Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft
File: EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft (raw, json)
Hash identifier: q4S2uh/umcMmLFweoCEGA1t7DJ+tVfKqWEsdBcKVtHk=
Subject key identifier: F7:E7:54:24:1F:E4:C3:F2:A1:91:EB:AD:A8:93:0C:8E:52:FD:83:C8
Authority key identifier: 12:15:B5:AD:46:2B:C4:94:C4:32:49:31:CD:F4:30:1C:DA:01:F8:0C
Certificate issuer: /CN=1215b5ad462bc494c4324931cdf4301cda01f80c
Certificate serial: 01A0C28D46B71BF2D95591DFDE29F678BF96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft
Manifest number: DE
Signing time: Mon 21 Sep 2026 06:00:33 +0000
Manifest this update: Mon 21 Sep 2026 06:00:33 +0000
Manifest next update: Tue 22 Sep 2026 06:00:33 +0000
Files and hashes: 1: EhW1rUYrxJTEMkkxzfQwHNoB-Aw.crl (hash: 7RzlvTDDADtNTC8gbxjqtz1+93yohwem8tXwKaLxUuc=)
2: QSDL9aVFEsgN1pmAwftAE68ZkLE.roa (hash: 9l+ETcbI4z1a4gUBvTyDHkfAhvOVwGBe6uOyh4bKOpA=)
3: SfPsnTAjEz7s0IJwXQXEqowgAgg.roa (hash: 2beiFCnRQDFsR7VsCIm5A7EYCFJ0xA+jfhamHFduadg=)
4: cB_m9up9hazlPAM7xwJmzGz_w9k.roa (hash: SLDL/2B9grLRt23aK3KXLfe0T0kdFf+HkoVMaYlOQZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:46:b7:1b:f2:d9:55:91:df:de:29:f6:78:bf:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1215b5ad462bc494c4324931cdf4301cda01f80c
Validity
Not Before: Sep 21 06:00:33 2026 GMT
Not After : Sep 22 06:00:33 2026 GMT
Subject: CN=f7e754241fe4c3f2a191ebada8930c8e52fd83c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:89:19:01:af:07:08:e8:fe:05:cb:cf:eb:3f:
c4:b8:a4:93:13:f3:e8:ad:d2:59:b2:a2:be:fa:fc:
7d:ea:30:5a:bc:82:56:93:60:51:9e:b0:ae:59:c7:
ac:a0:e7:8e:2a:e9:1c:41:e0:4f:14:73:df:7a:b3:
5a:ee:65:87:6d:69:9e:44:b2:24:ed:00:b7:1f:e7:
1a:54:d4:2f:66:8a:1b:5a:ee:a2:dc:c4:15:7f:ee:
d0:db:6e:5d:e7:c2:2d:87:c0:b4:71:7b:d3:d5:8b:
f7:f2:23:e5:9a:77:4b:ac:c9:8f:4e:4b:13:71:42:
29:2e:2f:3b:b5:ff:11:6f:65:53:05:7d:0e:24:04:
8c:0b:c5:71:06:e5:e4:66:35:94:de:01:ce:31:07:
59:09:fd:8b:69:9e:f8:b8:9b:63:7d:48:9a:15:e3:
8e:f1:1f:3f:22:7f:fd:91:0d:0a:a4:1a:b6:91:5d:
f5:43:86:69:74:9b:69:9e:db:73:49:45:03:11:4e:
f4:d7:08:7a:0d:99:9a:a1:1a:83:48:f4:79:f3:fb:
f2:0d:c6:38:da:59:d1:49:41:6e:a6:09:21:70:b9:
a3:9c:41:dd:76:10:02:6c:1b:ac:a4:6d:96:8d:15:
27:44:94:cf:93:9e:7f:11:6a:4d:d1:ce:33:d8:2b:
e4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E7:54:24:1F:E4:C3:F2:A1:91:EB:AD:A8:93:0C:8E:52:FD:83:C8
X509v3 Authority Key Identifier:
keyid:12:15:B5:AD:46:2B:C4:94:C4:32:49:31:CD:F4:30:1C:DA:01:F8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:2d:3d:a7:a6:f6:0e:71:a1:c0:61:de:91:bb:55:94:8a:d8:
98:5d:1f:9b:04:5d:8d:0d:2a:cc:24:18:f2:24:60:b2:59:bf:
8e:70:38:27:d3:e7:14:ef:65:ad:55:d9:da:f5:f2:91:02:d3:
24:83:6e:a2:ed:3c:5a:77:a2:eb:1a:17:5e:0d:eb:fe:3b:bf:
9d:78:6a:e9:37:c5:3d:f9:15:75:37:dc:3f:8a:9d:51:a5:af:
67:08:d5:ee:fb:d5:5b:0c:e9:a0:d7:20:92:04:66:63:81:17:
26:b6:0b:31:7d:ca:52:05:21:40:73:f4:3c:6a:e5:77:4f:6d:
37:37:07:0b:bd:a8:bf:6e:68:a5:ed:8a:eb:6b:b7:19:7d:c2:
fd:b2:ae:cb:b0:dd:a7:17:b2:f3:ae:44:bd:16:1c:79:f3:1b:
d0:bc:e3:fd:e9:9d:7c:14:37:35:28:a5:23:c8:12:07:ac:bf:
ae:ec:a4:4d:33:6d:3e:cc:22:bd:09:02:ca:bc:f3:6a:46:45:
70:6e:63:a9:9d:7e:b4:9f:bd:d0:73:fe:2e:ba:9a:88:37:b0:
92:12:bf:3d:b8:a1:f5:eb:c2:74:7f:6c:0b:78:06:31:fa:58:
23:74:e7:e5:11:67:85:de:35:53:df:44:73:28:c0:ae:65:3d:
c0:c6:5a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:06:00 2026 by rpki-client