Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft
File: EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft (raw, json)
Hash identifier: qA3epoThQbdnuKWiXSqvBTbYYWPSafRDlyJiaFcWdWc=
Subject key identifier: 1B:BF:E6:23:C7:3F:5A:C7:AD:3D:3C:F9:E8:FE:B2:57:EE:DA:E3:A6
Authority key identifier: 12:15:B5:AD:46:2B:C4:94:C4:32:49:31:CD:F4:30:1C:DA:01:F8:0C
Certificate issuer: /CN=1215b5ad462bc494c4324931cdf4301cda01f80c
Certificate serial: 01A1DE70DED9D6F176ACCB5286C03D3A8464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft
Manifest number: 0171
Signing time: Sun 15 Nov 2026 09:01:41 +0000
Manifest this update: Sun 15 Nov 2026 09:01:41 +0000
Manifest next update: Mon 16 Nov 2026 09:01:41 +0000
Files and hashes: 1: EhW1rUYrxJTEMkkxzfQwHNoB-Aw.crl (hash: UMuKOpqortWtbYrcxN3K3rBk2jy0AM1eEdNYxjpegf8=)
2: QSDL9aVFEsgN1pmAwftAE68ZkLE.roa (hash: 9l+ETcbI4z1a4gUBvTyDHkfAhvOVwGBe6uOyh4bKOpA=)
3: SfPsnTAjEz7s0IJwXQXEqowgAgg.roa (hash: 2beiFCnRQDFsR7VsCIm5A7EYCFJ0xA+jfhamHFduadg=)
4: cB_m9up9hazlPAM7xwJmzGz_w9k.roa (hash: SLDL/2B9grLRt23aK3KXLfe0T0kdFf+HkoVMaYlOQZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:de:d9:d6:f1:76:ac:cb:52:86:c0:3d:3a:84:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1215b5ad462bc494c4324931cdf4301cda01f80c
Validity
Not Before: Nov 15 09:01:41 2026 GMT
Not After : Nov 16 09:01:41 2026 GMT
Subject: CN=1bbfe623c73f5ac7ad3d3cf9e8feb257eedae3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:88:72:44:a8:f8:7d:3e:88:dd:3b:92:ed:
75:59:4e:da:e1:ad:c3:4b:81:25:06:08:04:17:04:
c8:1e:5b:a7:fd:8d:5b:76:fd:9d:79:2c:1d:07:20:
e0:99:60:00:a5:52:75:bb:7e:8c:e0:56:e9:8d:20:
a6:1b:53:39:69:28:96:2d:f4:15:76:0d:d7:bd:cc:
f3:ff:c8:2f:fa:c4:63:7d:f9:1d:d9:7d:be:b1:7d:
d3:59:29:b6:30:74:2b:5f:74:c0:3e:cf:39:d7:f0:
24:c8:2f:71:ed:08:48:04:d7:dd:9e:e3:dc:78:f0:
7d:81:01:80:43:06:fa:c3:ef:78:a1:45:6d:2b:ae:
6a:58:cc:4a:bd:34:a8:a9:1c:8a:3e:c8:6b:0b:d3:
05:fa:97:3f:29:05:06:68:f5:17:68:c6:4f:df:55:
70:69:7e:3b:97:16:72:4c:c7:30:94:b9:8e:df:7b:
2f:8b:60:0d:f3:70:17:44:ec:0d:e4:89:05:79:b6:
98:5e:35:dc:0e:27:99:d1:5f:c3:48:e5:54:a3:63:
9d:7e:fa:44:98:47:2d:6b:32:07:49:86:f1:da:ba:
2c:3c:ab:dd:35:79:e7:64:18:bc:4b:78:27:86:5c:
fa:9e:b4:f0:e9:4e:97:37:ea:d8:2b:13:54:09:72:
5b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BF:E6:23:C7:3F:5A:C7:AD:3D:3C:F9:E8:FE:B2:57:EE:DA:E3:A6
X509v3 Authority Key Identifier:
keyid:12:15:B5:AD:46:2B:C4:94:C4:32:49:31:CD:F4:30:1C:DA:01:F8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a1:40:96:ee:08:88:b7:6f:f3:3a:41:9a:6c:e6:29:97:00:
af:e8:b7:24:14:b2:21:d7:2e:98:e3:4f:55:49:5a:62:b2:bb:
94:9a:19:aa:5f:b5:ac:b4:56:5a:55:bf:b7:3b:c5:f4:61:94:
03:d5:25:29:bb:bc:1f:55:d1:77:be:b2:a9:07:ce:10:70:aa:
bd:d6:a8:db:60:1e:92:f8:d1:c6:6c:23:c2:2a:71:10:92:15:
b5:3f:d0:48:8e:34:37:a8:7b:89:1b:e6:97:e4:6f:2d:a0:2d:
f8:3d:50:0e:37:7a:8f:09:1e:e8:a9:e1:76:c5:c8:9a:9c:72:
6b:67:26:a4:f0:17:c0:5d:e1:35:17:78:43:4b:80:b2:ff:e9:
41:ab:9a:ad:d5:a0:15:a3:d7:4a:d3:03:df:e8:89:5c:db:6c:
b7:75:4f:15:4f:20:46:63:c0:d8:9b:54:fb:c6:92:6b:32:50:
21:ed:1b:3b:78:f9:b0:fa:22:bd:58:2c:1a:a0:67:57:36:d8:
46:1c:1f:32:78:42:e4:4b:ac:0c:34:f0:74:71:93:d6:c7:35:
ba:bc:41:30:f4:4f:bc:12:07:48:41:3a:94:ae:f9:4f:ae:c0:
3d:f8:59:6e:3b:8c:be:05:f2:d7:29:a3:52:47:99:7f:6c:e3:
1a:bc:87:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:37:38 2026 by rpki-client