Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft
File: EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft (raw, json)
Hash identifier: IO03wLWncwwAsJVFEK6nq2FzIIuUmiG7/S91QQz3DCI=
Subject key identifier: AC:6D:F5:5F:33:19:DD:8F:F6:C1:2E:FF:9C:34:E3:C2:75:C1:D9:71
Authority key identifier: 12:81:FD:01:CC:E2:55:A2:7C:2E:B3:CF:17:53:AF:68:FB:EC:28:FD
Certificate issuer: /CN=1281fd01cce255a27c2eb3cf1753af68fbec28fd
Certificate serial: 019F935B322C91696D06D14E1E17685448AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EoH9AcziVaJ8LrPPF1OvaPvsKP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:55 +0000
Manifest this update: Fri 24 Jul 2026 09:00:55 +0000
Manifest next update: Sat 25 Jul 2026 09:00:55 +0000
Files and hashes: 1: EoH9AcziVaJ8LrPPF1OvaPvsKP0.crl (hash: UmHSpRRujLtIg5+6cCIwEkSEa2WBqT9+zqkizG7FIyo=)
2: UeeOGT1aFWqTWrDFmuASM8XoFWQ.roa (hash: 8GToKI8OvtXj4QOA4NLn7hg/E2c2fghSHtpWrxVk2Dw=)
3: oe-1CFwfBXxRDhex7FkwF1JYZTA.roa (hash: FBEY8qRdvuiENUskWnHAGFekMX8Uope29YCFoFBpnsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EoH9AcziVaJ8LrPPF1OvaPvsKP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:32:2c:91:69:6d:06:d1:4e:1e:17:68:54:48:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1281fd01cce255a27c2eb3cf1753af68fbec28fd
Validity
Not Before: Jul 24 09:00:55 2026 GMT
Not After : Jul 25 09:00:55 2026 GMT
Subject: CN=ac6df55f3319dd8ff6c12eff9c34e3c275c1d971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4f:b4:5e:2b:13:55:fd:74:5d:59:36:31:d8:
0e:bc:29:ab:5e:69:aa:c7:40:66:f7:f4:d2:c0:ce:
67:9c:f7:46:a7:ac:47:68:3a:0f:1d:e5:fc:a5:e1:
99:21:43:34:30:eb:f7:03:c6:da:03:08:32:e1:57:
9b:15:17:09:56:29:c4:38:9a:93:c9:53:e0:7a:14:
ea:d7:b2:2c:8b:dd:3d:2e:d3:db:bb:26:7e:42:bb:
12:28:73:e9:ef:db:f7:52:b4:53:e7:4d:42:7e:c6:
2e:7a:1f:e4:ee:d9:2e:ba:97:13:aa:e8:a0:9c:e8:
07:72:d9:a6:e4:37:af:2d:9c:d3:29:5e:c5:cf:1f:
40:d6:2e:2f:36:61:82:8a:e4:39:0c:2b:a4:3e:a0:
a1:57:a1:e1:8f:71:24:c1:86:be:f2:e1:63:30:48:
cf:1a:8d:53:13:1f:53:24:36:3e:d7:e8:74:11:cc:
39:b6:36:94:35:8e:76:6c:30:ed:4e:78:2e:ac:e9:
df:a7:79:af:06:fd:9f:b8:a5:6c:8f:37:3b:b3:c5:
50:91:3d:c1:ec:88:3a:7e:26:22:ed:2f:81:61:56:
eb:e0:58:85:95:10:f7:de:7c:61:f2:1a:78:80:b9:
00:f1:5c:70:6a:ab:87:b1:5a:7b:98:89:62:ee:29:
1d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6D:F5:5F:33:19:DD:8F:F6:C1:2E:FF:9C:34:E3:C2:75:C1:D9:71
X509v3 Authority Key Identifier:
keyid:12:81:FD:01:CC:E2:55:A2:7C:2E:B3:CF:17:53:AF:68:FB:EC:28:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoH9AcziVaJ8LrPPF1OvaPvsKP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a4:fd:26:83:dd:de:b0:93:1d:53:b0:46:1a:66:bf:fa:33:
c5:96:44:2d:ae:81:82:a0:e3:5b:45:61:a0:84:61:31:3d:5e:
7f:f7:9d:87:2d:49:d8:54:ea:64:db:57:c9:17:df:54:67:d4:
00:01:e7:d3:5b:66:bb:26:ee:80:13:dc:4f:a0:64:45:17:39:
2e:2f:0d:44:ea:4a:83:05:70:9d:2e:63:23:77:31:16:9b:88:
49:47:aa:73:86:79:2e:c5:f6:a1:f8:b4:65:6d:00:a0:29:8b:
5c:24:39:6e:f1:b4:2e:4f:a0:bf:c8:09:5b:d0:a6:28:c4:ad:
ce:3c:d7:6a:8d:ef:81:c2:f7:96:da:d8:50:15:ad:2c:e0:28:
f5:46:24:ce:d0:f3:eb:95:6b:f4:4f:ba:0d:72:8e:67:de:79:
50:20:db:73:74:43:75:69:43:fc:3c:71:c9:a8:e0:19:cb:28:
e7:ef:49:c8:03:85:4c:70:d6:16:97:da:94:74:3d:43:ea:1c:
b7:cb:d9:2b:8e:7b:46:3f:1e:d8:14:b1:59:e7:9a:50:ab:9d:
85:38:82:ab:47:62:49:3c:43:9d:74:f8:14:ea:1a:b8:7a:35:
d8:3b:03:43:a8:f8:fa:43:f3:64:a4:94:cb:bb:5d:96:ae:5e:
0f:93:19:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:16:59 2026 by rpki-client