f9:
ff:31:48:36:8a:d0:60:e0:69:98:2b:26:09:d4:2d:2d:40:0f:
82:3f:7c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:29:18 2026 by rpki-client