Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
File: Eo0NA9Adij4t-t3y29j5fgkPgOk.mft (raw, json)
Hash identifier: LcbJjJFjD2HaIQu721lNKCl+nUb8B9xwuKeJr5+PXcY=
Subject key identifier: 53:8B:91:C6:FB:EF:A7:70:50:8D:C5:87:67:4D:3A:B2:E3:8F:CC:AA
Authority key identifier: 12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9
Certificate issuer: /CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9
Certificate serial: 01A0BFFA395768ABFB1F951342032BCF8C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
Manifest number: 0871
Signing time: Sun 20 Sep 2026 18:00:41 +0000
Manifest this update: Sun 20 Sep 2026 18:00:41 +0000
Manifest next update: Mon 21 Sep 2026 18:00:41 +0000
Files and hashes: 1: Eo0NA9Adij4t-t3y29j5fgkPgOk.crl (hash: zEhkmVpexNSYlhZ4SIeCmsnJoxT8mOlNknAs8WOY1s4=)
2: lmGJr61Mn429__yMZ50UIOtKDTo.roa (hash: FZAxYj1+7XK5ZM4/SMzLX2AW7UQL0exFYNBa3AxvrbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:fa:39:57:68:ab:fb:1f:95:13:42:03:2b:cf:8c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9
Validity
Not Before: Sep 20 18:00:41 2026 GMT
Not After : Sep 21 18:00:41 2026 GMT
Subject: CN=538b91c6fbefa770508dc587674d3ab2e38fccaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3f:0a:79:cb:17:90:eb:20:52:01:4e:62:03:
16:f0:82:59:70:72:ca:ec:a8:ef:44:61:8b:e9:0c:
7d:aa:c6:40:76:41:27:a8:4d:da:e9:49:cb:09:aa:
78:9f:79:7a:78:7c:72:da:2b:fa:ba:ca:b6:f5:2b:
78:67:c6:21:97:95:19:e7:d9:3d:e2:b1:98:8a:2d:
cb:74:d6:58:02:f0:a2:71:90:31:7b:de:b2:14:7e:
52:0b:7b:42:dc:51:e9:75:94:62:c5:88:2f:89:81:
cd:ca:9c:8b:7e:68:f4:f6:9e:d5:f2:74:55:eb:3e:
b7:92:fc:47:45:5f:05:8f:82:a4:c7:df:22:13:f8:
9e:ba:79:98:ad:a9:c4:b7:16:35:91:13:91:c1:8e:
1f:7e:c5:0f:90:59:1c:34:8d:92:c8:17:0c:57:5a:
ce:af:f3:d1:96:ef:9f:e3:e8:75:2e:40:5b:0c:d9:
fd:a1:bb:9e:36:27:82:dd:49:87:2d:53:fa:f9:bb:
b8:da:83:a6:c1:78:9a:a8:b0:05:c8:33:4e:88:0e:
a6:25:45:fd:35:51:dd:38:98:79:a3:be:ba:0f:61:
ef:9f:26:8f:fa:87:58:7e:c9:d1:cf:ac:c9:c7:cf:
05:aa:42:3a:8d:4f:65:d4:39:87:e7:5d:28:f2:d1:
a9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8B:91:C6:FB:EF:A7:70:50:8D:C5:87:67:4D:3A:B2:E3:8F:CC:AA
X509v3 Authority Key Identifier:
keyid:12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:4b:4f:19:46:44:3e:67:3c:4f:ed:47:fc:ee:8a:6a:9e:7b:
25:66:ff:74:58:23:ca:eb:a7:a6:1b:1e:6e:94:a8:d1:4d:de:
