Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
File: Eo0NA9Adij4t-t3y29j5fgkPgOk.mft (raw, json)
Hash identifier: VK5dD60SihfdR929zYcs/zCJAnvRB/8zf9gI6xNKJ6Q=
Subject key identifier: BC:33:B0:6E:BF:9B:43:F3:55:D8:1B:F8:C9:C5:DE:37:94:27:26:2C
Authority key identifier: 12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9
Certificate issuer: /CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9
Certificate serial: 01A0BE0B985DE78FEDC8EBDA6786894AE93B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
Manifest number: 0870
Signing time: Sun 20 Sep 2026 09:00:25 +0000
Manifest this update: Sun 20 Sep 2026 09:00:25 +0000
Manifest next update: Mon 21 Sep 2026 09:00:25 +0000
Files and hashes: 1: Eo0NA9Adij4t-t3y29j5fgkPgOk.crl (hash: o0GQOfOi5tJhR3Vefvjvw6Wm0s/smvFLqBh4V2s7kZ4=)
2: lmGJr61Mn429__yMZ50UIOtKDTo.roa (hash: FZAxYj1+7XK5ZM4/SMzLX2AW7UQL0exFYNBa3AxvrbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:0b:98:5d:e7:8f:ed:c8:eb:da:67:86:89:4a:e9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9
Validity
Not Before: Sep 20 09:00:25 2026 GMT
Not After : Sep 21 09:00:25 2026 GMT
Subject: CN=bc33b06ebf9b43f355d81bf8c9c5de379427262c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:86:61:fa:c8:58:9b:d4:9f:b9:f1:66:45:5a:
55:46:ea:b4:40:0b:c3:ff:32:ef:35:46:47:13:0c:
17:23:27:22:a9:13:92:0d:73:d6:bb:bd:c5:76:35:
27:55:f3:cc:87:a2:d6:13:1f:0d:4d:d9:29:82:49:
03:8d:17:1a:7a:d1:fe:4b:d7:b2:cd:7e:53:9c:2f:
fc:3b:1f:47:84:54:d6:98:a3:82:7d:42:d9:72:c1:
cd:1a:e1:ba:ae:05:2c:85:d9:5f:c6:78:5a:35:74:
59:21:90:4d:bc:c5:e1:21:5e:25:fa:41:7c:c9:87:
5e:ef:b8:7f:40:2d:28:b9:fd:29:ff:e5:08:fb:d8:
c5:38:cf:4d:62:d4:77:4b:15:a9:26:85:71:bb:5a:
4a:0a:64:d4:3e:b4:27:2b:35:7c:e2:65:2b:d4:7f:
e8:78:4e:d1:45:c5:2d:70:e1:a8:6b:3e:44:40:29:
e0:8f:f2:55:e4:cc:9a:af:d3:4f:60:e1:e2:24:f3:
d3:58:f7:a7:43:b5:25:61:05:37:3a:4c:c3:26:a3:
c3:a4:ac:05:a7:ef:47:f3:e4:04:0c:fb:ea:87:d3:
5c:03:1e:d2:d7:88:88:66:00:a3:67:d4:ac:fe:7a:
32:00:a9:2f:36:8f:5c:4e:80:af:f5:51:f5:b6:52:
6a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:33:B0:6E:BF:9B:43:F3:55:D8:1B:F8:C9:C5:DE:37:94:27:26:2C
X509v3 Authority Key Identifier:
keyid:12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:6d:b5:c5:4b:d9:14:1b:48:b9:3c:ae:d7:e5:79:a4:7d:84:
29:f9:7c:d7:64:85:1f:cd:e2:e0:db:bf:14:92:71:3c:35:ae:
47:ae:87:95:50:54:a1:ef:30:3c:a4:48:24:b8:c7:e1:a9:5d:
89:c2:21:18:b6:65:d0:e0:24:99:51:b8:03:08:27:72:ec:ba:
dc:87:4a:d2:f2:21:81:9e:d7:5c:43:b5:fa:5c:04:9c:9f:fd:
77:9f:84:c5:18:ce:5e:3b:9d:b5:4f:59:54:89:bd:06:41:b1:
0e:95:63:74:96:00:58:63:4d:6f:8f:a1:32:b4:c8:9c:9c:9d:
a5:08:07:2b:35:12:25:3d:d3:15:43:aa:45:e7:b8:49:5f:fe:
77:fe:ab:78:9e:40:80:a9:60:f2:01:58:2d:30:12:5a:4e:cf:
ff:0f:47:b2:2e:b3:f0:1d:d3:b2:80:11:12:85:58:3b:35:73:
6e:a0:43:bb:86:08:3b:8b:19:d1:d3:e6:36:39:b8:6b:9a:c3:
f5:7f:c9:71:4c:df:fa:ca:14:39:83:02:df:11:30:0f:54:f1:
04:cf:a2:a1:8f:94:c0:31:b1:12:02:22:8a:13:fc:bd:60:ce:
15:5a:29:4c:3d:40:bb:21:c9:97:48:1e:f0:e1:00:96:90:7f:
b6:21:4c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:58:20 2026 by rpki-client