Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
File: EiDdK5LaKExjzsRvb2pBwBOpyIE.mft (raw, json)
Hash identifier: UknQgqGZ7p0dkb5sm/w1NnnTuAH3AOQoCv0rVrJbEMo=
Subject key identifier: 11:7B:98:6A:CB:4F:D9:22:D7:15:19:78:F8:DA:3D:B7:59:A2:9F:3E
Authority key identifier: 12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
Certificate issuer: /CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Certificate serial: 019FA90746BEE09C7A66E678B569AC221F35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
Manifest number: 12C9
Signing time: Tue 28 Jul 2026 14:00:54 +0000
Manifest this update: Tue 28 Jul 2026 14:00:54 +0000
Manifest next update: Wed 29 Jul 2026 14:00:54 +0000
Files and hashes: 1: EiDdK5LaKExjzsRvb2pBwBOpyIE.crl (hash: ipuB4zvEpZB3AROrDhlf3X+pscKbIp/cPLAavG9rWSs=)
2: M1xpquK399A5wByDEtKHq_wqClk.roa (hash: zVgRyEKABrkhckv/3fAzW08qm0hqJsbaTBszAR7kayA=)
3: kkk3yXE8XoIEDRsGs9EdkpoqcD8.roa (hash: k6wchoXLvZ9SOEunorfauAloLI47oJBy9bourGp1I0s=)
4: muPGRcmARPddaHREVLuAaLLzFEM.roa (hash: 8DfdChKzrQe9Wu4l2fprWgGRtA6D3e1jiM5zqPRZkgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:46:be:e0:9c:7a:66:e6:78:b5:69:ac:22:1f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Validity
Not Before: Jul 28 14:00:54 2026 GMT
Not After : Jul 29 14:00:54 2026 GMT
Subject: CN=117b986acb4fd922d7151978f8da3db759a29f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:82:03:f4:54:f6:70:ba:f8:7b:6c:7e:0b:8c:
db:c1:aa:a3:8d:17:de:cc:0c:a1:a4:f1:80:c9:80:
04:0a:60:bd:18:64:d5:48:4c:13:33:48:4e:aa:87:
9c:96:37:b0:a7:ea:d8:e5:e2:a3:14:27:05:44:d6:
ea:35:1c:c6:eb:e9:fe:63:fc:e4:ce:0a:b8:a0:a8:
35:bd:6a:40:cc:5d:27:8f:23:76:eb:f9:c1:82:9c:
a4:2b:8a:d8:9e:02:68:39:4d:5d:87:87:a7:35:14:
f0:8d:eb:64:e5:69:4e:48:ea:d0:c2:e6:09:c1:4c:
9c:76:fd:25:60:7f:b5:0b:61:54:04:27:ab:61:bc:
8a:02:61:ae:b9:92:da:e2:a8:4d:03:28:c8:62:26:
01:05:44:4c:00:61:4e:e9:ea:97:0b:32:35:f1:03:
3a:75:a3:b2:23:76:7e:1e:44:5a:5a:be:83:92:47:
b8:3d:83:f1:c3:d6:2d:1c:52:2f:64:7c:50:e2:f7:
28:89:75:41:93:32:91:f7:31:d2:ff:79:f5:41:49:
a0:96:26:e7:15:a9:ce:49:6d:68:de:13:6f:77:4f:
e4:3c:ac:97:ae:f7:cf:2a:ec:90:90:84:17:ba:0c:
51:67:43:3e:54:03:b5:c5:67:ad:d5:e7:84:76:b5:
7f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7B:98:6A:CB:4F:D9:22:D7:15:19:78:F8:DA:3D:B7:59:A2:9F:3E
X509v3 Authority Key Identifier:
keyid:12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:2b:8d:8f:30:51:65:a1:2b:f4:d0:1e:e3:90:a1:5c:b9:10:
7d:90:9d:41:85:50:74:e4:43:1a:9b:71:4d:b2:c1:ee:26:c7:
8c:4a:cb:88:34:6a:78:8b:5b:d5:4f:f9:d9:6c:8d:10:97:df:
48:c3:19:2f:a9:ba:66:fb:00:b5:f5:8a:23:5b:10:bc:ac:41:
f0:2c:c2:28:ab:34:80:07:b9:b1:7a:c3:76:70:b9:db:1e:83:
3e:0d:57:dc:70:5f:ef:bf:7a:6b:82:ef:d4:78:2a:50:78:8e:
5d:ca:04:00:0e:37:53:a1:1b:ed:ad:3c:49:84:97:95:e9:0e:
7c:2c:08:5e:6d:b8:c2:9e:3f:78:a6:8e:92:83:c5:69:aa:17:
2b:52:86:0d:74:d9:37:4f:2c:83:79:f5:38:f2:fb:7c:4f:22:
50:19:13:0f:ae:8c:5c:cc:f7:2a:32:e4:2e:a5:29:70:29:2a:
59:72:91:8c:7c:cc:b9:e5:cb:e5:e9:4d:1f:12:0e:2b:f5:c7:
d9:d7:1f:64:51:87:19:71:15:4b:14:99:d1:24:d4:8f:bd:ac:
1a:5b:ac:c0:09:8a:71:3c:2c:0d:21:37:30:2c:7e:c8:34:23:
7b:bc:c7:21:e3:07:09:73:1e:15:c4:cb:d1:9e:e3:82:d2:16:
65:42:b9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:20:13 2026 by rpki-client