Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
File: EoEZrBeON5iQNuoposD0YwaWz-g.mft (raw, json)
Hash identifier: 3SU0gNcMYU0DIDTkb1GxKmuHDGnu9GyWbZeQmMgYBzA=
Subject key identifier: C5:CE:EF:F6:54:C5:67:FF:3A:41:68:F9:99:8A:34:50:AD:D4:DD:DD
Authority key identifier: 12:81:19:AC:17:8E:37:98:90:36:EA:29:A2:C0:F4:63:06:96:CF:E8
Certificate issuer: /CN=128119ac178e37989036ea29a2c0f4630696cfe8
Certificate serial: 01A0DEAA6FA2D60C9CD5A212FD7D1AB8963D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
Manifest number: 02EB
Signing time: Sat 26 Sep 2026 17:01:46 +0000
Manifest this update: Sat 26 Sep 2026 17:01:46 +0000
Manifest next update: Sun 27 Sep 2026 17:01:46 +0000
Files and hashes: 1: EoEZrBeON5iQNuoposD0YwaWz-g.crl (hash: Jr/Xj6ge7rEaRh0TWbM8GwUSH4j2WgGkmEiYzZh68mE=)
2: MoyUhaJrKyyg7NdI-cgC8UrZDnc.roa (hash: Blton8K6qNZytZrnFkrDQwMOUJgcucmO6AJ7qz+2/EQ=)
3: XlF1Um0hQjtANHg7MSAgVZmYu7k.asa (hash: vL/L3yXXlyuNpAULKIf/FSlD5vVaZNSSg6lawDMb628=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 17:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:aa:6f:a2:d6:0c:9c:d5:a2:12:fd:7d:1a:b8:96:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128119ac178e37989036ea29a2c0f4630696cfe8
Validity
Not Before: Sep 26 17:01:46 2026 GMT
Not After : Sep 27 17:01:46 2026 GMT
Subject: CN=c5ceeff654c567ff3a4168f9998a3450add4dddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:35:1e:4c:ff:cf:03:58:01:4a:01:13:8b:80:
c7:bb:53:98:dc:68:c1:cc:78:72:45:80:45:9b:92:
65:2a:82:32:eb:bc:83:20:ff:2a:30:18:4c:9f:06:
e1:e6:11:6e:26:56:21:5d:b4:8b:6e:7a:18:6d:f5:
07:ed:93:d3:f6:dc:49:d0:47:2d:fa:b4:3c:02:82:
08:db:89:6f:23:73:01:c1:d7:ed:3b:2f:f3:37:b2:
96:b0:1a:c4:ee:2d:22:5b:8a:c6:6d:9e:fc:d3:53:
61:84:1b:79:da:aa:fa:74:ac:d6:d6:bc:ee:42:01:
a4:90:be:93:5b:cd:50:0a:65:84:47:7b:90:28:30:
4d:9d:fe:bb:2d:41:b5:2a:04:24:ee:53:d9:f4:2a:
1c:49:3c:4f:f9:c4:01:c3:56:92:7b:56:99:b7:ff:
56:58:cd:ed:9f:31:70:7f:89:c6:f6:98:85:13:d0:
a2:7d:d2:13:78:76:ff:ae:e6:6c:06:82:64:63:2b:
40:7c:65:0d:48:c0:8e:a2:f8:20:a1:73:ec:d9:a7:
1f:36:63:d4:42:c0:6f:ce:1b:ce:81:34:61:3c:b1:
77:e6:e5:1d:8c:74:05:78:5d:c6:be:10:aa:d5:87:
d9:15:a4:88:6a:63:bd:79:e0:54:11:5f:dd:57:ce:
de:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CE:EF:F6:54:C5:67:FF:3A:41:68:F9:99:8A:34:50:AD:D4:DD:DD
X509v3 Authority Key Identifier:
keyid:12:81:19:AC:17:8E:37:98:90:36:EA:29:A2:C0:F4:63:06:96:CF:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ca:97:df:17:50:db:b9:95:76:01:75:55:0c:49:7e:91:54:
42:0a:d3:4e:bf:dc:39:5e:44:66:cf:dc:2f:05:bd:cc:1c:b2:
51:b8:fd:40:49:f6:bb:1b:04:ba:cf:e5:92:4e:47:c8:90:51:
e9:08:b7:9f:82:15:7b:3e:4a:b0:03:1b:0f:01:47:e3:31:d6:
7b:5d:e7:35:e7:a4:a1:73:34:40:58:0d:c6:54:ca:62:c0:ea:
6a:3b:05:fd:ea:25:0a:13:d5:a6:4f:86:07:6b:ae:b2:b3:a1:
75:36:d4:a8:f1:ba:b0:5d:14:df:f4:ed:7b:48:b9:51:16:21:
ce:56:dd:67:ca:7b:7c:1e:a3:68:ac:d2:49:39:f6:46:4d:6f:
80:0d:91:19:72:77:16:38:5e:a3:2b:94:57:09:c5:8e:cf:f7:
05:0a:d1:c2:4c:db:b9:ed:80:cd:43:30:bb:4e:7a:17:d6:9b:
e9:c2:64:07:d8:d8:b5:40:9f:d5:90:25:dd:3d:d4:f5:bf:63:
dd:4f:77:c6:2b:f8:10:69:c6:fe:10:da:d6:7b:96:86:f2:be:
44:eb:59:51:3c:81:d7:c3:ae:ce:0f:1e:2e:18:ae:29:f5:e5:
8a:3a:22:43:78:2e:59:5d:66:e5:03:c9:e7:dd:b6:2d:57:00:
09:2c:96:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:19:04 2026 by rpki-client