Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft
File: EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft (raw, json)
Hash identifier: RwEOspw9r0vnBlYB4saKEew2TpYaGw6/Y5RLf8oYE24=
Subject key identifier: ED:59:36:11:F8:8D:5F:6C:5A:A2:79:28:E1:25:D9:E4:45:57:FE:C7
Authority key identifier: 12:81:FD:01:CC:E2:55:A2:7C:2E:B3:CF:17:53:AF:68:FB:EC:28:FD
Certificate issuer: /CN=1281fd01cce255a27c2eb3cf1753af68fbec28fd
Certificate serial: 019FAA87D545F6FF0FF9DBC6429057C43F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EoH9AcziVaJ8LrPPF1OvaPvsKP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:00:56 +0000
Manifest this update: Tue 28 Jul 2026 21:00:56 +0000
Manifest next update: Wed 29 Jul 2026 21:00:56 +0000
Files and hashes: 1: EoH9AcziVaJ8LrPPF1OvaPvsKP0.crl (hash: 3ImeLPZBzndSqvU4xYR7IhBTP5uTLFW2gtBs3PywDcE=)
2: UeeOGT1aFWqTWrDFmuASM8XoFWQ.roa (hash: 8GToKI8OvtXj4QOA4NLn7hg/E2c2fghSHtpWrxVk2Dw=)
3: oe-1CFwfBXxRDhex7FkwF1JYZTA.roa (hash: FBEY8qRdvuiENUskWnHAGFekMX8Uope29YCFoFBpnsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EoH9AcziVaJ8LrPPF1OvaPvsKP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:d5:45:f6:ff:0f:f9:db:c6:42:90:57:c4:3f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1281fd01cce255a27c2eb3cf1753af68fbec28fd
Validity
Not Before: Jul 28 21:00:56 2026 GMT
Not After : Jul 29 21:00:56 2026 GMT
Subject: CN=ed593611f88d5f6c5aa27928e125d9e44557fec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:26:04:8d:d9:16:0b:e0:55:62:79:ad:37:f2:
c4:fd:8e:05:e3:8b:4e:e0:8e:bc:37:5b:4b:f5:87:
2d:8e:ec:8d:e8:85:6a:86:c1:74:f7:0d:2a:3a:76:
ed:13:aa:ac:14:67:ee:f9:6a:cb:81:87:c3:09:86:
0a:90:a5:39:d6:7f:fa:ab:1a:c1:b4:1b:b3:3f:d0:
1f:4a:3a:54:47:c4:f6:67:17:a6:75:0f:98:f6:26:
ac:f5:17:32:39:62:0a:96:6f:38:d9:ee:e4:f8:03:
7f:82:0f:b0:39:aa:d1:8b:35:a0:b9:fe:55:26:85:
82:7f:7e:91:7e:5e:8d:7b:56:87:b1:c9:88:d5:bf:
c0:c5:cb:70:1c:db:eb:e5:8c:08:5c:33:22:15:85:
a0:45:f4:db:37:6c:1f:ff:8d:be:fe:33:91:f5:88:
6f:8a:d7:0b:29:56:53:c8:f7:cd:f8:59:48:fe:6d:
78:6c:2d:1d:e2:cd:ad:65:7b:e3:36:83:04:cb:72:
af:28:b9:ee:44:42:78:0e:30:3b:a2:4e:94:4d:49:
1c:7c:5b:0d:3d:71:bf:86:a8:fa:88:55:01:56:c7:
2a:25:25:be:54:6e:8b:a1:1f:7b:87:d9:da:1d:8a:
24:5a:e6:aa:07:71:c1:f6:2b:7f:da:30:f1:fb:ce:
72:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:59:36:11:F8:8D:5F:6C:5A:A2:79:28:E1:25:D9:E4:45:57:FE:C7
X509v3 Authority Key Identifier:
keyid:12:81:FD:01:CC:E2:55:A2:7C:2E:B3:CF:17:53:AF:68:FB:EC:28:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoH9AcziVaJ8LrPPF1OvaPvsKP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:a9:39:2a:ba:ca:cf:8a:99:0f:d4:71:31:00:d6:3f:2f:d5:
55:c4:5f:bb:f2:be:8f:1d:96:3f:6e:0e:bf:1b:99:3a:6a:39:
98:d2:e7:07:a9:f5:07:f9:25:3f:85:7f:23:5a:ab:0a:ca:20:
05:36:cc:8f:fe:27:30:ad:7f:ea:27:35:16:12:93:b4:4e:92:
4e:ca:33:b2:5b:20:86:3a:e1:e3:db:72:ff:4c:cb:e2:83:08:
8f:17:74:a9:86:b1:27:fc:82:01:c3:36:07:5e:fe:37:45:55:
dc:dc:9d:5b:27:58:8a:91:ea:4a:8f:e3:44:51:c6:9a:a8:ad:
03:94:61:63:c3:8b:7b:70:b2:14:78:8d:52:bd:bd:96:8e:e8:
e0:d6:a1:77:5d:fa:f0:47:b3:cf:75:09:16:b2:a7:a2:8e:de:
10:1a:11:b9:78:0f:07:75:ef:6d:5e:6f:a8:bf:79:44:5f:53:
15:42:84:ac:ca:70:c4:ee:37:59:da:31:18:5c:4c:3a:4d:d9:
0a:18:d3:10:05:8f:36:d6:d3:02:88:41:a0:3d:ce:ad:e4:17:
ec:5d:b9:7d:6e:54:54:ea:f3:34:b6:00:58:16:ac:39:b1:04:
ef:ff:26:3b:9d:90:d9:38:dc:cc:9c:a2:9c:26:4c:36:ab:29:
44:82:2e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:45:15 2026 by rpki-client