Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
File: EHgHwlGJFROPVVEjYFwBM9_btPo.mft (raw, json)
Hash identifier: RCz3hxlmGZX490Ww0RhWNYsfUjsVoGoKUU/cVU0jhbU=
Subject key identifier: A9:8F:45:EA:80:5F:D7:B9:B1:FF:02:D3:B3:2E:1F:CD:17:FF:D8:F7
Authority key identifier: 10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA
Certificate issuer: /CN=107807c2518915138f555123605c0133dfdbb4fa
Certificate serial: 01A12C5799FBB6CC1D15972FB50FC213C6FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
Manifest number: 1A9D
Signing time: Sun 11 Oct 2026 19:01:40 +0000
Manifest this update: Sun 11 Oct 2026 19:01:40 +0000
Manifest next update: Mon 12 Oct 2026 19:01:40 +0000
Files and hashes: 1: Ak7xCfYZ94WpFcy69R3EY5zxAfs.roa (hash: KMBeoo3V9b7HNS5xPrK/Qejr6Hp4pvP3hZ9BHsdOLDE=)
2: EHgHwlGJFROPVVEjYFwBM9_btPo.crl (hash: /l0Rjq+g3o80nHM3P/yyw76IDiQ0M+vUM9OZS9lseRU=)
3: OA6POnkqSmxP_dnzNwpmYYzavz8.roa (hash: kX8yEulbOjRkpob8aF431Ln0/YwvLU/L28eJTVYnKTI=)
4: TTS80Z1y-A6Wn6RHS9U2VwA1dAI.roa (hash: XaSvFikEZpf+bViNQBT/sXuBrCkdNvMkMtL8XShKIh8=)
5: XxEZsYZPdK3SWZkomBsTv8LFNVg.roa (hash: tM6CB687KapDIQ9ieiEYJfXEzIc4ztoUppntZfCjT5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 19:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:57:99:fb:b6:cc:1d:15:97:2f:b5:0f:c2:13:c6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107807c2518915138f555123605c0133dfdbb4fa
Validity
Not Before: Oct 11 19:01:40 2026 GMT
Not After : Oct 12 19:01:40 2026 GMT
Subject: CN=a98f45ea805fd7b9b1ff02d3b32e1fcd17ffd8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:20:bc:d4:24:16:c7:3c:9a:4d:7c:79:3a:d2:
f0:5d:f6:da:51:35:83:50:ef:e6:1d:28:2e:db:b1:
a6:4a:2d:c6:f2:ae:1e:8b:c6:36:0a:4e:9d:de:1a:
4a:df:e7:7c:7c:f3:00:fd:e1:9f:39:5f:9f:f4:54:
98:c1:78:83:8a:f3:a7:c9:78:b3:1d:a0:e7:34:1d:
8b:d5:45:2f:0f:a9:80:ea:b3:cd:e4:32:12:0d:e7:
8b:e9:d8:3c:3f:4e:4c:11:ce:57:e8:87:af:f2:e1:
e9:61:ad:f6:63:cb:e0:f8:3c:f6:ba:31:bb:56:31:
75:d5:b7:6a:f7:c4:23:5c:a0:91:35:eb:37:43:4f:
56:c4:6f:3d:c7:bf:e9:e6:40:f6:51:dc:35:a6:c0:
72:59:f6:5e:b7:34:93:b3:18:41:d0:78:74:cf:17:
51:ce:60:7d:cf:c9:da:5a:00:50:49:6f:c6:55:12:
06:9c:25:00:e2:cb:d2:5a:97:83:2e:44:e6:b1:40:
c8:35:22:f4:a9:c7:15:99:40:9d:23:bb:ac:07:06:
b3:11:3d:cb:e2:c1:01:9a:25:16:6c:d9:d8:fb:fb:
bf:c3:22:0b:57:9e:5e:3c:47:40:60:6b:05:ab:ae:
ae:6a:19:3b:dc:51:9b:15:06:b5:22:4e:58:8c:12:
a1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8F:45:EA:80:5F:D7:B9:B1:FF:02:D3:B3:2E:1F:CD:17:FF:D8:F7
X509v3 Authority Key Identifier:
keyid:10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:3b:82:08:07:43:cc:bc:89:b7:58:f7:13:9c:1b:65:21:71:
09:ea:b3:b0:17:b3:b9:dc:0d:bb:51:6e:97:50:c6:d4:17:64:
a3:b6:4f:e8:b4:9f:27:6e:16:35:e3:eb:97:81:ee:29:b6:24:
dd:a5:d4:0d:85:08:e8:a9:2f:69:04:88:ee:76:41:e9:78:21:
32:4e:f1:80:0e:0d:d3:4a:62:31:22:e3:10:7b:83:e3:90:bf:
6e:19:38:f2:35:d9:7d:a0:90:11:06:d8:5c:e5:9e:2b:74:37:
96:5c:66:cc:ba:a0:2a:ed:d6:9b:04:8f:4a:01:9a:25:9c:9d:
fe:ed:5a:59:f9:8d:13:c0:7a:4a:43:9c:f5:e2:b7:be:28:40:
da:2b:30:c3:ee:76:ab:05:74:fb:10:26:7a:d0:0f:54:94:60:
15:b8:d7:4e:b3:24:e6:70:e0:e0:2a:11:61:79:00:38:3c:69:
16:0a:af:ee:b7:9d:d1:0e:8b:1f:79:f5:96:7a:dd:40:1f:3e:
d1:b1:a7:0a:fa:a5:71:5e:f6:5b:df:79:2e:f7:f3:31:14:5c:
e9:32:e8:68:f7:c1:d3:47:90:16:10:c2:db:62:1a:8d:ba:e4:
71:2d:9e:36:5a:54:bd:fb:6a:7a:c9:79:db:6b:2a:51:5e:db:
fd:b3:ff:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:22:32 2026 by rpki-client