0d:17:40:cc:9c:78:2c:8f:cd:ec:40:5d:0d:1d:fc:32:1d:7a:
2e:9d:5b:48:be:b5:4f:a3:f6:b5:e1:b3:9b:88:4c:f1:98:98:
2d:f6:eb:61:3b:8e:a0:85:f3:0d:d8:f8:eb:e2:86:09:01:f2:
98:90:dc:85:41:73:57:68:f9:68:aa:f6:a3:1c:e6:07:fa:a9:
e1:a7:aa:a2:67:95:43:7b:e6:9e:1e:ba:7b:df:3d:b5:8f:bf:
e0:85:d8:c9:15:f7:20:c9:ad:75:90:65:df:08:ed:b2:75:33:
fb:67:93:0f:c3:06:d6:34:3e:01:a3:7c:5b:47:78:ad:4e:d1:
df:ba:41:f0:3f:f0:ab:77:66:0a:e9:80:16:18:47:2d:15:d2:
95:f3:ee:57:81:7b:78:90:36:4b:d4:03:63:10:5b:1e:ad:c0:
d9:c5:a8:f5:08:3b:6e:0a:df:fa:13:04:dd:d7:6a:c3:b6:2b:
3c:1e:7b:f9:f5:64:b4:b5:c5:85:b2:72:cf:e0:c9:22:ff:9b:
d7:b3:08:f2:3a:7e:46:7a:3b:e9:d0:a1:bd:66:ca:9f:d6:00:
f9:6e:dd:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC/+jlXaKv7H5UTQgMrz4xiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyOGQwZDAzZDAxZDhhM2UyZGZhZGRmMmRiZDhmOTdlMDkw
ZjgwZTkwHhcNMjYwOTIwMTgwMDQxWhcNMjYwOTIxMTgwMDQxWjAzMTEwLwYDVQQD
Eyg1MzhiOTFjNmZiZWZhNzcwNTA4ZGM1ODc2NzRkM2FiMmUzOGZjY2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnT8KecsXkOsgUgFOYgMW8IJZcHLK
7KjvRGGL6Qx9qsZAdkEnqE3a6UnLCap4n3l6eHxy2iv6usq29St4Z8Yhl5UZ59k9
4rGYii3LdNZYAvCicZAxe96yFH5SC3tC3FHpdZRixYgviYHNypyLfmj09p7V8nRV
6z63kvxHRV8Fj4Kkx98iE/ieunmYranEtxY1kRORwY4ffsUPkFkcNI2SyBcMV1rO
r/PRlu+f4+h1LkBbDNn9obueNieC3UmHLVP6+bu42oOmwXiaqLAFyDNOiA6mJUX9
NVHdOJh5o766D2HvnyaP+odYfsnRz6zJx88FqkI6jU9l1DmH510o8tGpWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOLkcb776dwUI3Fh2dNOrLjj8yqMB8GA1UdIwQY
MBaAFBKNDQPQHYo+Lfrd8tvY+X4JD4DpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW8wTkE5QWRpajR0LXQzeTI5ajVmZ2tQZ09rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kYmM2ZmEtYzQ3NC00NmMzLTg5NDUt
YWY1MGZiNWNjNzdhLzEvRW8wTkE5QWRpajR0LXQzeTI5ajVmZ2tQZ09rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kYmM2ZmEtYzQ3NC00NmMzLTg5NDUtYWY1MGZiNWNjNzdh
LzEvRW8wTkE5QWRpajR0LXQzeTI5ajVmZ2tQZ09rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlEtPGUZE
Pmc8T+1H/O6Kap57JWb/dFgjyuunphsebpSo0U3eDRdAzJx4LI/N7EBdDR38Mh16
Lp1bSL61T6P2teGzm4hM8ZiYLfbrYTuOoIXzDdj46+KGCQHymJDchUFzV2j5aKr2
oxzmB/qp4aeqomeVQ3vmnh66e989tY+/4IXYyRX3IMmtdZBl3wjtsnUz+2eTD8MG
1jQ+AaN8W0d4rU7R37pB8D/wq3dmCumAFhhHLRXSlfPuV4F7eJA2S9QDYxBbHq3A
2cWo9Qg7bgrf+hME3ddqw7YrPB57+fVktLXFhbJyz+DJIv+b17MI8jp+Rno76dCh
vWbKn9YA+W7dxg==
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:39:54 2026 by rpki-client