Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
File: EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft (raw, json)
Hash identifier: c/0OyCiaIw0XSLSMlfWydaL5yZAFKXmKvyJeC3T/lfo=
Subject key identifier: 54:97:CD:EB:95:9F:E9:CF:60:07:89:8C:70:17:8C:DD:DE:F5:F3:EA
Authority key identifier: 10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
Certificate issuer: /CN=10eedc33aa442907189f0b3c563836951fb185bb
Certificate serial: 019FA974A7EB9D74081F562DF5A6F44EB4AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
Manifest number: 19DE
Signing time: Tue 28 Jul 2026 16:00:22 +0000
Manifest this update: Tue 28 Jul 2026 16:00:22 +0000
Manifest next update: Wed 29 Jul 2026 16:00:22 +0000
Files and hashes: 1: 1-kqNcEC470FL-8tMUqoOnQYiF9M.roa (hash: EJlZOy6PuzNDvgY+mmcKZwX7cS9939GtFAUq2p+3aFQ=)
2: 9ZZwIsEn5-9xDQwcqsYYTjxbjJA.roa (hash: lZmCKQfLFLci+JYwAKSX3l63iYxIkiAA4w5SsSjJvUg=)
3: EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl (hash: tv+6NECFmrmyxgpQIO8uRCvTWaV7B9T2xu89ZkXJRX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:a7:eb:9d:74:08:1f:56:2d:f5:a6:f4:4e:b4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10eedc33aa442907189f0b3c563836951fb185bb
Validity
Not Before: Jul 28 16:00:22 2026 GMT
Not After : Jul 29 16:00:22 2026 GMT
Subject: CN=5497cdeb959fe9cf6007898c70178cdddef5f3ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:01:ae:3e:9e:38:9e:d5:3a:9f:1f:38:85:b2:
9a:a0:e0:98:9d:af:f7:0f:78:89:8c:74:ed:41:df:
96:d2:cf:d6:96:c2:e0:86:51:70:23:6e:e2:ee:54:
4e:ae:09:f8:8d:31:64:43:a1:e3:ec:cb:84:48:5c:
63:3a:ce:3a:56:ad:bd:96:79:be:45:3d:fb:0a:ff:
29:29:32:52:fb:26:68:f0:34:7a:20:1a:71:b4:0c:
f4:c6:d3:7d:d1:73:cf:f6:47:4f:3a:95:80:45:e5:
96:46:c7:63:f5:f3:5f:00:21:f9:fd:c2:25:8d:6a:
60:d2:40:03:06:43:78:c4:b0:50:b7:b2:be:79:cd:
a1:c3:48:84:60:0a:28:c8:40:da:1e:2c:03:a0:51:
98:7f:35:c3:d4:0e:c6:36:bf:53:16:7f:aa:c2:04:
86:6c:58:ed:0d:3b:47:8e:71:19:2e:d7:88:ea:2e:
6c:5e:95:f9:12:c0:14:ae:13:9c:d7:89:1e:bb:47:
63:29:56:cd:01:c3:2c:72:fd:94:26:63:74:9f:b0:
8a:2e:5b:f4:54:89:ef:60:39:17:51:64:37:70:0c:
43:d6:ce:fa:33:de:55:f3:3c:50:ec:c0:84:d0:4a:
6d:de:44:d1:d7:d3:a8:a9:fa:55:93:4d:21:c5:06:
e0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:97:CD:EB:95:9F:E9:CF:60:07:89:8C:70:17:8C:DD:DE:F5:F3:EA
X509v3 Authority Key Identifier:
keyid:10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:83:da:e1:e5:53:4b:93:e8:14:bc:52:d2:fe:cf:f5:10:67:
