Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft
File: eooeg2-pIdKa-JxKbtagRQADkzw.mft (raw, json)
Hash identifier: TmKM4eSCPrBGyF68DpzDTkEyPay0mkb0ufWm/5U5Rpk=
Subject key identifier: C0:8C:2F:A1:E0:51:66:97:CF:1E:50:E2:6F:6E:A0:87:DD:D1:17:16
Authority key identifier: 7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C
Certificate issuer: /CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c
Certificate serial: 019CAC7DC0AC4AF023D0AE7FBEC5F0228D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 03:00:48 +0000
Manifest this update: Mon 02 Mar 2026 03:00:48 +0000
Manifest next update: Tue 03 Mar 2026 03:00:48 +0000
Files and hashes: 1: Xw-YfGo9dbYYynT4e8fytlvPIDM.roa (hash: GIydqVz0uBGXp6zRLhHB8inOB1N9/5K9aw+gLa9sp4c=)
2: eooeg2-pIdKa-JxKbtagRQADkzw.crl (hash: sY8P9btO6EsTQiwm89ncDCRr52gbIci4MsQvt8ks/i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:c0:ac:4a:f0:23:d0:ae:7f:be:c5:f0:22:8d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c
Validity
Not Before: Mar 2 03:00:48 2026 GMT
Not After : Mar 3 03:00:48 2026 GMT
Subject: CN=c08c2fa1e0516697cf1e50e26f6ea087ddd11716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:8f:8e:a4:82:f6:17:b4:fe:8a:e9:26:60:40:
4a:50:78:3b:ed:53:13:d2:69:50:8d:bb:22:b1:7d:
17:58:12:a2:7c:98:41:69:ab:94:af:af:d5:dc:79:
76:da:8e:2b:8b:84:2f:ad:a5:26:a4:a6:2e:b3:74:
c0:ac:e8:0b:a5:de:01:ff:2b:41:ac:83:8c:1b:32:
92:d9:2f:82:3e:7d:cd:6d:8e:5d:ad:45:61:bb:d7:
c4:c6:86:db:51:64:38:2a:15:c9:1a:87:25:8c:a6:
52:30:af:62:ae:80:0b:db:34:d7:96:32:0f:6c:2d:
77:2e:eb:ca:a3:5c:2b:bf:c1:02:0d:75:0a:0b:78:
e1:79:08:ea:0a:ee:64:79:96:f1:4d:47:66:f5:37:
c8:0b:6f:10:ff:40:61:8b:48:8f:1b:ad:bc:13:27:
17:2c:ac:9e:ac:94:40:8c:55:25:ad:d4:75:13:e6:
fc:ac:51:77:4c:77:b6:f0:4a:52:1c:e0:00:a1:80:
5d:23:90:c2:33:22:f9:7e:56:48:8a:fc:eb:6a:ff:
81:ac:d4:fa:07:a4:a1:47:f2:28:48:ca:a3:e4:ed:
0a:fd:91:05:e0:cb:c9:1a:99:b6:4a:24:cd:31:5d:
43:9b:aa:db:f0:7f:57:80:6a:a0:f6:cb:a0:37:8e:
45:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8C:2F:A1:E0:51:66:97:CF:1E:50:E2:6F:6E:A0:87:DD:D1:17:16
X509v3 Authority Key Identifier:
keyid:7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f5:5b:86:30:d2:15:23:ce:d6:d3:6a:7f:13:4d:01:d9:8a:
92:e5:b6:4c:71:6a:b2:b9:9a:80:78:cb:c0:11:2d:f2:f4:cb:
1d:6f:11:10:11:4a:79:21:ce:d4:c3:f6:42:70:77:0d:a3:ee:
