Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
File: EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft (raw, json)
Hash identifier: 8x02469umW1J337jddDs7rFH+zPbUqboGoW2zEk0qY4=
Subject key identifier: BC:E0:7B:2E:CB:F4:CD:A9:F1:60:C7:E4:50:32:B5:89:03:B9:A7:ED
Authority key identifier: 10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
Certificate issuer: /CN=10eedc33aa442907189f0b3c563836951fb185bb
Certificate serial: 019EBFC8FE0955CB2FF23DE02113BAA5F339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
Manifest number: 1965
Signing time: Sat 13 Jun 2026 07:01:20 +0000
Manifest this update: Sat 13 Jun 2026 07:01:20 +0000
Manifest next update: Sun 14 Jun 2026 07:01:20 +0000
Files and hashes: 1: 1-kqNcEC470FL-8tMUqoOnQYiF9M.roa (hash: EJlZOy6PuzNDvgY+mmcKZwX7cS9939GtFAUq2p+3aFQ=)
2: 9ZZwIsEn5-9xDQwcqsYYTjxbjJA.roa (hash: lZmCKQfLFLci+JYwAKSX3l63iYxIkiAA4w5SsSjJvUg=)
3: EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl (hash: bXXZOP7WvT9afZINNjtZkrQyerXckUf6qIYm3YujZrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:fe:09:55:cb:2f:f2:3d:e0:21:13:ba:a5:f3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10eedc33aa442907189f0b3c563836951fb185bb
Validity
Not Before: Jun 13 07:01:20 2026 GMT
Not After : Jun 14 07:01:20 2026 GMT
Subject: CN=bce07b2ecbf4cda9f160c7e45032b58903b9a7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c5:a6:85:21:ef:92:44:86:82:92:a9:d9:e1:
01:38:5e:37:d3:ab:fa:fc:e9:da:b2:2d:e4:63:84:
15:0d:2d:b2:26:6e:35:41:98:5d:cf:80:00:86:c5:
82:c9:a9:9c:8a:a1:0b:7f:34:15:aa:14:29:e9:67:
55:50:f8:86:72:7e:21:70:66:b8:b9:78:2e:8f:c1:
bb:88:be:74:22:ae:5c:05:36:b6:90:83:8b:9f:06:
26:49:2f:87:d8:53:ee:90:21:c5:92:1b:cc:0a:d1:
33:65:89:8e:e5:f2:13:f2:40:2a:91:27:2d:7e:42:
82:05:03:4a:61:3f:b0:d2:26:dc:1f:bf:48:73:6a:
b2:54:59:5c:09:5a:ca:5f:fa:ca:61:1c:ee:79:1a:
cb:74:ee:e3:5f:84:39:17:3d:d6:e1:1e:3d:8f:2c:
b4:24:34:97:78:25:72:66:d8:5d:0d:5b:89:35:97:
3d:a0:d6:72:36:cd:ed:02:e7:56:e1:ae:fa:fb:70:
19:48:dc:f5:73:d5:a2:b9:60:1d:81:42:14:16:89:
8a:4a:c8:5c:e6:0f:57:99:95:6a:82:de:0b:92:fb:
ea:50:ec:7d:5c:62:a3:fd:19:e8:a6:db:c4:70:57:
fe:70:2c:00:78:e8:20:79:3f:1f:1a:a9:d4:97:29:
9d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E0:7B:2E:CB:F4:CD:A9:F1:60:C7:E4:50:32:B5:89:03:B9:A7:ED
X509v3 Authority Key Identifier:
keyid:10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:73:d3:8c:23:11:7e:ad:8b:6f:c2:11:44:fb:19:87:4c:ef:
2c:93:d8:7a:9f:14:2b:97:a2:a2:45:1f:0d:5f:ca:f0:e3:23:
29:3d:78:0b:bd:c7:1d:ef:db:cd:ee:a7:7c:7f:aa:ed:71:c0:
9d:e7:b8:07:e6:ca:43:96:9c:a6:1b:c6:2d:ff:06:92:04:55:
25:34:cb:01:b6:4c:f3:cb:8d:9b:34:01:c7:07:4d:c1:f2:ee:
4b:4b:d8:ec:c8:30:0e:60:84:c3:aa:2e:f7:9e:60:09:20:b8:
9c:e3:4b:e1:36:d1:e3:8c:99:b8:10:78:68:18:c2:27:07:7b:
ff:fd:f1:a4:e3:9d:3b:7f:de:bc:1d:0c:d2:13:a2:1e:d9:4e:
e4:4f:7e:00:8f:a4:04:d9:0c:eb:65:4b:0b:0a:5a:a2:92:48:
9e:9a:2d:3c:8f:59:8f:e9:11:6f:db:25:bc:69:1b:45:90:e9:
a6:f7:c0:8c:f5:45:e2:9a:86:b1:02:ac:be:d7:04:c4:7b:2c:
8a:da:85:28:30:90:f9:61:41:6d:90:72:7d:c7:ad:94:6f:b8:
d0:54:66:f1:52:c2:cb:c5:1b:e3:2e:35:3d:e4:1c:9b:21:89:
ae:2b:dc:d5:30:f2:37:9c:e8:c7:95:29:12:ef:00:ce:97:38:
e7:f0:44:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:41:09 2026 by rpki-client