Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
File: EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft (raw, json)
Hash identifier: 4HnX4sadXZZd61DaX/LKUJyXpfm6PXvlK0EKfQfaVHY=
Subject key identifier: C5:F9:47:2C:1B:B0:72:80:AE:EF:3C:60:92:FA:6A:E0:61:FB:00:B7
Authority key identifier: 10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
Certificate issuer: /CN=10eedc33aa442907189f0b3c563836951fb185bb
Certificate serial: 01A0D6B975FAF39C48C1B59B154731FE54D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
Manifest number: 1A7A
Signing time: Fri 25 Sep 2026 04:01:13 +0000
Manifest this update: Fri 25 Sep 2026 04:01:13 +0000
Manifest next update: Sat 26 Sep 2026 04:01:13 +0000
Files and hashes: 1: 1-kqNcEC470FL-8tMUqoOnQYiF9M.roa (hash: EJlZOy6PuzNDvgY+mmcKZwX7cS9939GtFAUq2p+3aFQ=)
2: 9ZZwIsEn5-9xDQwcqsYYTjxbjJA.roa (hash: lZmCKQfLFLci+JYwAKSX3l63iYxIkiAA4w5SsSjJvUg=)
3: EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl (hash: X1d9Y54qwinDgBt8euvd7AJlPdq9DKe+ICo0kOl0ek4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:75:fa:f3:9c:48:c1:b5:9b:15:47:31:fe:54:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10eedc33aa442907189f0b3c563836951fb185bb
Validity
Not Before: Sep 25 04:01:13 2026 GMT
Not After : Sep 26 04:01:13 2026 GMT
Subject: CN=c5f9472c1bb07280aeef3c6092fa6ae061fb00b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:28:32:24:59:44:de:07:78:ee:01:e3:55:27:
55:22:a9:2a:cc:07:a8:30:5f:e9:53:77:20:91:fb:
b3:7d:4a:74:4c:fe:bf:98:cf:ce:8f:20:bf:63:68:
e4:f3:cb:b9:45:e2:56:18:b6:17:f5:ce:d5:9a:45:
2d:4b:c5:b3:8b:e3:65:62:4f:21:47:d0:67:2a:98:
65:17:6e:c4:ec:d8:64:71:dc:cf:e9:aa:26:2b:2c:
aa:2f:d4:0f:e3:62:01:bf:65:80:e5:c3:4b:a6:90:
f0:ca:b5:35:9a:b6:64:84:4a:77:b6:ad:25:af:9a:
65:e4:98:e6:c6:47:41:19:04:fe:4e:8e:4a:5f:77:
3b:fb:be:8c:bd:f8:22:fb:95:bc:47:3d:eb:e7:11:
8b:f8:92:82:8f:a4:2d:26:d8:22:e5:c9:bb:c6:cc:
08:f2:9c:03:42:ac:1b:71:19:5a:9e:91:6f:2e:de:
f6:6b:b5:82:8c:73:9f:e4:07:5c:fe:85:61:0d:e1:
b4:d1:f4:bd:12:9b:12:2c:c9:34:a5:f2:5e:83:37:
ff:27:ce:af:95:55:65:3f:22:96:eb:d5:15:d5:af:
3d:fa:a5:03:1e:96:16:10:6f:cf:8e:05:18:7c:90:
3d:68:a7:fe:9e:19:a0:e9:16:84:fc:26:12:53:7d:
a1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F9:47:2C:1B:B0:72:80:AE:EF:3C:60:92:FA:6A:E0:61:FB:00:B7
X509v3 Authority Key Identifier:
keyid:10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:44:32:48:d2:16:42:f9:dc:fe:7d:b7:b6:1d:c9:bb:78:91:
e4:4e:0e:d9:41:ef:6f:1c:d8:14:99:49:e9:6f:bd:b2:88:4e:
25:f4:f1:50:d7:5d:c0:0a:50:c7:a0:5c:d8:d1:57:c5:67:da:
e4:9f:2e:05:cf:dd:6a:6a:57:ba:f1:76:45:0d:6b:65:8f:66:
ce:71:f6:6f:aa:e7:49:89:fe:ca:f0:f5:1c:e1:92:4b:06:e4:
18:8d:83:1f:7f:3f:ca:26:a0:9c:b6:2a:1d:13:7e:28:09:1b:
59:d5:ab:f5:f8:a2:b1:97:c2:fb:01:7b:c1:8f:85:a1:b2:21:
bb:8b:53:1e:43:b0:1f:dc:4f:83:d0:41:25:5d:76:15:a5:5f:
ee:e3:e3:17:05:f1:66:75:63:3e:64:af:80:77:de:db:dd:ce:
0d:c0:3b:60:b6:19:86:68:1c:95:da:57:be:bb:ee:3e:f7:a8:
0a:52:33:5a:d4:c1:a7:ae:31:44:2a:4b:d1:b5:73:51:5c:77:
47:9f:f9:bc:13:b4:79:87:c8:fb:e0:bc:0c:93:f6:41:bd:d7:
a4:b0:8f:0b:c6:05:f0:77:28:d9:4c:83:f0:1a:04:06:5a:8e:
d3:01:03:38:f9:04:ea:96:67:6b:04:c6:9d:5e:e6:cb:28:95:
01:a8:69:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:48:19 2026 by rpki-client