5c:a9:b3:76:ba:ed:79:ea:23:ae:d4:b9:df:79:f5:7a:ab:ef:
3f:5d:81:26:b4:af:da:a3:50:cd:aa:f1:f8:6b:74:40:52:c2:
2b:b7:b3:d9:cf:ea:85:70:38:66:4a:73:bd:d4:2c:bd:c7:c4:
80:06:94:95:3a:2d:ee:f1:fe:5d:a7:0b:00:83:d2:5f:fc:f7:
fe:11:f3:a4:40:f3:da:d7:96:a8:bf:aa:be:50:83:87:d7:cf:
a4:5c:33:18:f9:5a:ed:67:28:2d:bb:44:84:66:c6:5c:4d:15:
fe:1d:04:3c:87:e9:a4:7d:0e:40:e1:8c:6d:e0:96:9c:22:01:
b7:44:10:8c:ac:1c:bc:61:b4:27:bd:62:cb:32:d4:b4:61:13:
cd:99:bc:03:ef:5c:90:cd:81:cc:5f:fb:4f:e2:23:61:b7:0b:
96:6e:1e:aa:ad:93:f0:af:0d:15:c0:e6:7e:06:cb:2c:89:a0:
98:6c:6d:97:4b:98:a1:16:06:74:5e:34:d7:e4:54:64:58:b4:
57:3f:33:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfcCsSvAj0K5/vsXwIo04MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhOGExZTgzNmZhOTIxZDI5YWY4OWM0YTZlZDZhMDQ1MDAw
MzkzM2MwHhcNMjYwMzAyMDMwMDQ4WhcNMjYwMzAzMDMwMDQ4WjAzMTEwLwYDVQQD
EyhjMDhjMmZhMWUwNTE2Njk3Y2YxZTUwZTI2ZjZlYTA4N2RkZDExNzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Y+OpIL2F7T+iukmYEBKUHg77VMT
0mlQjbsisX0XWBKifJhBaauUr6/V3Hl22o4ri4QvraUmpKYus3TArOgLpd4B/ytB
rIOMGzKS2S+CPn3NbY5drUVhu9fExobbUWQ4KhXJGocljKZSMK9iroAL2zTXljIP
bC13LuvKo1wrv8ECDXUKC3jheQjqCu5keZbxTUdm9TfIC28Q/0Bhi0iPG628EycX
LKyerJRAjFUlrdR1E+b8rFF3THe28EpSHOAAoYBdI5DCMyL5flZIivzrav+BrNT6
B6ShR/IoSMqj5O0K/ZEF4MvJGpm2SiTNMV1Dm6rb8H9XgGqg9sugN45FPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCML6HgUWaXzx5Q4m9uoIfd0RcWMB8GA1UdIwQY
MBaAFHqKHoNvqSHSmvicSm7WoEUAA5M8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZW9vZWcyLXBJZEthLUp4S2J0YWdSUUFEa3p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi80MjZiOWQtMGU2MS00ZmFkLTk4ZjMt
YTBjNTk3MGE2Zjc2LzEvZW9vZWcyLXBJZEthLUp4S2J0YWdSUUFEa3p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi80MjZiOWQtMGU2MS00ZmFkLTk4ZjMtYTBjNTk3MGE2Zjc2
LzEvZW9vZWcyLXBJZEthLUp4S2J0YWdSUUFEa3p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPvVbhjDS
FSPO1tNqfxNNAdmKkuW2THFqsrmagHjLwBEt8vTLHW8REBFKeSHO1MP2QnB3DaPu
XKmzdrrteeojrtS533n1eqvvP12BJrSv2qNQzarx+Gt0QFLCK7ez2c/qhXA4Zkpz
vdQsvcfEgAaUlTot7vH+XacLAIPSX/z3/hHzpEDz2teWqL+qvlCDh9fPpFwzGPla
7WcoLbtEhGbGXE0V/h0EPIfppH0OQOGMbeCWnCIBt0QQjKwcvGG0J71iyzLUtGET
zZm8A+9ckM2BzF/7T+IjYbcLlm4eqq2T8K8NFcDmfgbLLImgmGxtl0uYoRYGdF40
1+RUZFi0Vz8zHQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:19 2026 by rpki-client