Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
File: EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json)
Hash identifier: 5qITX6n6M6fJTAwgAk+ycLXSk7tBbP+bFLBDICimgec=
Subject key identifier: 95:C7:04:0B:15:D1:52:CD:0C:34:E0:D1:BF:9C:0F:D6:80:2F:CB:A2
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 01A1AC0391CF13310DAA02A1AA33B09C2BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
Manifest number: 1AE7
Signing time: Thu 05 Nov 2026 14:01:17 +0000
Manifest this update: Thu 05 Nov 2026 14:01:17 +0000
Manifest next update: Fri 06 Nov 2026 14:01:17 +0000
Files and hashes: 1: 2UJnYkLlrBrsr-FiuY1t_mTWT4k.roa (hash: Xa61lzBRtSApWj6goAfzYPWzx5tHlOIe0rD8n3ZeiWM=)
2: 6SSFg2yTmoKjF6zDnreMbjMeibE.roa (hash: AXKKKuWwPyZUnqIrE5CjvILYke6ea5omdcN+j9qzetQ=)
3: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: aeJCnWq0Bq3IfHyAI/AVkwNlYemToUitD5ZeQz/t5oA=)
4: IL8deFD8PSOp3NWJSt_iFRSnHrw.roa (hash: q/v7MQox/nq9r/rZ534FmTQXSTW9buaaFYPj+WtYk78=)
5: Q5hESTZfbwdELtpLu27GaP7-Lno.roa (hash: ObHNDf8xA8n0C2IML/LhP97ggga61XCUWT978woHwn0=)
6: ZKLNMt3VfAzRkdvHr5Xd6gL_UHI.roa (hash: MwQzyqB63sngmzcWgEGwpFF72y7jC9kNOl+3Zg+6fcs=)
7: fKYfVT1YDQ8JUaTATaBTlPz4QNw.roa (hash: oYpajimnxUNbsLq6vnCVkRjpUdwX5aoikIaxhzhw2Vw=)
8: qK_PP9-atac9mTKlNBkq0IeVJSc.roa (hash: 7XIhv4ZG0yNjDke4N6v5k/ztyTTS+fsvn2uOI243g1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ac:03:91:cf:13:31:0d:aa:02:a1:aa:33:b0:9c:2b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Nov 5 14:01:17 2026 GMT
Not After : Nov 6 14:01:17 2026 GMT
Subject: CN=95c7040b15d152cd0c34e0d1bf9c0fd6802fcba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e1:63:cd:82:cd:93:7d:99:92:94:da:cb:a8:
51:33:ec:59:c9:96:de:90:58:dd:bb:f0:fa:8a:4a:
ac:cd:14:83:34:4c:04:be:a5:3f:4c:d7:71:2f:9d:
06:44:d6:a2:9b:6d:c7:cb:66:6b:e6:56:f9:37:59:
5b:8c:f3:ba:24:87:f2:26:fd:7b:ab:16:32:9e:62:
a2:32:f8:a9:35:d7:7c:01:1f:32:26:ff:6c:12:d3:
01:6f:28:9d:f7:64:01:93:00:b9:0e:85:ff:b3:b6:
d4:e9:2c:64:31:45:a7:ab:43:c3:2b:96:06:4a:0d:
4c:9d:60:fd:27:65:c0:c6:54:06:68:20:a9:c4:ed:
f7:44:05:3b:6f:ca:d3:40:35:48:66:60:d7:be:d3:
13:a0:d7:e4:8d:61:f3:57:f0:ef:cf:e0:9e:4c:65:
33:22:73:ee:05:f5:03:09:1c:0c:b4:1c:8f:0c:14:
fa:3e:ce:94:98:a2:14:22:28:70:6e:0f:03:24:38:
ba:53:bb:ec:2f:85:28:c7:de:d2:e0:b3:d4:61:83:
8e:cd:96:57:91:25:88:39:e2:d5:0b:f8:7f:8f:51:
74:97:31:50:54:f9:7e:c7:ab:07:1a:97:1e:7c:e6:
a9:3c:d2:be:28:f2:5f:bf:7e:6e:a6:e8:c7:34:29:
60:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C7:04:0B:15:D1:52:CD:0C:34:E0:D1:BF:9C:0F:D6:80:2F:CB:A2
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:58:95:37:95:3e:20:f4:18:98:c8:39:83:27:a1:98:74:78:
12:38:40:cf:62:e2:74:fc:3d:70:77:5d:b0:db:dc:a1:a3:92:
ec:ec:5b:9d:9a:b9:e5:ea:14:8f:de:5b:1a:32:33:0c:42:1e:
b4:a9:3f:eb:1a:6c:68:64:cc:7b:b0:37:d0:bd:2b:84:dc:75:
2b:28:40:23:62:1c:c1:30:3c:cf:fa:f7:a4:df:46:3f:a1:dd:
bc:c9:8e:76:12:6b:34:44:18:71:00:6d:dc:67:91:04:34:a6:
5c:d5:3d:bf:77:46:4d:5f:6f:7c:e6:af:9c:28:c4:e0:9b:3f:
0c:4c:66:66:4e:c2:56:36:2c:1b:b1:ea:8c:3a:71:e6:64:bf:
11:7e:64:4f:dc:27:39:8f:cb:ad:cd:aa:03:63:7a:81:93:50:
ea:f7:20:71:e8:87:cc:3a:c8:e8:c1:03:4d:68:6e:90:1a:1d:
48:df:b3:b7:27:c2:6b:7e:12:4e:12:c2:06:0f:35:e6:c6:52:
f2:09:58:6d:db:73:fb:b7:26:60:1b:e6:c4:67:a1:77:d9:c2:
ec:e9:d2:a0:d7:39:01:1c:5c:06:5f:33:13:39:94:15:fb:f8:
9c:b9:c5:5c:38:50:c7:e8:61:a9:32:d7:34:dc:1b:d6:6f:21:
23:4a:e0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:13:31 2026 by rpki-client