Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft
File: EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft (raw, json)
Hash identifier: ymXSFZ2Qj/vo+bx8U3xDmhe/L8z/Kh5IvwrAhqmNQ44=
Subject key identifier: D9:3E:DD:24:AE:85:A7:F0:31:01:25:7E:A9:B0:F7:DA:4C:65:49:06
Authority key identifier: 12:81:FD:01:CC:E2:55:A2:7C:2E:B3:CF:17:53:AF:68:FB:EC:28:FD
Certificate issuer: /CN=1281fd01cce255a27c2eb3cf1753af68fbec28fd
Certificate serial: 01A0DF867C2AE5800BC8F0DC96500B40F1DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EoH9AcziVaJ8LrPPF1OvaPvsKP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft
Manifest number: ED
Signing time: Sat 26 Sep 2026 21:02:07 +0000
Manifest this update: Sat 26 Sep 2026 21:02:07 +0000
Manifest next update: Sun 27 Sep 2026 21:02:07 +0000
Files and hashes: 1: EoH9AcziVaJ8LrPPF1OvaPvsKP0.crl (hash: hVS3IegLdMqnkbCfGVNDHw4R3sehWf25pPmUggOlwPo=)
2: UeeOGT1aFWqTWrDFmuASM8XoFWQ.roa (hash: 8GToKI8OvtXj4QOA4NLn7hg/E2c2fghSHtpWrxVk2Dw=)
3: oe-1CFwfBXxRDhex7FkwF1JYZTA.roa (hash: FBEY8qRdvuiENUskWnHAGFekMX8Uope29YCFoFBpnsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EoH9AcziVaJ8LrPPF1OvaPvsKP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:86:7c:2a:e5:80:0b:c8:f0:dc:96:50:0b:40:f1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1281fd01cce255a27c2eb3cf1753af68fbec28fd
Validity
Not Before: Sep 26 21:02:07 2026 GMT
Not After : Sep 27 21:02:07 2026 GMT
Subject: CN=d93edd24ae85a7f03101257ea9b0f7da4c654906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:55:f8:bb:af:59:24:70:f2:f1:76:85:14:7c:
35:21:ae:b8:9d:85:c1:8b:21:53:4e:c0:1f:77:91:
40:57:3d:b1:40:e1:2d:3c:8b:13:ae:f2:d4:7f:17:
35:7a:9c:61:53:ef:b6:13:ef:7a:e7:6c:8d:b3:0e:
45:f2:ef:94:ed:0b:b9:97:57:1a:2a:f5:48:36:1c:
22:fc:b5:d4:53:a7:ad:1e:9a:d9:c7:29:b2:cb:aa:
d8:6f:c8:6b:22:96:b7:87:1a:15:c0:e2:d7:5f:74:
dd:57:0a:b8:dd:19:52:08:4d:b2:93:fc:36:49:94:
15:b1:92:a1:8a:65:e7:cd:63:92:ba:b1:c6:9b:23:
95:54:27:a3:0a:ca:c2:73:2e:6c:62:6d:8f:fc:76:
85:c0:57:d6:38:41:d7:ac:75:d7:7e:38:71:9a:c2:
6c:0e:13:60:f7:1a:66:dd:c5:a9:1e:bc:77:9a:2c:
6b:70:70:45:12:0f:79:53:31:f0:bc:e2:19:95:10:
3f:94:c0:51:ea:1b:eb:48:2c:97:0e:ee:d3:e5:41:
3b:c2:1b:43:ef:2b:22:7f:f4:00:f2:80:ce:92:5d:
b3:cf:82:44:8e:6b:bc:8e:62:78:58:8d:bf:71:aa:
3a:66:ba:1c:da:52:c6:c1:13:a2:b3:3c:83:d7:87:
fa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3E:DD:24:AE:85:A7:F0:31:01:25:7E:A9:B0:F7:DA:4C:65:49:06
X509v3 Authority Key Identifier:
keyid:12:81:FD:01:CC:E2:55:A2:7C:2E:B3:CF:17:53:AF:68:FB:EC:28:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoH9AcziVaJ8LrPPF1OvaPvsKP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:09:50:67:eb:52:42:b5:83:da:02:53:40:0e:df:be:c0:77:
8a:37:15:65:94:04:5f:6a:96:64:50:f8:7c:fd:e3:f5:ab:cd:
b9:d3:fc:01:50:ff:8f:a1:e2:7a:db:e1:7b:72:8a:b2:3b:a6:
11:c4:67:3a:e8:f3:4c:84:66:cb:21:3d:ed:9a:1f:90:ec:b8:
f2:9c:68:13:e2:4f:3b:c1:fd:a1:4b:b9:4c:6c:2e:4b:31:86:
5a:04:c1:e1:f1:4b:56:61:db:71:b9:dd:22:c4:71:36:07:7d:
09:7e:30:1a:49:3e:0c:2e:42:c9:73:95:14:04:41:c1:25:ca:
00:0a:47:25:5c:89:b0:87:24:ef:df:75:6f:24:19:3f:d7:e0:
d4:02:6b:22:41:6c:ce:33:23:99:c5:04:59:44:8d:a8:03:a2:
1b:8e:6a:4a:1c:93:eb:4a:9c:a1:4d:af:bd:73:07:a8:a5:c5:
b5:d7:38:a5:34:b8:0b:f1:ed:84:ab:b2:99:77:b7:2f:87:84:
b0:e9:4d:01:c8:de:04:a0:ef:98:37:c1:82:f0:06:f1:9f:5a:
de:8c:8b:b7:53:ac:84:34:36:83:e8:9b:16:f8:ba:c0:7a:a8:
e9:a4:e7:c1:92:f7:82:13:c6:4d:22:bd:f2:95:e8:82:c3:cd:
c2:b1:cd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:02:03 2026 by rpki-client