Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
File: ean2o4HOSlo-zLJJOmhGCcmIoPw.mft (raw, json)
Hash identifier: Pf734IhAOcJrt/qiHOQWvbMFbKDx+9CxYk94nc4q8mI=
Subject key identifier: EA:19:81:25:FF:C9:05:B4:63:12:7A:24:27:77:5F:63:B4:E8:C2:CA
Authority key identifier: 79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
Certificate issuer: /CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Certificate serial: 01A0E363482F7477D92D28659391CBDBA28B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
Manifest number: 1937
Signing time: Sun 27 Sep 2026 15:02:09 +0000
Manifest this update: Sun 27 Sep 2026 15:02:09 +0000
Manifest next update: Mon 28 Sep 2026 15:02:09 +0000
Files and hashes: 1: Ala0VEiwCJ-XgbkKMuOQm4WQGUM.roa (hash: kHPaxmGFnvypL4VtsE3od5qxMzTcY3hqjMVSes+1x+o=)
2: ean2o4HOSlo-zLJJOmhGCcmIoPw.crl (hash: 8bhC6xT2hLGHiq65BAoLc+ClKG1KnlGL4kspPhiLB9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:63:48:2f:74:77:d9:2d:28:65:93:91:cb:db:a2:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Validity
Not Before: Sep 27 15:02:09 2026 GMT
Not After : Sep 28 15:02:09 2026 GMT
Subject: CN=ea198125ffc905b463127a2427775f63b4e8c2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:36:40:ad:94:f3:93:aa:91:c2:97:60:8e:b8:
ab:3b:e3:3e:ed:69:30:52:f3:ed:bd:11:e0:32:c6:
d2:2d:fe:fa:cc:35:f2:64:75:72:44:a2:e2:ce:e7:
0a:03:6c:df:59:c4:7e:3c:23:10:69:13:b1:64:48:
05:b7:22:de:50:5e:04:f3:a3:a9:4d:22:72:8a:1f:
4b:66:52:4b:f4:db:86:6d:03:aa:56:ef:7e:fd:35:
6b:9a:8b:8c:92:d0:b5:28:7f:d5:af:1f:d1:f1:ed:
54:3e:36:37:92:f2:b4:22:52:ba:74:f9:04:5b:ea:
4d:8b:45:38:cd:c8:3e:52:d6:e3:3b:65:36:5f:91:
a0:6c:26:f3:2b:5f:e9:d4:d1:94:9d:f8:09:a5:3c:
63:c7:4b:73:f9:99:27:d3:e9:bd:44:f4:6a:41:35:
8c:d3:85:cd:30:a7:12:6e:67:82:d2:57:e1:6e:e4:
47:30:fc:e1:1b:ce:e1:c9:f7:ad:ef:b7:1c:bc:cb:
ff:a8:7a:5c:9a:b3:b3:12:e4:dd:9a:99:a7:06:0f:
1f:7f:c4:87:d3:49:36:c0:2b:90:df:7b:20:15:72:
cc:dd:aa:60:3f:8d:1c:b4:a3:48:d1:0e:5f:5e:18:
5f:85:76:48:89:e9:a6:b1:03:0c:ea:54:c9:1b:cb:
74:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:19:81:25:FF:C9:05:B4:63:12:7A:24:27:77:5F:63:B4:E8:C2:CA
X509v3 Authority Key Identifier:
keyid:79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:08:d9:db:50:e1:de:7d:4d:62:bd:29:b0:ef:29:78:54:ca:
93:d8:07:01:ce:a5:d4:4d:12:0d:54:62:bd:25:4b:b2:1e:ec:
ef:02:33:10:e8:04:0d:3c:5b:68:cb:e2:88:99:a1:b5:e3:9a:
65:b7:5f:b5:d6:25:2b:00:52:03:98:37:b0:ad:05:01:96:60:
ea:c1:9f:af:11:77:d4:e8:60:01:ee:4a:4b:64:8e:56:76:60:
bc:41:e7:16:77:b0:ff:77:c2:da:c2:5f:a3:a5:61:f0:19:f2:
40:38:9e:6b:8a:e2:99:01:56:bb:7f:c3:fb:20:fa:2f:93:86:
1b:00:7f:ef:7e:c1:bb:22:fe:b3:02:24:e1:39:2d:d8:f7:44:
90:d4:ab:4d:cf:a4:f5:28:34:ec:d3:aa:f9:5d:9b:a9:07:a2:
d1:bd:d4:dd:f8:11:2e:ff:dd:ab:2c:2b:c9:d1:06:db:53:e2:
34:94:f1:70:48:1f:15:11:d2:89:e6:6e:a2:f9:13:11:aa:84:
4f:11:db:97:68:58:17:7b:fb:4e:54:8b:e5:20:cf:71:93:47:
b8:c8:e9:75:3b:45:b8:64:5a:80:71:d3:55:51:da:be:d1:f1:
9a:bd:b5:72:91:a7:12:e6:55:cc:b4:c7:a3:ab:d6:63:a7:65:
fc:54:f7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:11:28 2026 by rpki-client