Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
File: EAcdqxaOjlPjzX31244PBCQukIY.mft (raw, json)
Hash identifier: jgs/IYMoxYBDKpUc/yEMELCggwLJxA8m6G3ZvrVKUQ4=
Subject key identifier: 09:D8:7B:35:39:AE:41:2C:32:99:47:03:F1:A5:02:3E:B8:72:17:9E
Authority key identifier: 10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86
Certificate issuer: /CN=10071dab168e8e53e3cd7df5db8e0f04242e9086
Certificate serial: 019FAA5073626BE829BCA69EFBEFF20343EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 20:00:26 +0000
Manifest this update: Tue 28 Jul 2026 20:00:26 +0000
Manifest next update: Wed 29 Jul 2026 20:00:26 +0000
Files and hashes: 1: EAcdqxaOjlPjzX31244PBCQukIY.crl (hash: DJ7SBXTSTVfxdRn49OLBK34hBR7rCjL6PJBHtW4maa4=)
2: TehJaUKE7-UYVJg4qzcGnHF4gEE.roa (hash: g9yiDNMzuqT4Xury4y9vb4TVbFovThME/EkaBOlvwI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:73:62:6b:e8:29:bc:a6:9e:fb:ef:f2:03:43:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10071dab168e8e53e3cd7df5db8e0f04242e9086
Validity
Not Before: Jul 28 20:00:26 2026 GMT
Not After : Jul 29 20:00:26 2026 GMT
Subject: CN=09d87b3539ae412c32994703f1a5023eb872179e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:57:63:b0:d8:b7:a0:2b:df:6a:55:10:38:2e:
d2:24:da:97:11:fa:e0:bf:a2:98:ef:cd:27:1e:c6:
6f:15:f3:a1:6f:93:9b:ae:fa:e4:8f:82:ff:00:a3:
58:98:3b:ad:71:6e:ef:d0:3c:db:b6:62:c0:19:a7:
9d:dd:10:6b:56:ac:a8:7c:5d:15:31:51:30:46:26:
c3:d7:2d:f9:4a:da:d6:b9:d3:fc:d9:2e:61:f1:6f:
28:35:d8:1d:11:ff:ff:88:72:35:3f:5f:c8:a0:0c:
d1:56:47:29:76:45:65:ef:57:98:c9:ff:36:55:09:
55:fa:34:93:d1:87:3f:93:73:4a:d8:d5:3e:3a:b5:
ea:7b:52:3c:fc:9b:99:1d:d0:77:34:51:d9:82:58:
24:62:b6:8b:e7:e2:d5:1a:dc:e0:e0:13:65:04:47:
57:2e:20:39:63:2d:42:e6:ca:ad:91:51:cc:94:ed:
a6:d7:36:27:4d:9f:4d:7b:f5:e6:fc:e5:45:94:4a:
b9:17:74:5f:fa:e8:75:29:04:0e:0a:1d:27:62:a4:
6e:2d:59:f8:37:ba:9c:91:ea:5a:f1:c0:e9:00:3b:
af:ba:2d:f7:bc:f3:66:d1:55:2d:e1:f2:6a:be:07:
3a:6c:07:d5:bb:7e:27:a6:fa:4b:ff:87:06:6f:ae:
2e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D8:7B:35:39:AE:41:2C:32:99:47:03:F1:A5:02:3E:B8:72:17:9E
X509v3 Authority Key Identifier:
keyid:10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:9b:cf:5f:1f:27:2c:db:1f:88:35:61:5c:ae:f1:a1:a6:22:
f7:23:64:ef:63:1b:ca:13:2d:51:7f:52:61:5f:11:15:5a:76:
