Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
File: EL2oyoaUjZ_gKdoRGgyecNMEalo.mft (raw, json)
Hash identifier: OVUD1zcQQZfn+57zCo51xZ6Xt67SKdzWDcfUUZb6FEg=
Subject key identifier: D1:58:CD:B6:09:C0:2A:FB:E1:08:56:35:7E:11:E1:7C:34:EF:AA:9B
Authority key identifier: 10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A
Certificate issuer: /CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
Certificate serial: 01A0F6E8E14F91AEB1D9FCA2E6AD2A063B09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
Manifest number: 0D60
Signing time: Thu 01 Oct 2026 10:00:52 +0000
Manifest this update: Thu 01 Oct 2026 10:00:52 +0000
Manifest next update: Fri 02 Oct 2026 10:00:52 +0000
Files and hashes: 1: 26reGS5JGM2591eEk2BzmmAasUs.roa (hash: 3M1FfFlULQW8/C7W2Zc2Fn0/lGmaDkz7biCpnx34NUk=)
2: EL2oyoaUjZ_gKdoRGgyecNMEalo.crl (hash: MWK4e7fhak7rr3LA4E36mFlDcPzWUo5az5zarTF55+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:e8:e1:4f:91:ae:b1:d9:fc:a2:e6:ad:2a:06:3b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
Validity
Not Before: Oct 1 10:00:52 2026 GMT
Not After : Oct 2 10:00:52 2026 GMT
Subject: CN=d158cdb609c02afbe10856357e11e17c34efaa9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:ea:12:c8:51:c3:b1:4f:60:b5:6b:09:b2:
45:2b:bf:40:c1:93:b8:f2:b2:8a:29:5d:e3:19:3f:
a8:d3:5f:10:10:fe:6e:0b:e7:70:dd:6b:66:1e:0b:
61:5d:f2:5c:27:75:6f:64:cd:61:70:7f:ff:27:90:
40:b6:d4:13:eb:2b:06:b9:fe:28:79:3a:9d:13:46:
00:55:6c:ac:71:38:af:a5:88:31:be:25:06:f8:e5:
68:35:fe:7e:e3:83:88:96:e5:23:5c:25:5d:f6:e9:
7b:b2:cd:ac:58:af:11:cf:ff:3e:bc:84:8b:b4:92:
0f:05:81:ae:d2:79:b8:bf:9b:46:07:55:03:34:65:
a7:a7:e5:b5:e8:05:ef:84:3f:d5:16:4a:d6:f3:81:
87:46:64:41:1f:22:fd:6a:fa:c6:45:14:e6:7a:f0:
90:c7:02:b2:cd:88:40:49:ed:76:42:7c:c6:9d:2c:
ac:9b:b2:7a:31:00:26:8a:de:10:bd:ba:b5:c3:8c:
7c:9e:d0:46:fe:27:2f:87:d0:bd:20:b2:ea:21:51:
e6:80:64:f3:83:0d:e0:59:98:1b:5e:b6:58:58:9f:
ab:a1:fa:d8:25:e7:d4:dc:41:73:8b:ab:5c:78:78:
02:98:7b:7a:c8:a4:48:49:61:65:2e:4b:2b:94:bd:
94:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:58:CD:B6:09:C0:2A:FB:E1:08:56:35:7E:11:E1:7C:34:EF:AA:9B
X509v3 Authority Key Identifier:
keyid:10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ad:7d:ab:dc:89:65:66:27:5a:41:ac:a3:2f:9e:31:cf:21:
b7:12:6a:98:b5:96:13:87:4b:7a:a0:3a:76:87:55:71:3c:4f:
b2:05:e2:cf:76:90:dd:d4:a3:34:f8:a4:62:c5:06:7a:eb:a2:
20:f9:05:f4:ff:0c:45:ae:cc:b9:dd:00:44:e7:51:fe:20:44:
49:97:4f:01:1e:c7:4e:ef:b8:7a:34:f6:c5:2b:b1:44:9d:ed:
21:79:22:46:0a:f3:32:e6:cc:ca:ff:92:0f:5c:72:1d:88:81:
e3:5f:8e:8c:e7:d7:2a:0a:b9:4c:0a:c4:c1:75:65:6c:8c:ff:
1b:b9:5c:5a:7d:68:a4:fe:3e:0a:c4:34:5e:a4:c8:0e:1c:d9:
b9:71:03:e3:f6:a0:2f:a4:2a:51:78:de:28:6a:17:0e:b7:1c:
41:12:9f:d8:eb:cc:21:eb:f4:15:c1:31:7b:c8:41:66:f6:33:
4f:cf:52:61:c3:ff:32:b0:c5:f6:64:54:7e:11:d7:38:26:af:
70:4a:dd:b2:b4:ba:d8:4b:32:dd:e8:a1:62:17:6c:3c:c8:44:
30:31:ed:07:4a:bb:47:e9:02:aa:18:63:4c:5f:5e:be:42:a8:
2b:18:c7:3b:3a:94:9c:fe:35:75:4d:55:a9:f4:ab:4d:d8:82:
1f:89:4c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 21:31:55 2026 by rpki-client