ce:e5:f1:55:50:b9:cf:63:65:1c:ba:e7:0e:12:ce:9b:46:6d:
f1:1c:d3:ef:d1:ad:c0:71:da:e4:a5:1f:ff:41:33:68:d2:20:
6f:23:2a:af:e0:37:30:4b:af:cc:7b:7c:ed:96:22:26:25:52:
81:cc:8a:18:21:65:3b:55:23:fe:1c:93:59:5f:e5:4a:a1:91:
16:a3:9a:bb:6f:15:84:aa:41:37:37:e6:89:c5:ea:04:c2:40:
c6:73:d2:e2:35:e7:c5:3d:ea:86:b2:e1:8e:96:cc:5c:a4:4d:
18:0c:00:1a:05:33:71:44:bd:72:1a:e0:72:1e:f0:e3:a6:b6:
2a:a6:f7:d6:b3:cb:4d:f0:01:b9:e7:ae:19:20:20:40:44:0f:
0a:4e:95:b3:de:ec:3e:f0:81:ea:9c:0a:2f:fd:de:f2:ad:70:
bf:1d:56:eb:66:5c:19:c9:08:46:29:85:d2:74:25:18:0d:4c:
37:58:7b:f6:f1:d0:06:da:ae:0c:7e:c5:19:2e:1a:bb:a0:5e:
43:0c:42:60:b3:d4:ec:77:9d:2c:04:72:60:84:78:af:24:bd:
5c:b6:3f:49:62:75:2d:29:3c:51:80:15:15:04:47:1c:00:e8:
6e:5f:bf:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdKfrnXQIH1Yt9ab0TrStMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZWVkYzMzYWE0NDI5MDcxODlmMGIzYzU2MzgzNjk1MWZi
MTg1YmIwHhcNMjYwNzI4MTYwMDIyWhcNMjYwNzI5MTYwMDIyWjAzMTEwLwYDVQQD
Eyg1NDk3Y2RlYjk1OWZlOWNmNjAwNzg5OGM3MDE3OGNkZGRlZjVmM2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wGuPp44ntU6nx84hbKaoOCYna/3
D3iJjHTtQd+W0s/WlsLghlFwI27i7lROrgn4jTFkQ6Hj7MuESFxjOs46Vq29lnm+
RT37Cv8pKTJS+yZo8DR6IBpxtAz0xtN90XPP9kdPOpWAReWWRsdj9fNfACH5/cIl
jWpg0kADBkN4xLBQt7K+ec2hw0iEYAooyEDaHiwDoFGYfzXD1A7GNr9TFn+qwgSG
bFjtDTtHjnEZLteI6i5sXpX5EsAUrhOc14keu0djKVbNAcMscv2UJmN0n7CKLlv0
VInvYDkXUWQ3cAxD1s76M95V8zxQ7MCE0Ept3kTR19OoqfpVk00hxQbgCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSXzeuVn+nPYAeJjHAXjN3e9fPqMB8GA1UdIwQY
MBaAFBDu3DOqRCkHGJ8LPFY4NpUfsYW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRU83Y002cEVLUWNZbndzOFZqZzJsUi14aGJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy81NDZjN2UtZDg0MC00ZTU0LTkyMjMt
NTM0ZWJlZWYzMzg5LzEvRU83Y002cEVLUWNZbndzOFZqZzJsUi14aGJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy81NDZjN2UtZDg0MC00ZTU0LTkyMjMtNTM0ZWJlZWYzMzg5
LzEvRU83Y002cEVLUWNZbndzOFZqZzJsUi14aGJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF4Pa4eVT
S5PoFLxS0v7P9RBnzuXxVVC5z2NlHLrnDhLOm0Zt8RzT79GtwHHa5KUf/0EzaNIg
byMqr+A3MEuvzHt87ZYiJiVSgcyKGCFlO1Uj/hyTWV/lSqGRFqOau28VhKpBNzfm
icXqBMJAxnPS4jXnxT3qhrLhjpbMXKRNGAwAGgUzcUS9chrgch7w46a2Kqb31rPL
TfABueeuGSAgQEQPCk6Vs97sPvCB6pwKL/3e8q1wvx1W62ZcGckIRimF0nQlGA1M
N1h79vHQBtquDH7FGS4au6BeQwxCYLPU7HedLARyYIR4ryS9XLY/SWJ1LSk8UYAV
FQRHHADobl+/MQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:09:33 2026 by rpki-client