Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
File: EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft (raw, json)
Hash identifier: b21/MGqbjww3uXjwuA0rfH+r7yQ9/qq4ae9fZUKrlEg=
Subject key identifier: 7F:3E:00:F8:A0:84:36:C3:C1:FE:62:81:69:7A:4B:08:4C:54:3F:4A
Authority key identifier: 10:7A:5A:F1:96:B8:A0:EA:96:0C:28:F6:B3:E7:52:91:C7:E8:61:CD
Certificate issuer: /CN=107a5af196b8a0ea960c28f6b3e75291c7e861cd
Certificate serial: 019EC14899EBFCDAF12324691A435D683EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 14:00:21 +0000
Manifest this update: Sat 13 Jun 2026 14:00:21 +0000
Manifest next update: Sun 14 Jun 2026 14:00:21 +0000
Files and hashes: 1: B_eufKACcye9RNL9zWFuL3O0F2Q.roa (hash: u51nAFunJxaWbsLgaW5TM9elEVLvvbw93zNAlf1WyzQ=)
2: EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl (hash: SJkhTWc/Jf7wYH1ryZq+gNwCMqyhYcUdTLX0i0zripI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:99:eb:fc:da:f1:23:24:69:1a:43:5d:68:3e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107a5af196b8a0ea960c28f6b3e75291c7e861cd
Validity
Not Before: Jun 13 14:00:21 2026 GMT
Not After : Jun 14 14:00:21 2026 GMT
Subject: CN=7f3e00f8a08436c3c1fe6281697a4b084c543f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:80:aa:20:96:e4:34:4e:9c:56:db:fe:77:b5:
77:2d:50:c7:25:ec:cb:51:05:1c:32:e0:b1:c9:6a:
39:a9:31:a1:2a:66:39:d4:22:50:91:93:ef:62:9c:
7b:12:43:e2:14:96:3b:2a:5e:07:2f:d0:b8:04:f9:
81:52:76:da:71:df:7b:12:e7:eb:78:0a:2a:1d:54:
86:65:33:ae:83:9b:12:3b:c7:c4:10:e4:66:d1:6a:
02:48:91:4a:97:c5:de:d3:ab:4b:67:e1:02:0a:b5:
bc:48:8e:f0:77:09:6d:a1:17:cc:ab:b9:b1:a0:87:
96:14:b9:1f:f2:19:45:37:63:12:23:d5:e8:f4:68:
2b:bf:47:1c:16:5f:9f:b9:80:ff:94:a8:de:0c:88:
13:b6:90:7b:cd:e4:7b:88:40:05:0f:dc:44:0e:f4:
84:e9:e4:c6:ca:d4:56:60:b7:12:fd:83:14:38:e6:
e7:5e:0f:a3:09:0f:84:b9:b8:47:b1:78:41:d3:2f:
ce:f2:4c:60:25:0a:d4:32:27:6e:af:7f:07:6a:5a:
7a:99:03:43:2d:87:35:25:96:ba:ea:04:e6:94:91:
58:71:75:82:49:af:a3:0b:16:e0:f2:c8:30:c8:52:
d8:f3:5d:b6:3b:80:2f:b0:8d:7a:f7:31:ef:4f:06:
46:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3E:00:F8:A0:84:36:C3:C1:FE:62:81:69:7A:4B:08:4C:54:3F:4A
X509v3 Authority Key Identifier:
keyid:10:7A:5A:F1:96:B8:A0:EA:96:0C:28:F6:B3:E7:52:91:C7:E8:61:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c8:02:59:a0:62:f9:fe:1e:91:57:32:ed:4e:be:79:eb:4c:
b4:f8:73:9a:df:72:c3:45:b8:4b:c7:66:de:01:09:1a:ae:c4:
2e:51:40:2f:fe:8b:89:5c:15:5a:cc:62:18:27:41:e6:b1:0f:
d4:5d:47:76:65:eb:c4:4d:f9:23:41:d9:e1:6f:71:76:4c:77:
9b:e8:91:15:38:5e:42:ea:4d:e8:6c:54:07:68:60:c2:28:9a:
10:48:d6:e6:c7:d0:43:9e:28:4b:12:ce:f9:3e:b8:d3:72:c5:
26:2e:72:08:c0:5a:81:fc:6f:d8:48:a8:a0:e0:61:d8:28:20:
4d:11:57:0c:ee:db:e8:17:ea:35:20:05:c7:5a:8e:71:48:8f:
97:24:5d:6f:67:41:26:04:df:84:6b:78:2d:81:e4:96:84:12:
fa:53:b6:f3:ae:ed:7c:23:1d:82:5a:ca:9d:68:f6:67:d5:29:
cb:d3:4d:40:3a:c9:d0:6e:ca:65:9c:1d:64:b0:11:64:6e:df:
50:da:24:6a:2f:cc:00:d8:87:9c:bc:6f:32:8f:4a:d6:5d:4f:
4e:83:d2:c3:1e:44:eb:7f:57:ab:07:9a:c5:69:a5:45:e8:e0:
e0:17:32:5a:5b:33:ed:84:f6:09:80:ec:07:d9:2f:28:48:fb:
07:f2:ea:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:37:28 2026 by rpki-client