Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
File: EoEZrBeON5iQNuoposD0YwaWz-g.mft (raw, json)
Hash identifier: BuzDrbz2PLDxyjb5ktFs1mzq6CrCMULjL8OWenUknYM=
Subject key identifier: 31:44:D7:16:39:F1:5E:3C:12:8B:A6:5A:4F:9F:69:3B:9C:4F:CD:7D
Authority key identifier: 12:81:19:AC:17:8E:37:98:90:36:EA:29:A2:C0:F4:63:06:96:CF:E8
Certificate issuer: /CN=128119ac178e37989036ea29a2c0f4630696cfe8
Certificate serial: 019F8EA22D6C68B4FFB7BAAC6DC88C3441BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
Manifest number: 023D
Signing time: Thu 23 Jul 2026 11:00:20 +0000
Manifest this update: Thu 23 Jul 2026 11:00:20 +0000
Manifest next update: Fri 24 Jul 2026 11:00:20 +0000
Files and hashes: 1: EoEZrBeON5iQNuoposD0YwaWz-g.crl (hash: SmGW8WHyC2u9agJvmi8riF98YLlgutx3lFGIIjwKNT0=)
2: MoyUhaJrKyyg7NdI-cgC8UrZDnc.roa (hash: Blton8K6qNZytZrnFkrDQwMOUJgcucmO6AJ7qz+2/EQ=)
3: XlF1Um0hQjtANHg7MSAgVZmYu7k.asa (hash: vL/L3yXXlyuNpAULKIf/FSlD5vVaZNSSg6lawDMb628=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:2d:6c:68:b4:ff:b7:ba:ac:6d:c8:8c:34:41:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128119ac178e37989036ea29a2c0f4630696cfe8
Validity
Not Before: Jul 23 11:00:20 2026 GMT
Not After : Jul 24 11:00:20 2026 GMT
Subject: CN=3144d71639f15e3c128ba65a4f9f693b9c4fcd7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:41:77:af:31:b0:02:4a:af:37:6d:dc:02:
99:e8:00:22:a3:7f:e8:b7:f8:14:af:9e:47:8f:a6:
ac:c6:76:37:e0:b9:88:5e:8a:e3:45:b7:ea:4e:db:
70:61:ac:a2:fc:41:c8:bc:b4:74:4b:fc:35:a6:18:
dc:96:3e:fe:e9:bd:55:aa:e0:53:03:23:bc:20:23:
2e:4b:c7:c9:76:d4:2b:3c:48:09:42:9c:4a:79:2d:
11:ca:0e:a4:e7:9a:35:23:e7:83:e2:df:17:9a:cd:
74:d2:f1:27:36:09:00:43:a9:e9:7b:81:2f:89:c5:
81:7f:44:dd:c9:82:67:a7:c2:5e:5a:68:cf:11:53:
06:92:14:2b:6d:b9:aa:64:3e:b1:3b:3b:dc:68:3f:
3f:3f:0f:1a:1d:ae:92:d8:0a:0f:95:80:f2:31:39:
d1:6a:d5:39:6f:17:8d:d1:ef:80:fd:35:52:84:94:
4e:0e:3c:e6:92:79:88:8a:90:ea:3c:61:f0:63:0e:
d3:c1:f9:86:f4:0f:76:bc:aa:df:c2:89:41:de:4b:
13:b3:0c:20:3d:90:77:f9:50:82:74:89:3b:ce:f4:
59:8e:31:ca:48:62:6b:a1:68:65:b2:d0:f0:48:c9:
dc:ea:29:21:17:9b:c3:58:81:2b:b0:2a:5b:20:94:
13:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:44:D7:16:39:F1:5E:3C:12:8B:A6:5A:4F:9F:69:3B:9C:4F:CD:7D
X509v3 Authority Key Identifier:
keyid:12:81:19:AC:17:8E:37:98:90:36:EA:29:A2:C0:F4:63:06:96:CF:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:fe:8b:b6:c7:2f:3e:39:17:22:d5:7f:2b:4a:16:36:ba:a9:
16:52:f8:4c:df:0b:97:0b:5e:b8:2d:85:07:c5:94:d6:0e:ee:
4b:ff:2c:fb:96:a8:82:33:2e:5a:f7:fc:30:77:86:dd:6f:f7:
62:78:42:39:d6:af:26:ab:5e:1e:d1:99:1b:09:f2:8d:35:aa:
9e:c5:df:78:d2:d7:56:0e:37:c9:3b:34:b1:b9:35:69:05:8c:
b9:43:5e:ea:07:58:b7:8f:e6:e0:a9:7c:71:3c:69:05:42:10:
e0:d5:01:3c:98:d4:81:3a:69:4e:11:fd:3e:35:9d:77:47:df:
27:44:2a:41:f3:ec:57:b5:9a:fc:43:65:24:30:07:44:eb:14:
d5:57:2a:0c:d8:e1:ab:84:35:f8:75:1f:79:f8:64:17:50:98:
0f:3a:59:ba:f9:3b:6c:ac:da:0f:9a:ea:ef:fa:95:cb:2c:38:
89:73:cf:1a:d4:2c:ca:3e:8d:6a:64:83:b2:84:72:5e:5e:7f:
14:2c:13:48:59:3c:1f:86:fe:f6:4f:45:e7:5a:d6:92:b7:87:
11:1d:50:24:90:82:0b:22:82:a3:08:d5:a6:b0:8d:3a:73:77:
05:ba:a8:0d:7b:8e:46:b5:11:4d:37:fb:be:48:0d:ea:fa:7f:
d9:41:83:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:31 2026 by rpki-client