Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft
File: EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft (raw, json)
Hash identifier: QaxrQ6BwIzi8UemGfN4uAkoEo1aYCjzG9HdvRBLL+zI=
Subject key identifier: F3:21:B2:5C:24:00:A2:93:7F:A2:BC:A7:9B:B4:70:1E:0E:3D:4C:69
Authority key identifier: 12:15:B5:AD:46:2B:C4:94:C4:32:49:31:CD:F4:30:1C:DA:01:F8:0C
Certificate issuer: /CN=1215b5ad462bc494c4324931cdf4301cda01f80c
Certificate serial: 019FA8994674DB7E427292A9CC382969BCC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:45 +0000
Manifest this update: Tue 28 Jul 2026 12:00:45 +0000
Manifest next update: Wed 29 Jul 2026 12:00:45 +0000
Files and hashes: 1: EhW1rUYrxJTEMkkxzfQwHNoB-Aw.crl (hash: 1pwthPx+pJXWGLE6HSxjxefmVPtDEjU9x370cBtdKhU=)
2: QSDL9aVFEsgN1pmAwftAE68ZkLE.roa (hash: 9l+ETcbI4z1a4gUBvTyDHkfAhvOVwGBe6uOyh4bKOpA=)
3: SfPsnTAjEz7s0IJwXQXEqowgAgg.roa (hash: 2beiFCnRQDFsR7VsCIm5A7EYCFJ0xA+jfhamHFduadg=)
4: cB_m9up9hazlPAM7xwJmzGz_w9k.roa (hash: SLDL/2B9grLRt23aK3KXLfe0T0kdFf+HkoVMaYlOQZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:46:74:db:7e:42:72:92:a9:cc:38:29:69:bc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1215b5ad462bc494c4324931cdf4301cda01f80c
Validity
Not Before: Jul 28 12:00:45 2026 GMT
Not After : Jul 29 12:00:45 2026 GMT
Subject: CN=f321b25c2400a2937fa2bca79bb4701e0e3d4c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:88:7b:bf:d1:ed:07:e6:ee:02:67:af:6b:01:
a5:21:a7:a9:72:fb:24:52:08:1f:7a:3e:6a:5a:c3:
67:dd:25:bc:95:4d:18:7e:e9:fc:d5:37:d8:f1:c9:
6f:b6:97:67:8c:89:52:bc:f5:00:1d:02:e8:83:0e:
8f:63:a0:6c:54:d8:5b:45:b6:18:d5:9f:bd:ad:4e:
2b:cb:bc:bf:4e:55:19:2a:29:9e:39:9b:60:fc:5e:
50:7c:d2:0e:a9:cc:1b:c6:01:bc:a3:3f:47:3b:22:
6b:dc:5d:d1:cf:bc:af:7a:88:2d:19:93:f8:f3:c6:
6e:f9:61:50:92:a0:a7:7a:91:1b:15:45:03:2e:ba:
8b:50:b8:77:9c:86:90:1b:04:54:2e:0d:0a:14:44:
c3:ee:23:d0:89:ff:ad:00:e2:fa:c9:a8:95:32:b3:
cc:8b:69:fa:93:f2:e5:a9:9d:e8:af:e5:3c:33:48:
30:bf:b1:66:14:aa:d0:1d:25:81:bb:ea:51:90:29:
95:02:45:c0:70:57:62:9c:23:56:bb:fb:96:49:d0:
5d:8a:8b:32:1b:e1:30:d3:89:d7:03:7a:60:1c:a1:
9b:54:c0:c7:db:d8:5a:c9:4f:e0:00:a4:9f:14:86:
70:f6:84:ac:76:7d:e5:16:40:1c:39:f9:87:8e:27:
95:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:21:B2:5C:24:00:A2:93:7F:A2:BC:A7:9B:B4:70:1E:0E:3D:4C:69
X509v3 Authority Key Identifier:
keyid:12:15:B5:AD:46:2B:C4:94:C4:32:49:31:CD:F4:30:1C:DA:01:F8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:85:94:bf:b0:36:85:32:b3:12:cb:0a:86:78:8c:9f:ca:5a:
b8:f1:7f:1a:29:33:fc:e6:73:12:e5:cd:25:3b:22:c2:bd:3c:
01:6f:4c:05:00:d7:19:e7:ba:df:b5:f4:26:3d:68:ee:38:d4:
8f:88:5e:67:30:bb:6e:45:66:00:be:2b:00:ec:2c:a2:50:22:
43:cf:b9:12:25:5a:4c:8e:4b:4d:25:45:c8:28:03:4f:34:8c:
da:61:11:d4:9d:95:b3:75:52:6d:a3:cb:75:69:aa:63:d3:19:
b9:5c:12:e7:12:1f:8b:a0:53:5e:53:04:c8:52:73:05:04:d5:
d3:19:2c:fa:de:3e:80:a6:ac:e9:18:ca:1c:13:ea:2c:a7:e5:
cb:5b:6a:6b:bf:fc:e8:89:3a:12:a1:c4:b8:e5:3a:7a:7a:09:
dd:83:5d:21:f8:54:35:a3:d9:0f:8c:e4:81:64:5b:ea:88:4a:
4c:9b:27:2d:ad:a8:4c:97:42:01:a5:51:0b:d7:75:f7:a3:b4:
93:88:c7:fe:22:1f:ea:d5:92:0e:50:e3:37:f7:a0:0e:0d:90:
fb:96:2d:0a:0e:43:23:64:8d:99:c7:00:21:9a:35:7a:42:be:
7f:ba:31:49:f7:df:9f:68:1b:84:51:61:01:7d:46:6d:81:7c:
b5:db:86:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:36:52 2026 by rpki-client