
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
File: EHgHwlGJFROPVVEjYFwBM9_btPo.mft (raw, json)
Hash identifier: xW1/jqoEmpka3yIh4qFOlxKsBaWjGffz0UxmS4BhNlk=
Subject key identifier: 71:1F:5C:CF:E7:F5:05:A5:C7:6C:9A:6B:74:45:6C:45:C3:9B:24:AE
Authority key identifier: 10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA
Certificate issuer: /CN=107807c2518915138f555123605c0133dfdbb4fa
Certificate serial: 019D9CD1ED100C68C2547BE5789747C04A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 19:01:36 +0000
Manifest this update: Fri 17 Apr 2026 19:01:36 +0000
Manifest next update: Sat 18 Apr 2026 19:01:36 +0000
Files and hashes: 1: Ak7xCfYZ94WpFcy69R3EY5zxAfs.roa (hash: KMBeoo3V9b7HNS5xPrK/Qejr6Hp4pvP3hZ9BHsdOLDE=)
2: EHgHwlGJFROPVVEjYFwBM9_btPo.crl (hash: FR97gjJv5cebXzF3K2D3n6Sq6dZhDXNevY3q8WOXQEQ=)
3: OA6POnkqSmxP_dnzNwpmYYzavz8.roa (hash: kX8yEulbOjRkpob8aF431Ln0/YwvLU/L28eJTVYnKTI=)
4: TTS80Z1y-A6Wn6RHS9U2VwA1dAI.roa (hash: XaSvFikEZpf+bViNQBT/sXuBrCkdNvMkMtL8XShKIh8=)
5: XxEZsYZPdK3SWZkomBsTv8LFNVg.roa (hash: tM6CB687KapDIQ9ieiEYJfXEzIc4ztoUppntZfCjT5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:ed:10:0c:68:c2:54:7b:e5:78:97:47:c0:4a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107807c2518915138f555123605c0133dfdbb4fa
Validity
Not Before: Apr 17 19:01:36 2026 GMT
Not After : Apr 18 19:01:36 2026 GMT
Subject: CN=711f5ccfe7f505a5c76c9a6b74456c45c39b24ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5a:1f:ad:40:66:75:aa:72:e8:6e:e2:70:5f:
ca:cc:fc:e1:43:49:d0:63:88:f1:72:7f:68:4e:bc:
22:d0:cf:8b:ae:24:4f:0a:b5:fb:ea:99:85:b6:df:
e9:34:03:8d:6f:ca:50:bb:70:ee:f9:39:45:66:8b:
c6:07:27:f2:f4:2b:36:33:62:73:3b:05:e2:84:41:
7e:40:44:e8:e8:6b:bf:ec:fe:16:47:e2:73:96:e1:
28:97:d8:54:12:9d:55:24:89:25:83:ab:2c:0d:1a:
b3:79:85:76:08:fc:d5:b6:99:87:a0:14:d6:a9:ca:
62:f8:b2:09:b7:0d:5e:76:51:ab:60:40:0e:ce:c8:
55:8a:38:76:9b:7a:60:ce:19:62:cd:f8:69:71:73:
56:3a:bd:7e:b7:ef:dc:82:23:3a:5a:f0:fb:5b:04:
e9:00:a8:74:73:6e:9c:bb:f1:9c:fb:30:47:c6:42:
92:d8:3f:7e:06:43:bc:05:10:2e:91:b0:b8:e7:ca:
f7:95:df:8b:21:0f:81:c7:ac:86:4f:a6:d4:d0:ac:
63:88:10:b0:09:1f:3b:3a:db:62:b1:4e:a5:a8:79:
74:c7:32:48:b1:88:0a:0e:ee:5a:83:ff:46:97:8f:
7d:4c:37:2e:46:5c:35:f2:c2:9d:af:a8:68:75:90:
85:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1F:5C:CF:E7:F5:05:A5:C7:6C:9A:6B:74:45:6C:45:C3:9B:24:AE
X509v3 Authority Key Identifier:
keyid:10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f8:bc:39:bc:68:d7:14:56:5c:95:e6:13:ed:0d:77:16:b9:
d5:c1:13:4b:cb:93:68:2d:a0:73:6f:d1:04:9a:78:90:98:53:
f0:de:7d:b3:64:63:c8:fa:c9:b2:d8:34:6f:da:42:d5:eb:43:
8d:7b:23:ce:bf:8f:9f:ba:1f:46:ba:a0:4d:c8:a6:64:66:77:
9d:dc:2e:ed:73:ba:8d:d9:f7:f4:df:a4:f8:8a:86:98:9f:26:
97:48:47:b6:3d:a5:2d:be:6c:42:d5:4c:7f:3d:d0:20:b1:ad:
98:4a:c6:96:6d:66:f2:7a:c9:bb:5f:45:c9:47:71:f2:a5:b8:
19:4a:c9:c3:f9:93:2b:ce:df:64:7a:56:0d:5d:c0:5d:da:2d:
42:6e:38:00:d2:2a:48:b1:59:59:a1:39:14:ae:96:3e:7c:6e:
2f:0f:14:68:37:ed:48:df:a6:17:35:f2:56:fa:09:5c:00:85:
d2:3f:b0:73:2f:c8:23:aa:5c:04:c0:b8:71:3b:ef:e4:bd:84:
2d:6d:57:a2:4e:51:d1:7c:31:e2:0b:91:5d:08:99:a9:47:b5:
50:74:6a:ec:83:1d:3c:49:9c:66:2d:fe:0c:c8:55:25:34:7c:
b9:92:41:a7:09:6b:7a:d1:15:ee:8e:19:a5:9f:3b:e1:97:02:
fa:99:f1:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2c0e0QDGjCVHvleJdHwEoiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzgwN2MyNTE4OTE1MTM4ZjU1NTEyMzYwNWMwMTMzZGZk
YmI0ZmEwHhcNMjYwNDE3MTkwMTM2WhcNMjYwNDE4MTkwMTM2WjAzMTEwLwYDVQQD
Eyg3MTFmNWNjZmU3ZjUwNWE1Yzc2YzlhNmI3NDQ1NmM0NWMzOWIyNGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1ofrUBmdapy6G7icF/KzPzhQ0nQ
Y4jxcn9oTrwi0M+LriRPCrX76pmFtt/pNAONb8pQu3Du+TlFZovGByfy9Cs2M2Jz
OwXihEF+QETo6Gu/7P4WR+JzluEol9hUEp1VJIklg6ssDRqzeYV2CPzVtpmHoBTW
qcpi+LIJtw1edlGrYEAOzshVijh2m3pgzhlizfhpcXNWOr1+t+/cgiM6WvD7WwTp
AKh0c26cu/Gc+zBHxkKS2D9+BkO8BRAukbC458r3ld+LIQ+Bx6yGT6bU0KxjiBCw
CR87OttisU6lqHl0xzJIsYgKDu5ag/9Gl499TDcuRlw18sKdr6hodZCFtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEfXM/n9QWlx2yaa3RFbEXDmySuMB8GA1UdIwQY
MBaAFBB4B8JRiRUTj1VRI2BcATPf27T6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhnSHdsR0pGUk9QVlZFallGd0JNOV9idFBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yODYwYTQtM2I5NC00Mjc0LWEzYTIt
ZjlhYzE1ZTY2Mzg2LzEvRUhnSHdsR0pGUk9QVlZFallGd0JNOV9idFBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8yODYwYTQtM2I5NC00Mjc0LWEzYTItZjlhYzE1ZTY2Mzg2
LzEvRUhnSHdsR0pGUk9QVlZFallGd0JNOV9idFBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfi8Obxo
1xRWXJXmE+0Ndxa51cETS8uTaC2gc2/RBJp4kJhT8N59s2RjyPrJstg0b9pC1etD
jXsjzr+Pn7ofRrqgTcimZGZ3ndwu7XO6jdn39N+k+IqGmJ8ml0hHtj2lLb5sQtVM
fz3QILGtmErGlm1m8nrJu19FyUdx8qW4GUrJw/mTK87fZHpWDV3AXdotQm44ANIq
SLFZWaE5FK6WPnxuLw8UaDftSN+mFzXyVvoJXACF0j+wcy/II6pcBMC4cTvv5L2E
LW1Xok5R0Xwx4guRXQiZqUe1UHRq7IMdPEmcZi3+DMhVJTR8uZJBpwlretEV7o4Z
pZ874ZcC+pnx2g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:05:34 2026 by rpki-client