Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
File: EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft (raw, json)
Hash identifier: YoQa2NkLJyeN6Gqjy1VNChkXURkMiSicvxVVJKVb3oE=
Subject key identifier: C7:AF:23:26:81:51:6A:70:17:11:40:E6:71:55:1C:37:EE:2F:B4:98
Authority key identifier: 10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
Certificate issuer: /CN=10eedc33aa442907189f0b3c563836951fb185bb
Certificate serial: 01A0F1C34914CD76EE257945F289A04F2B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
Manifest number: 1A88
Signing time: Wed 30 Sep 2026 10:01:42 +0000
Manifest this update: Wed 30 Sep 2026 10:01:42 +0000
Manifest next update: Thu 01 Oct 2026 10:01:42 +0000
Files and hashes: 1: 1-kqNcEC470FL-8tMUqoOnQYiF9M.roa (hash: EJlZOy6PuzNDvgY+mmcKZwX7cS9939GtFAUq2p+3aFQ=)
2: 9ZZwIsEn5-9xDQwcqsYYTjxbjJA.roa (hash: lZmCKQfLFLci+JYwAKSX3l63iYxIkiAA4w5SsSjJvUg=)
3: EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl (hash: sMayCiIS4LD+VEpndVUOGmiLjW+i4rwecD3K896k0E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 09:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:c3:49:14:cd:76:ee:25:79:45:f2:89:a0:4f:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10eedc33aa442907189f0b3c563836951fb185bb
Validity
Not Before: Sep 30 10:01:42 2026 GMT
Not After : Oct 1 10:01:42 2026 GMT
Subject: CN=c7af232681516a70171140e671551c37ee2fb498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:56:33:de:df:37:30:fd:e3:7d:b4:3b:c4:57:
69:5f:73:d9:1a:0c:d0:bc:a9:a8:59:10:f7:06:4e:
69:41:6d:61:d4:c7:c7:5e:f8:45:16:f4:a8:f0:ff:
2f:ce:3b:e1:ee:a4:bb:22:79:f3:bc:46:b3:2a:14:
9d:51:2f:8b:88:a1:37:d9:41:61:73:c7:87:69:d0:
b6:a0:61:38:0c:8b:5c:74:db:80:d4:88:ea:e3:a3:
fa:f2:73:c8:c2:1f:92:3e:bd:f5:35:61:1f:fe:4c:
dd:62:4f:45:d3:73:18:8f:f7:3b:28:00:5f:bc:5d:
6a:70:49:54:78:26:b5:bb:84:e4:93:f1:5b:96:9d:
aa:de:c8:a6:15:e2:4e:e4:ee:39:1e:d6:91:f3:5e:
47:e0:71:25:98:af:b0:a0:c8:1f:4d:f1:f4:5d:1c:
60:78:78:25:27:ba:dc:27:56:31:e7:f0:11:c2:30:
76:91:f6:38:b7:ee:fa:9a:23:2d:9f:a8:dc:8f:7b:
a5:6d:cf:16:75:21:13:57:58:ef:02:db:73:d2:13:
d1:ac:f9:0c:f7:e8:92:1c:79:44:8c:94:2e:2e:0f:
d5:ee:15:31:4c:41:c3:45:73:20:91:82:2c:8f:f7:
af:46:e1:17:67:f1:dc:a3:4e:ce:45:f2:b1:c9:0b:
fa:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AF:23:26:81:51:6A:70:17:11:40:E6:71:55:1C:37:EE:2F:B4:98
X509v3 Authority Key Identifier:
keyid:10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d6:d8:37:c9:4b:f0:40:63:7a:0a:a1:70:7c:e9:ce:da:a7:
97:e4:c8:81:fc:9f:62:fd:43:ab:f2:39:a3:40:63:a0:fe:f6:
dd:37:73:53:a2:b2:da:98:1a:e8:e4:12:b9:78:54:8a:30:b6:
cf:22:a9:e7:1c:ea:8c:0d:71:40:ac:03:93:28:97:14:4f:14:
69:7c:d2:40:46:7f:dc:09:ef:4b:f3:21:af:48:db:6b:bc:71:
d9:fd:ee:38:7b:d9:c8:e3:21:f8:a9:66:ac:ea:ee:b8:91:9c:
8f:d6:72:5f:53:e7:e2:a1:50:7d:32:5f:0e:ad:fc:08:ef:62:
3c:41:10:75:8d:f9:a6:61:8d:c7:5c:cb:16:3c:b4:4b:69:44:
62:b3:d6:ac:d2:07:3f:c0:ed:e4:89:e4:11:da:21:86:9b:54:
a1:92:2d:9e:ca:22:a6:61:3d:a8:cc:91:2b:7f:92:45:a0:c4:
41:9c:33:40:f3:45:0f:fa:5a:17:53:cb:24:a0:4f:20:28:77:
96:c2:19:2e:9a:83:2e:7d:09:56:dc:c5:7a:59:ba:6d:fe:22:
fa:2f:02:d3:c8:f5:88:dc:c4:c0:db:2a:19:f5:5c:76:e1:08:
32:5d:34:c2:56:0d:52:d3:d1:42:79:1f:82:74:5e:36:2c:7c:
8f:81:a3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 17:23:26 2026 by rpki-client