Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
File: EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json)
Hash identifier: Bc8iIkVfbFgg+hQsDQSsOLpnVTBV5B6DY9CSXLdlpfY=
Subject key identifier: BF:98:EE:06:23:45:4F:58:E0:2B:BF:D3:E5:9E:38:07:54:7D:00:BD
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 019CAB6B045CA0460E8AF1C6199B517E6EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
Manifest number: 184F
Signing time: Sun 01 Mar 2026 22:00:43 +0000
Manifest this update: Sun 01 Mar 2026 22:00:43 +0000
Manifest next update: Mon 02 Mar 2026 22:00:43 +0000
Files and hashes: 1: 0dC4r-_GYoQ6ya9DJPoU2aoMd4k.roa (hash: 8JZ2nYpbU9wzayV2maNMxpbZwQJ8oUlvvk4sDKPfND4=)
2: 2UJnYkLlrBrsr-FiuY1t_mTWT4k.roa (hash: Xa61lzBRtSApWj6goAfzYPWzx5tHlOIe0rD8n3ZeiWM=)
3: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: 6NGlikfsIk/73PaYO+44/V1Xkvc/sgESTEs0Wvorego=)
4: IL8deFD8PSOp3NWJSt_iFRSnHrw.roa (hash: q/v7MQox/nq9r/rZ534FmTQXSTW9buaaFYPj+WtYk78=)
5: ZKLNMt3VfAzRkdvHr5Xd6gL_UHI.roa (hash: MwQzyqB63sngmzcWgEGwpFF72y7jC9kNOl+3Zg+6fcs=)
6: fKYfVT1YDQ8JUaTATaBTlPz4QNw.roa (hash: oYpajimnxUNbsLq6vnCVkRjpUdwX5aoikIaxhzhw2Vw=)
7: qK_PP9-atac9mTKlNBkq0IeVJSc.roa (hash: 7XIhv4ZG0yNjDke4N6v5k/ztyTTS+fsvn2uOI243g1w=)
8: xd5IZiz1YB2PdB-q-VKoWUqlfWg.roa (hash: s14zG8n95cnLanJ2EGUmy/+O9/gNhrX1fm7XyiLB6RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:04:5c:a0:46:0e:8a:f1:c6:19:9b:51:7e:6e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Mar 1 22:00:43 2026 GMT
Not After : Mar 2 22:00:43 2026 GMT
Subject: CN=bf98ee0623454f58e02bbfd3e59e3807547d00bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:05:e3:7f:3a:a8:6b:b2:61:64:ef:35:b3:81:
8f:20:d0:e9:0f:13:f1:71:e2:1e:4c:4d:4c:dc:73:
18:86:84:20:bc:49:9a:ba:51:36:a7:25:0e:75:d2:
33:93:83:60:93:7a:07:df:eb:bf:5f:d2:4d:0f:eb:
8a:bb:15:e6:25:97:9d:f8:49:c4:b9:b3:da:90:90:
df:0d:0d:f9:fb:7d:8c:6b:c6:ba:0e:69:67:8b:71:
c1:96:d0:0c:03:64:be:ca:12:47:27:bf:ff:4e:92:
7d:9f:f4:82:98:01:a0:6d:79:ac:0f:02:e7:67:5e:
6a:93:45:c6:8e:26:f1:2d:9e:af:69:ab:bb:4a:ea:
fe:1f:8f:c0:bc:6f:ca:c2:4c:98:b3:c2:90:ca:ec:
84:21:73:42:79:bd:6e:49:69:a7:fc:c0:95:ef:cc:
d5:47:1e:4b:e4:da:da:47:13:a3:38:cf:e4:53:ac:
a2:4a:b6:be:70:b3:61:95:c7:4a:bd:48:ee:45:b8:
88:c3:f7:71:80:e9:ee:41:8d:2f:08:18:67:4d:9f:
51:a4:95:db:32:50:1c:a1:c7:71:05:31:9f:69:2d:
3c:57:91:46:9c:77:f7:10:12:b2:70:a7:46:10:92:
1a:50:2a:53:63:08:ac:e4:28:9e:a8:3d:43:7e:b1:
02:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:98:EE:06:23:45:4F:58:E0:2B:BF:D3:E5:9E:38:07:54:7D:00:BD
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:fa:14:0e:e6:ca:8b:49:28:06:b6:14:17:93:4b:dc:38:a9:
29:a5:ae:bc:5f:2d:b2:37:c7:aa:5c:d0:e4:7b:72:5b:11:f4:
ef:b8:1e:af:8f:3a:77:a2:78:43:3e:a4:31:c4:84:a4:70:f2:
57:2e:03:9f:d6:61:43:7b:2a:3d:21:f2:08:b3:29:cf:f6:03:
99:83:47:c3:f4:56:02:2c:07:b8:db:6d:c8:c0:9f:61:7c:50:
04:a7:4e:f2:8e:d9:70:d7:85:dd:fc:16:cf:11:98:d8:9f:45:
30:70:d2:3c:4b:53:0c:10:eb:a4:29:37:bb:20:d1:44:51:ae:
65:66:f8:fd:7c:29:91:f7:45:9e:f4:29:b4:4f:3c:e3:d9:99:
a0:dc:eb:e5:4e:3e:18:35:5c:59:39:f4:d7:4a:b6:08:30:3b:
50:9f:49:ed:6d:ae:54:76:65:a7:df:e0:7c:42:9a:a9:f5:fa:
70:6c:4f:7a:6b:49:b3:08:32:a9:a5:d9:75:d7:b8:1d:b3:d3:
86:4f:78:4b:e7:e0:f9:dd:e3:78:93:b4:89:2b:98:11:49:bd:
28:cf:dc:2b:12:36:52:4b:90:39:e0:de:49:40:4b:bc:9f:12:
36:2b:29:a6:59:0e:b9:22:9f:49:8a:ea:02:c9:3b:83:5f:cb:
58:2a:10:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrawRcoEYOivHGGZtRfm65MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMTRhN2UyYThjNzAxMjMyNWFlOTczZWQxYTJiYmEwNWIy
YmI5YzEwHhcNMjYwMzAxMjIwMDQzWhcNMjYwMzAyMjIwMDQzWjAzMTEwLwYDVQQD
EyhiZjk4ZWUwNjIzNDU0ZjU4ZTAyYmJmZDNlNTllMzgwNzU0N2QwMGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QXjfzqoa7JhZO81s4GPINDpDxPx
ceIeTE1M3HMYhoQgvEmaulE2pyUOddIzk4Ngk3oH3+u/X9JND+uKuxXmJZed+EnE
ubPakJDfDQ35+32Ma8a6Dmlni3HBltAMA2S+yhJHJ7//TpJ9n/SCmAGgbXmsDwLn
Z15qk0XGjibxLZ6vaau7Sur+H4/AvG/KwkyYs8KQyuyEIXNCeb1uSWmn/MCV78zV
Rx5L5NraRxOjOM/kU6yiSra+cLNhlcdKvUjuRbiIw/dxgOnuQY0vCBhnTZ9RpJXb
MlAcocdxBTGfaS08V5FGnHf3EBKycKdGEJIaUCpTYwis5CieqD1DfrECCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+Y7gYjRU9Y4Cu/0+WeOAdUfQC9MB8GA1UdIwQY
MBaAFBIUp+KoxwEjJa6XPtGiu6BbK7nBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQt
ZTljMzY0OWMxMjE4LzEvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQtZTljMzY0OWMxMjE4
LzEvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyPoUDubK
i0koBrYUF5NL3DipKaWuvF8tsjfHqlzQ5HtyWxH077ger486d6J4Qz6kMcSEpHDy
Vy4Dn9ZhQ3sqPSHyCLMpz/YDmYNHw/RWAiwHuNttyMCfYXxQBKdO8o7ZcNeF3fwW
zxGY2J9FMHDSPEtTDBDrpCk3uyDRRFGuZWb4/XwpkfdFnvQptE8849mZoNzr5U4+
GDVcWTn010q2CDA7UJ9J7W2uVHZlp9/gfEKaqfX6cGxPemtJswgyqaXZdde4HbPT
hk94S+fg+d3jeJO0iSuYEUm9KM/cKxI2UkuQOeDeSUBLvJ8SNispplkOuSKfSYrq
Ask7g1/LWCoQhg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:35:00 2026 by rpki-client