Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
File: EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft (raw, json)
Hash identifier: qCi8sLvWcJ1uukOQB3Om8/tGfUuTz0l8IiNj8AyR62g=
Subject key identifier: 4E:94:9E:FF:EB:DD:9F:5A:8C:C0:AB:AE:9D:A8:09:B1:F0:30:40:26
Authority key identifier: 10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
Certificate issuer: /CN=10eedc33aa442907189f0b3c563836951fb185bb
Certificate serial: 019D985030A57135BFBC6AC1FBD54F3BA610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
Manifest number: 18CC
Signing time: Thu 16 Apr 2026 22:01:25 +0000
Manifest this update: Thu 16 Apr 2026 22:01:25 +0000
Manifest next update: Fri 17 Apr 2026 22:01:25 +0000
Files and hashes: 1: 1-kqNcEC470FL-8tMUqoOnQYiF9M.roa (hash: EJlZOy6PuzNDvgY+mmcKZwX7cS9939GtFAUq2p+3aFQ=)
2: 9ZZwIsEn5-9xDQwcqsYYTjxbjJA.roa (hash: lZmCKQfLFLci+JYwAKSX3l63iYxIkiAA4w5SsSjJvUg=)
3: EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl (hash: nQx+xOjkrodWm7xRfY2E5Iw6hSeL6Isx/cynTXMSZSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:30:a5:71:35:bf:bc:6a:c1:fb:d5:4f:3b:a6:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10eedc33aa442907189f0b3c563836951fb185bb
Validity
Not Before: Apr 16 22:01:25 2026 GMT
Not After : Apr 17 22:01:25 2026 GMT
Subject: CN=4e949effebdd9f5a8cc0abae9da809b1f0304026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:26:5f:7d:0b:c5:85:2e:ef:39:9e:b6:07:96:
6f:33:fb:15:65:75:86:18:8b:a3:fb:cf:cc:30:a4:
29:da:02:72:f6:ff:f7:f6:d6:c5:51:58:1f:98:06:
21:62:ab:0e:42:49:e7:32:9d:a5:28:49:85:b7:d5:
73:64:74:69:a7:82:81:e9:a8:dc:a1:7c:d4:dc:8e:
2b:80:d4:13:93:96:6e:b0:d8:e9:b0:43:c1:c7:1d:
f6:f7:08:12:01:e9:7f:b1:0f:94:1b:aa:db:85:b6:
58:ee:c4:e1:12:cd:25:00:ac:52:32:50:ff:e7:b1:
dd:a6:45:93:b6:2e:61:6a:fb:f1:d2:29:be:bb:9b:
94:a0:d2:8a:c6:63:76:54:91:66:44:2c:32:f0:67:
44:93:4d:89:b5:b4:51:b3:04:22:89:da:e2:3e:93:
23:45:e6:bd:d9:be:4d:4e:1f:04:6c:3b:e9:ff:ce:
7c:da:f5:f8:ce:82:f0:78:35:2e:4f:93:35:97:46:
35:c2:80:f1:ee:18:21:06:47:2e:46:a3:06:5b:59:
0a:58:c5:84:1e:24:66:65:ef:6c:83:06:8f:a8:d5:
a2:02:d2:59:21:3b:88:f2:ae:0c:fe:d0:5a:d9:55:
ae:f5:f6:01:23:ab:71:ed:a2:d7:31:f5:d3:7b:5a:
04:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:94:9E:FF:EB:DD:9F:5A:8C:C0:AB:AE:9D:A8:09:B1:F0:30:40:26
X509v3 Authority Key Identifier:
keyid:10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:95:48:75:77:a7:03:99:84:e0:01:59:77:1d:78:fd:35:1c:
e8:9e:58:77:23:8f:65:fd:e2:54:51:5c:e8:67:c8:eb:87:f9:
13:c1:9c:93:b7:58:f3:d5:b2:56:59:b5:0b:ee:0d:91:5a:05:
7c:e4:ea:88:e2:cf:2d:95:fb:27:bb:b9:a1:32:86:6a:7d:68:
32:f4:57:24:ee:75:bb:63:f2:44:1e:ab:cd:98:2b:52:0a:c3:
8e:21:3f:c5:90:48:6d:6a:56:f3:86:1b:8f:85:2a:b6:b9:21:
9e:16:5a:90:c6:88:9f:4b:5e:45:a1:fa:eb:47:4b:5b:0b:16:
aa:e0:b6:0a:51:68:cf:aa:25:6b:e0:48:98:2a:d9:61:11:0b:
14:35:ca:4b:08:ad:a7:12:07:2c:25:25:56:7e:34:6d:ff:6d:
9a:02:15:b6:80:d5:0f:5e:d9:c9:e9:46:50:78:55:c1:0a:85:
91:06:df:0c:ae:0c:4b:27:64:a3:dc:ab:e2:3d:70:54:dc:b5:
5b:66:bb:3d:ba:f0:1a:52:0c:ab:02:f6:be:22:6d:bc:dd:c2:
15:36:9f:d9:ba:5d:b4:4e:3b:5a:15:f1:b9:5f:11:b5:e7:77:
80:37:25:c6:4f:d3:56:1a:c9:33:8a:34:b3:ec:b8:39:36:52:
dd:48:8a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:25:15 2026 by rpki-client