ad:f6:49:2e:11:88:52:f6:84:5e:21:62:b7:f8:36:1f:d1:fb:
0a:6b:5f:9d:0e:33:88:82:bb:20:b9:a0:5a:24:36:79:38:23:
b0:1b:83:6e:cd:37:ee:d1:3f:37:ab:b4:ef:50:3c:db:d5:bf:
5b:af:10:e3:e6:2d:2a:93:77:5e:6e:fa:d9:d7:40:2f:04:6b:
75:ac:7a:2a:ba:5c:47:24:af:d5:8f:ae:b6:ed:cc:43:3b:47:
3d:0f:51:11:db:ae:9e:2a:91:63:08:b7:f3:4b:b7:1d:e1:a7:
e6:ce:27:21:d5:69:59:29:15:60:15:00:64:3f:10:94:7e:d9:
f3:ca:ee:88:c8:de:74:66:ce:f1:c8:92:7b:fd:38:1b:5f:43:
ed:3b:a7:87:1f:63:eb:44:3e:43:f1:7e:8f:ff:90:77:2d:f0:
9b:8b:2b:fa:27:c1:23:67:e3:61:c0:ed:08:ad:9e:40:31:9d:
f7:51:93:b8:15:02:3f:65:64:c1:08:b2:42:b8:85:28:da:04:
44:ac:d4:72:24:50:21:84:2b:a9:9e:40:f3:94:5a:6f:d9:a7:
90:45:b1:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qUHNia+gpvKae++/yA0PvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMDcxZGFiMTY4ZThlNTNlM2NkN2RmNWRiOGUwZjA0MjQy
ZTkwODYwHhcNMjYwNzI4MjAwMDI2WhcNMjYwNzI5MjAwMDI2WjAzMTEwLwYDVQQD
EygwOWQ4N2IzNTM5YWU0MTJjMzI5OTQ3MDNmMWE1MDIzZWI4NzIxNzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVdjsNi3oCvfalUQOC7SJNqXEfrg
v6KY780nHsZvFfOhb5Obrvrkj4L/AKNYmDutcW7v0DzbtmLAGaed3RBrVqyofF0V
MVEwRibD1y35StrWudP82S5h8W8oNdgdEf//iHI1P1/IoAzRVkcpdkVl71eYyf82
VQlV+jST0Yc/k3NK2NU+OrXqe1I8/JuZHdB3NFHZglgkYraL5+LVGtzg4BNlBEdX
LiA5Yy1C5sqtkVHMlO2m1zYnTZ9Ne/Xm/OVFlEq5F3Rf+uh1KQQOCh0nYqRuLVn4
N7qckepa8cDpADuvui33vPNm0VUt4fJqvgc6bAfVu34npvpL/4cGb64u5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnYezU5rkEsMplHA/GlAj64cheeMB8GA1UdIwQY
MBaAFBAHHasWjo5T48199duODwQkLpCGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUFjZHF4YU9qbFBqelgzMTI0NFBCQ1F1a0lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jYmU2YjctNWUxMy00MDk0LWI5Nzkt
MmZlNDEyZTNlYWI0LzEvRUFjZHF4YU9qbFBqelgzMTI0NFBCQ1F1a0lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9jYmU2YjctNWUxMy00MDk0LWI5NzktMmZlNDEyZTNlYWI0
LzEvRUFjZHF4YU9qbFBqelgzMTI0NFBCQ1F1a0lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANpvPXx8n
LNsfiDVhXK7xoaYi9yNk72MbyhMtUX9SYV8RFVp2rfZJLhGIUvaEXiFit/g2H9H7
CmtfnQ4ziIK7ILmgWiQ2eTgjsBuDbs037tE/N6u071A829W/W68Q4+YtKpN3Xm76
2ddALwRrdax6KrpcRySv1Y+utu3MQztHPQ9REduuniqRYwi380u3HeGn5s4nIdVp
WSkVYBUAZD8QlH7Z88ruiMjedGbO8ciSe/04G19D7Tunhx9j60Q+Q/F+j/+Qdy3w
m4sr+ifBI2fjYcDtCK2eQDGd91GTuBUCP2VkwQiyQriFKNoERKzUciRQIYQrqZ5A
85Rab9mnkEWxNQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:20:57 2026 by rpki-client