Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
File: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft (raw, json)
Hash identifier: Cgt5FHKyclX7ZtZqsbINtqQm4d5fnb63fPp1Km7Xk8c=
Subject key identifier: 8B:69:51:2E:35:A5:2C:46:B0:C9:8D:AA:8D:94:52:C7:29:76:7C:06
Authority key identifier: D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
Certificate issuer: /CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Certificate serial: 019F90C80DA146FFBCE6E55C1DEF39C23002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
Manifest number: 1279
Signing time: Thu 23 Jul 2026 21:00:57 +0000
Manifest this update: Thu 23 Jul 2026 21:00:57 +0000
Manifest next update: Fri 24 Jul 2026 21:00:57 +0000
Files and hashes: 1: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl (hash: 9+FuruOrcXLvdZY0O6JqXyZzgr4iIhsqMrKlD9jFb5o=)
2: 9gVKfPDu8oaxgCYhsIHGv4QIfWU.roa (hash: fllRN8SucuRDRWnVjdcisQzmvofCxZ5K6VMo5ZRY8Z0=)
3: YOp__Ry-NGpngn9AjDGoHEbjeCg.roa (hash: ON5r8fZJQGVj6wPi39Ya/7ATYu3d/0MWZ+FMIC4DzPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:0d:a1:46:ff:bc:e6:e5:5c:1d:ef:39:c2:30:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Validity
Not Before: Jul 23 21:00:57 2026 GMT
Not After : Jul 24 21:00:57 2026 GMT
Subject: CN=8b69512e35a52c46b0c98daa8d9452c729767c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bc:cb:b7:62:cb:78:76:6c:f5:61:06:1b:ba:
c6:cb:24:c8:19:0c:7b:8b:c8:40:69:89:da:f3:9f:
3f:05:da:c9:0e:c6:63:a6:b6:22:a2:23:0b:76:55:
42:86:1e:af:80:c9:d2:1d:2d:f1:ab:25:62:03:a8:
13:29:dd:11:3b:e8:ac:44:6b:24:ca:8c:da:37:b3:
57:94:c1:82:42:56:e3:94:e4:69:c1:3a:0c:4b:8f:
f0:34:f0:ce:55:9e:75:79:b2:f2:22:5c:ef:52:40:
93:60:b6:ed:4e:38:d1:0f:7b:29:76:b2:19:cb:8c:
4d:e1:66:00:70:db:2a:22:28:d9:11:57:26:33:f4:
49:9d:a3:e5:2d:07:48:9d:d0:9f:b4:ce:b2:33:73:
e5:4f:8e:96:68:76:de:9e:4a:ab:2e:f5:e9:81:94:
9c:28:05:a9:d0:cf:32:92:c7:fb:1f:dd:8c:50:bc:
1e:62:54:0a:8e:13:03:c3:3b:97:65:14:73:ec:d3:
c5:36:ff:c3:42:35:32:e6:e3:d8:54:05:10:2b:7b:
ac:63:c7:09:eb:0d:f7:9c:73:77:25:a5:1b:99:0f:
3a:b3:2d:23:e0:20:99:a9:07:1b:75:71:9a:1d:65:
2f:21:97:0e:0a:4c:19:ae:eb:b0:2c:20:1d:52:ba:
cd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:69:51:2E:35:A5:2C:46:B0:C9:8D:AA:8D:94:52:C7:29:76:7C:06
X509v3 Authority Key Identifier:
keyid:D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:bf:82:f3:6d:ab:44:26:23:d3:c4:19:ca:e8:4f:2b:70:7a:
42:53:3f:80:2f:04:b4:74:ac:f8:92:e7:c4:e2:75:28:7d:3e:
e0:f5:ac:63:f7:93:60:28:9c:6d:c8:c5:ba:59:75:a0:07:9e:
4e:7f:16:22:a5:92:3c:71:15:dd:95:09:da:b2:a4:0e:30:12:
11:03:7f:c1:f4:ea:89:a3:a6:c2:8b:9e:35:88:36:11:c3:3b:
d2:b5:98:e0:87:96:32:70:2a:a8:3c:2e:71:3e:c2:10:92:ff:
67:ed:ac:48:eb:96:d5:d7:49:a3:5b:ff:db:2c:60:bb:ab:ae:
2c:89:5b:74:2e:7e:6f:e1:ae:c0:d0:6d:e8:76:89:b3:13:d1:
07:f5:e0:40:78:85:2f:ce:d1:51:00:1a:8b:6c:7b:57:a4:ba:
50:8f:0a:1e:5f:e9:2a:44:8a:d9:a4:82:be:84:e3:ce:d7:db:
21:ff:9a:c2:ed:82:ca:90:31:d5:46:24:12:89:b9:1c:9e:92:
4d:51:13:b0:df:43:66:51:04:e4:ff:52:34:d7:05:be:14:e9:
44:59:7d:59:8c:89:ac:91:d3:e6:40:ac:9b:71:db:df:13:7a:
f4:f0:24:b6:34:ea:2d:95:52:6a:4a:c0:3e:12:62:ac:d4:fa:
11:85:6b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:58 2026 by rpki-client