Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
File: EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json)
Hash identifier: EHj9IhU9iKCtlg7ZvZfA033O6fSceDilUUIOwSbVlZo=
Subject key identifier: 7F:D9:56:6C:F2:58:73:63:15:44:E0:83:77:D7:9A:21:48:E3:27:14
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 019FAA50D945CD4E99B5C152CD1397734BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
Manifest number: 19DD
Signing time: Tue 28 Jul 2026 20:00:52 +0000
Manifest this update: Tue 28 Jul 2026 20:00:52 +0000
Manifest next update: Wed 29 Jul 2026 20:00:52 +0000
Files and hashes: 1: 2UJnYkLlrBrsr-FiuY1t_mTWT4k.roa (hash: Xa61lzBRtSApWj6goAfzYPWzx5tHlOIe0rD8n3ZeiWM=)
2: 6SSFg2yTmoKjF6zDnreMbjMeibE.roa (hash: AXKKKuWwPyZUnqIrE5CjvILYke6ea5omdcN+j9qzetQ=)
3: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: uIDtDTnOs02VjEaHl6JVpM3BvXBmsZNJ5413bxXgaw4=)
4: IL8deFD8PSOp3NWJSt_iFRSnHrw.roa (hash: q/v7MQox/nq9r/rZ534FmTQXSTW9buaaFYPj+WtYk78=)
5: Q5hESTZfbwdELtpLu27GaP7-Lno.roa (hash: ObHNDf8xA8n0C2IML/LhP97ggga61XCUWT978woHwn0=)
6: ZKLNMt3VfAzRkdvHr5Xd6gL_UHI.roa (hash: MwQzyqB63sngmzcWgEGwpFF72y7jC9kNOl+3Zg+6fcs=)
7: fKYfVT1YDQ8JUaTATaBTlPz4QNw.roa (hash: oYpajimnxUNbsLq6vnCVkRjpUdwX5aoikIaxhzhw2Vw=)
8: qK_PP9-atac9mTKlNBkq0IeVJSc.roa (hash: 7XIhv4ZG0yNjDke4N6v5k/ztyTTS+fsvn2uOI243g1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:d9:45:cd:4e:99:b5:c1:52:cd:13:97:73:4b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Jul 28 20:00:52 2026 GMT
Not After : Jul 29 20:00:52 2026 GMT
Subject: CN=7fd9566cf25873631544e08377d79a2148e32714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b2:28:2c:d6:19:b7:2f:74:cc:a4:72:98:57:
a8:51:54:f6:be:6b:e2:6e:e6:e7:cc:33:d5:76:7b:
fb:1e:f6:1e:85:2f:f9:f3:f1:f7:67:54:39:94:e4:
6b:b8:e7:cd:3d:56:4f:58:0b:d8:cb:65:cf:f4:d2:
96:13:51:28:5c:ff:9b:e9:6a:a0:c3:50:df:6c:25:
2e:30:52:80:51:2e:60:b1:28:b2:2b:41:ee:c5:0c:
bc:e4:83:6a:18:61:fa:75:76:be:58:7d:50:25:69:
d4:36:b3:2c:f7:d6:ed:34:9e:a2:36:98:9b:79:9a:
08:d2:91:e4:ef:9e:43:5b:ed:07:d6:07:87:a5:c2:
b2:a9:f5:fc:5e:33:8e:06:2c:ca:d8:7c:f6:8f:a1:
ea:94:56:7a:16:7f:83:c2:08:0e:57:02:a7:bb:b4:
dc:4c:ad:66:70:68:33:fc:6b:1b:b9:ef:9b:f6:01:
b6:f6:a4:2a:52:0a:46:3d:0b:4f:5f:75:31:60:16:
eb:73:c2:81:a0:8d:7d:5f:d3:07:56:e2:84:5d:b6:
1d:70:a4:5f:ab:a6:ec:9b:9b:c5:c4:fb:fa:93:79:
84:87:ce:1a:42:93:2a:91:ae:a9:eb:fb:6c:e5:93:
5c:c1:58:db:12:8f:79:fa:7b:92:c4:dc:b0:2f:a6:
66:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D9:56:6C:F2:58:73:63:15:44:E0:83:77:D7:9A:21:48:E3:27:14
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:34:95:fc:a8:d4:8f:cf:4b:cd:74:90:25:72:95:62:81:bb:
fc:7f:d1:eb:71:f7:43:b0:e3:fa:57:cc:9e:d7:9b:c5:24:b3:
14:54:c0:86:42:46:31:2e:2a:d4:9c:92:0d:b2:d4:8b:27:fb:
50:1f:f4:b5:f7:98:c1:98:ce:c3:d6:b8:d8:1e:05:f4:c7:9d:
71:86:b6:26:8e:08:ff:fd:cb:4b:62:94:79:3c:5b:28:46:30:
c5:01:67:68:a2:3c:c9:50:cd:38:67:0e:6b:8b:b9:2a:f2:61:
36:7a:2f:3e:c9:73:31:0a:be:b0:24:c0:22:00:a5:3d:2b:17:
7c:e8:19:36:f7:cf:5e:40:2e:51:d0:84:8c:b1:b7:39:46:85:
0b:51:8a:74:ea:dc:1b:4b:8d:c3:2b:61:3c:a8:20:0a:5f:9f:
73:91:6e:a4:e7:c1:bd:87:55:cd:aa:b2:6d:f7:b3:6e:05:ef:
12:6a:5f:79:05:8c:b8:ed:31:b3:b5:64:9f:c4:16:ea:64:6d:
2f:ef:2d:87:36:a1:10:7a:14:bf:e6:d6:0e:e2:89:9f:56:d2:
27:26:2c:39:db:53:14:f9:18:b3:6c:17:f6:e3:2b:eb:ab:a3:
b1:89:45:46:f4:c6:22:80:b7:0e:73:9c:b2:5a:71:c2:f0:f2:
e3:96:1c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:02:47 2026 by rpki-client