Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
File: EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft (raw, json)
Hash identifier: S6S0/9qAkB6U0SmZstKP8cbJdNKRjQiPUM6VhqgJ8wU=
Subject key identifier: 8A:EB:5D:21:CA:CD:8F:44:32:74:28:DB:7A:15:16:28:F0:B0:1F:87
Authority key identifier: 10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
Certificate issuer: /CN=10eedc33aa442907189f0b3c563836951fb185bb
Certificate serial: 019F9436EEB1DE053E1997C42EC0F3475150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
Manifest number: 19D3
Signing time: Fri 24 Jul 2026 13:00:55 +0000
Manifest this update: Fri 24 Jul 2026 13:00:55 +0000
Manifest next update: Sat 25 Jul 2026 13:00:55 +0000
Files and hashes: 1: 1-kqNcEC470FL-8tMUqoOnQYiF9M.roa (hash: EJlZOy6PuzNDvgY+mmcKZwX7cS9939GtFAUq2p+3aFQ=)
2: 9ZZwIsEn5-9xDQwcqsYYTjxbjJA.roa (hash: lZmCKQfLFLci+JYwAKSX3l63iYxIkiAA4w5SsSjJvUg=)
3: EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl (hash: 7PHZW6meMFDBZMt0zmhK2qColrjRhoUhPofYy6+aiH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:ee:b1:de:05:3e:19:97:c4:2e:c0:f3:47:51:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10eedc33aa442907189f0b3c563836951fb185bb
Validity
Not Before: Jul 24 13:00:55 2026 GMT
Not After : Jul 25 13:00:55 2026 GMT
Subject: CN=8aeb5d21cacd8f44327428db7a151628f0b01f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e5:e8:48:5b:93:6b:2e:93:2e:9b:71:d0:e6:
29:c5:8d:17:55:0f:a7:45:20:52:ed:9a:e8:18:92:
e9:3d:81:92:80:3e:78:e3:16:f3:98:7f:ec:fd:20:
f3:0c:0f:d2:70:e0:f2:03:d8:b2:e6:4e:bb:66:9a:
b6:e4:7f:44:05:1b:c6:d3:38:70:29:ff:e8:f4:0b:
6d:83:22:06:2d:51:df:5b:67:e5:02:95:64:9d:85:
b7:90:18:ab:e3:f9:e3:68:8f:89:7f:65:48:04:21:
77:2b:7f:97:02:10:c1:5c:5b:9d:99:5c:84:08:d0:
21:c0:33:9a:9c:9f:0d:7f:3b:e0:29:94:50:fa:73:
6a:a7:e2:22:88:3e:fd:35:23:07:f1:5c:f5:fa:f2:
73:cf:9d:3d:be:dd:b4:82:83:34:35:f8:5b:5f:8f:
21:ce:62:a9:b5:0b:66:d1:08:7a:f0:89:a5:e0:3d:
b3:06:f1:ee:21:b9:dd:5e:47:5d:61:02:8a:3f:3a:
8c:c2:87:43:28:16:0f:fe:4c:1a:02:18:13:73:7a:
e5:43:a9:46:c0:3c:d0:5f:69:99:6f:1b:97:5a:30:
2d:af:36:3d:fe:7f:19:8e:f8:4f:73:0a:4d:8d:00:
c3:0c:a0:b7:93:33:17:27:05:43:7d:6b:44:e3:10:
a0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EB:5D:21:CA:CD:8F:44:32:74:28:DB:7A:15:16:28:F0:B0:1F:87
X509v3 Authority Key Identifier:
keyid:10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b5:84:61:28:16:e4:20:6e:57:13:e3:a4:8b:d9:89:55:60:
90:ca:9e:b6:2c:e4:4d:e0:5c:a0:6b:d8:9a:b4:b0:9f:03:fc:
8c:08:d8:b5:fb:18:18:8a:3b:57:f8:47:76:ef:92:90:61:b7:
f3:5a:51:94:78:6c:d3:eb:ce:4a:6e:fe:50:12:d3:1a:69:f2:
ca:08:e5:fc:86:48:8b:a2:20:d3:5d:8b:f2:80:d1:66:80:3c:
9a:af:2d:d8:4e:07:ac:e0:0a:a2:ea:b2:11:31:77:b8:07:af:
18:84:57:01:99:f8:a2:30:30:03:ca:f5:52:24:d4:27:8c:4a:
09:11:be:71:b0:e2:f5:c9:03:63:d8:d3:9e:56:a4:f2:bb:69:
d6:41:c6:e9:2d:ef:3e:fb:8f:08:c9:54:17:8a:90:4a:7e:84:
2c:0d:89:e8:00:53:33:33:86:95:fb:b5:86:66:c9:ed:44:40:
8d:11:fc:30:a1:d6:60:d7:db:d1:65:4b:fb:15:4c:a0:9d:da:
71:d4:5a:b1:58:c6:de:3a:9f:d3:cf:bf:ed:f2:b8:46:d9:03:
bf:55:a1:c2:cf:4b:ed:b0:85:3c:12:48:25:2d:31:47:7b:b4:
a0:91:7a:3c:16:68:c2:f2:f6:01:08:f9:44:1e:c6:ec:9d:c2:
b0:98:44:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:06:51 2026 by rpki-client