Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
File: EL2oyoaUjZ_gKdoRGgyecNMEalo.mft (raw, json)
Hash identifier: OBvk7S/yaPwjO1mVknFGwZNAKShwAIbvCiEn2e7KOJE=
Subject key identifier: DA:42:B4:C6:54:F7:89:D0:E0:7E:8C:0A:85:0A:79:2A:0B:3D:47:70
Authority key identifier: 10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A
Certificate issuer: /CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
Certificate serial: 019D27A92DCB7623A0670A98AEE48D338078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
Manifest number: 0B67
Signing time: Thu 26 Mar 2026 01:01:31 +0000
Manifest this update: Thu 26 Mar 2026 01:01:31 +0000
Manifest next update: Fri 27 Mar 2026 01:01:31 +0000
Files and hashes: 1: 26reGS5JGM2591eEk2BzmmAasUs.roa (hash: 3M1FfFlULQW8/C7W2Zc2Fn0/lGmaDkz7biCpnx34NUk=)
2: EL2oyoaUjZ_gKdoRGgyecNMEalo.crl (hash: NorIrkTaI7h+eI2sbUPjd9hNz/FrsprCX6nLcckUJx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:2d:cb:76:23:a0:67:0a:98:ae:e4:8d:33:80:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
Validity
Not Before: Mar 26 01:01:31 2026 GMT
Not After : Mar 27 01:01:31 2026 GMT
Subject: CN=da42b4c654f789d0e07e8c0a850a792a0b3d4770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5c:7c:e6:6e:97:42:67:d3:70:97:f2:de:47:
4d:83:54:ad:01:36:9e:8e:b0:cb:6f:35:f9:4e:de:
c2:eb:39:bf:58:e6:83:5a:d0:2c:f7:2e:ed:ab:22:
3e:2d:a5:19:ae:57:5a:a5:d5:ac:d5:fc:3a:d8:6a:
b5:6d:9f:a2:8f:b0:75:94:e6:73:7d:3b:ed:e3:58:
09:cc:24:f1:3e:cb:3c:30:e6:d4:1a:02:b3:b7:9a:
fa:1b:7d:84:8e:91:b7:e7:a0:72:09:4c:9f:d3:0d:
8d:e8:84:e4:68:06:f3:c7:0d:21:d8:4b:62:f9:a1:
7b:7b:c2:5f:3e:cd:f3:81:a6:ad:52:a4:4a:83:dd:
30:ab:90:4d:c2:cd:7d:3e:18:1f:6f:24:ef:0a:14:
45:e5:ba:50:64:a1:81:bf:74:25:1b:c8:37:5c:29:
24:3d:bd:c6:14:f5:f7:86:76:95:05:3a:e5:17:43:
9d:46:bd:7e:35:ab:4f:eb:55:b8:a1:d4:c9:85:86:
39:fa:eb:34:36:c1:24:ed:c8:64:29:31:12:28:19:
58:df:3c:03:d1:67:14:86:48:84:c0:5f:b5:5d:b1:
16:89:c2:09:97:05:67:e5:21:35:f2:8c:d7:71:30:
08:3f:16:53:83:8b:10:81:5b:3f:60:d5:3b:4a:0e:
30:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:42:B4:C6:54:F7:89:D0:E0:7E:8C:0A:85:0A:79:2A:0B:3D:47:70
X509v3 Authority Key Identifier:
keyid:10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:da:22:e7:2d:59:06:64:0c:a5:7e:7a:ca:29:8e:16:c5:a7:
55:6d:c8:a2:19:fd:9a:04:fe:87:b2:79:09:bb:94:74:4e:1f:
75:b6:04:65:42:4f:ae:f1:9e:33:91:21:82:eb:8d:9d:75:cd:
af:9a:4c:e6:42:99:59:ad:96:8c:32:66:83:68:cf:bc:ec:02:
d4:6a:b8:15:bc:17:10:73:f3:4d:71:5d:38:4d:ce:4a:50:f9:
f9:73:ce:03:fb:67:b8:af:86:32:ce:f6:ff:5d:23:18:45:84:
85:70:da:4a:1c:5f:95:97:29:7f:5e:56:73:53:54:6c:f2:e4:
5e:3f:b5:b9:fb:6c:33:80:ef:2b:0d:42:dd:96:12:50:bf:88:
83:11:68:69:02:89:97:63:6b:99:7c:d8:8c:c5:c2:13:52:17:
93:53:a5:44:2e:3d:fe:ff:b4:96:ba:59:92:7f:2b:92:62:02:
ec:5c:92:33:10:26:80:53:37:62:33:0c:47:dd:2d:c4:0d:7d:
81:d8:3f:d8:8e:77:ab:fb:aa:e4:63:23:9d:25:be:49:2e:84:
e0:e5:80:90:70:db:2f:b6:29:89:c2:24:19:f6:22:4e:68:5a:
b6:4f:0f:f2:0d:ea:42:8f:cb:2c:82:4b:ca:11:8e:2f:92:d3:
71:e0:67:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:13 2026 by rpki-client