Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
File: EoEZrBeON5iQNuoposD0YwaWz-g.mft (raw, json)
Hash identifier: qLqof4d75MB1lVYJPde90SMz532FWy/z63TI07a1Q4c=
Subject key identifier: FE:3D:FB:AF:74:95:DA:D3:75:CF:2C:8E:E1:38:34:25:F0:C0:AE:C3
Authority key identifier: 12:81:19:AC:17:8E:37:98:90:36:EA:29:A2:C0:F4:63:06:96:CF:E8
Certificate issuer: /CN=128119ac178e37989036ea29a2c0f4630696cfe8
Certificate serial: 019D26284084AF3F1F7E2D986D1A71860494
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
Manifest number: FD
Signing time: Wed 25 Mar 2026 18:01:05 +0000
Manifest this update: Wed 25 Mar 2026 18:01:05 +0000
Manifest next update: Thu 26 Mar 2026 18:01:05 +0000
Files and hashes: 1: EoEZrBeON5iQNuoposD0YwaWz-g.crl (hash: E/wUnu3/BeAZ1NAmP4wX+FzioYnOtdVJXRNX6ch4Yj0=)
2: MoyUhaJrKyyg7NdI-cgC8UrZDnc.roa (hash: Blton8K6qNZytZrnFkrDQwMOUJgcucmO6AJ7qz+2/EQ=)
3: dfjch8XLq-4wXUHU0X4FRj8rZtw.asa (hash: LprVvfFT3+5D2/SGgkoYdn2pNQPb3rgY3LcWQ8dnja0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:40:84:af:3f:1f:7e:2d:98:6d:1a:71:86:04:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128119ac178e37989036ea29a2c0f4630696cfe8
Validity
Not Before: Mar 25 18:01:05 2026 GMT
Not After : Mar 26 18:01:05 2026 GMT
Subject: CN=fe3dfbaf7495dad375cf2c8ee1383425f0c0aec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:f9:68:7f:74:d8:47:31:60:d8:de:d8:59:
2d:cd:0e:43:56:42:83:35:60:38:a4:ae:d9:fe:2a:
71:0a:8d:d3:75:12:b3:c6:2e:16:38:d1:85:cc:e3:
f7:8f:33:9c:68:f1:6d:a2:9f:0f:83:2d:77:10:3f:
44:34:ea:62:d4:09:c5:84:72:5f:9a:9d:da:26:e9:
05:24:ca:a0:79:0e:ce:42:51:8c:eb:b0:b7:d4:77:
a1:da:cf:10:81:97:16:79:31:53:0f:92:ac:26:96:
7e:82:28:3a:a2:27:fc:f0:1a:b8:dc:5e:9c:66:70:
92:6a:62:44:9f:2d:b5:fd:10:82:ea:50:ff:3f:9f:
80:bf:1c:33:4c:d2:7c:2b:61:75:c2:fe:ae:1f:28:
3f:84:4d:98:df:f0:34:55:c5:d8:20:2b:10:e9:e6:
c3:a0:41:48:0d:8c:e7:d3:f5:4a:29:c5:11:24:a6:
c0:4f:32:2f:78:d5:df:52:49:01:ee:82:d7:b2:a6:
3c:85:dc:c9:29:e0:d3:0d:a8:7d:0a:79:55:e6:54:
01:6d:fb:39:10:21:d9:6c:f8:b9:5a:dc:fa:5a:aa:
73:b4:95:97:e4:a3:44:fc:9a:cc:3f:6b:5e:3f:f6:
e5:1c:64:bf:c3:c6:32:91:07:cc:85:f0:05:1f:ef:
69:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3D:FB:AF:74:95:DA:D3:75:CF:2C:8E:E1:38:34:25:F0:C0:AE:C3
X509v3 Authority Key Identifier:
keyid:12:81:19:AC:17:8E:37:98:90:36:EA:29:A2:C0:F4:63:06:96:CF:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:9a:6d:cb:ef:e3:84:60:12:e2:8c:69:4a:ed:75:f4:ed:99:
a1:ef:10:66:2e:70:08:02:2b:a3:2f:59:e4:90:5d:cc:9b:ce:
79:b6:77:71:35:27:b4:c9:73:c7:42:4a:17:94:03:d2:67:29:
c4:f3:4f:ab:7d:4c:e7:94:91:ba:d3:2d:d1:7a:5e:73:d1:15:
d0:ab:6f:b6:fb:8f:cc:03:85:7a:35:7c:ee:fc:8d:65:b8:5f:
cd:39:9d:82:b6:bc:ee:9e:06:c4:b8:28:d0:62:5b:53:fc:18:
dd:ec:60:6b:53:12:55:46:85:59:36:99:d6:ee:86:ac:8e:a6:
96:74:d6:81:26:29:d6:91:87:b5:2c:f0:e8:bd:b4:38:55:e5:
09:dd:b4:24:61:a9:0b:67:69:e3:c7:c8:b5:f4:a1:28:a3:34:
ec:5f:9e:15:d3:a9:91:d1:6a:7b:f5:ce:2c:7c:a6:7b:f5:9f:
76:3c:4c:96:4b:69:e5:27:67:b7:c4:aa:31:65:a4:5f:26:74:
dc:e1:ae:fa:df:9b:28:3d:fb:9d:89:77:c4:ce:ed:49:e6:e4:
23:fe:ac:a4:e5:8d:38:6e:18:c1:a7:9a:58:41:82:68:fc:1d:
4a:e2:b4:03:27:b3:d4:59:09:c7:38:ba:b9:3e:f4:4b:bf:dc:
54:72:bf:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:23:22 2026 by rpki-client