Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
File: EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft (raw, json)
Hash identifier: G1k5Gede7MsWd8Qg8p3nLvR0pgYBXU2uF0h6eQIwD3w=
Subject key identifier: 9C:CD:B8:F3:4C:2E:40:7D:8B:73:CE:33:6E:AE:90:3A:96:B9:59:D6
Authority key identifier: 10:7A:5A:F1:96:B8:A0:EA:96:0C:28:F6:B3:E7:52:91:C7:E8:61:CD
Certificate issuer: /CN=107a5af196b8a0ea960c28f6b3e75291c7e861cd
Certificate serial: 019D9BBEE01A90388744CE48077F01CB7C40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 14:01:10 +0000
Manifest this update: Fri 17 Apr 2026 14:01:10 +0000
Manifest next update: Sat 18 Apr 2026 14:01:10 +0000
Files and hashes: 1: B_eufKACcye9RNL9zWFuL3O0F2Q.roa (hash: u51nAFunJxaWbsLgaW5TM9elEVLvvbw93zNAlf1WyzQ=)
2: EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl (hash: mlEKrCEIzIJd6yhVi8ZgeNb7g1vb0ztBWvlwdCyjqJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:e0:1a:90:38:87:44:ce:48:07:7f:01:cb:7c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107a5af196b8a0ea960c28f6b3e75291c7e861cd
Validity
Not Before: Apr 17 14:01:10 2026 GMT
Not After : Apr 18 14:01:10 2026 GMT
Subject: CN=9ccdb8f34c2e407d8b73ce336eae903a96b959d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:8d:65:fa:b1:74:f0:c8:f6:71:b8:b8:14:
db:da:bd:49:7e:4e:75:12:49:03:a0:6d:59:4b:e2:
ec:58:0b:76:f0:d9:80:49:46:91:10:94:c5:18:ae:
0d:0b:57:e9:a3:2f:90:a8:dc:a8:e4:31:99:a3:f1:
8d:b3:40:2a:d7:99:79:42:bd:7f:90:b8:bc:fc:e6:
a2:3b:b1:69:cc:96:31:af:18:e5:ef:60:db:15:dd:
f1:be:f8:b5:59:25:f1:fe:59:e9:7d:4d:78:04:70:
76:99:65:63:25:5d:d6:80:51:fb:3b:dc:6b:ca:cd:
d7:0a:74:6d:8a:18:67:04:3b:05:34:f4:92:94:fe:
89:0e:5b:da:53:07:98:06:d5:80:fa:18:96:bb:3d:
1e:e7:b5:ba:da:9b:17:eb:ca:a0:af:b3:22:e7:19:
06:7a:11:2b:e7:65:f5:7c:2e:d5:a6:3f:70:88:fc:
86:9e:f2:0f:7b:4d:60:58:c9:01:36:eb:8f:39:fc:
16:95:5a:7f:ff:6a:26:36:47:25:fe:e8:7c:e5:fa:
b5:bb:57:10:11:7c:a6:5a:46:3e:3b:3f:f8:22:c5:
80:5f:f7:24:f9:3c:04:a9:4a:75:06:04:ea:4e:62:
07:c3:33:e4:5a:a0:b2:d2:a2:5f:e7:6c:7b:14:22:
25:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CD:B8:F3:4C:2E:40:7D:8B:73:CE:33:6E:AE:90:3A:96:B9:59:D6
X509v3 Authority Key Identifier:
keyid:10:7A:5A:F1:96:B8:A0:EA:96:0C:28:F6:B3:E7:52:91:C7:E8:61:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:4d:61:cf:2e:55:2d:5d:73:ae:fd:f4:36:2c:d4:56:f0:6b:
b5:a0:da:63:ce:75:5a:c0:a8:9d:a1:3e:a6:d9:6b:57:a7:01:
75:1c:ae:03:3c:cc:50:78:2d:7d:22:41:f7:23:53:5d:d6:04:
ee:ff:7b:87:81:46:87:1f:ed:1a:c1:0f:66:6c:5d:84:1e:96:
86:fb:17:af:56:3d:65:d6:dd:2c:6b:18:d1:e9:bd:74:05:f7:
fb:b8:0c:c3:be:9c:74:7d:9d:2d:84:44:11:3f:00:05:f1:d8:
a6:91:15:b8:d9:26:af:e9:75:20:98:4f:51:cc:e9:18:e8:e0:
89:f9:33:6f:3f:37:5c:01:95:d8:8e:00:f0:0d:a1:6c:36:5e:
42:5f:d7:80:60:1d:3c:8a:fd:f3:7c:dd:9b:95:2e:e2:e2:84:
34:2f:cc:70:df:33:c9:95:6b:2b:7e:e1:ea:f9:5d:f0:e1:6f:
9f:7c:0b:62:62:df:71:56:8d:e8:b7:f8:8e:dd:08:51:f7:a8:
80:65:b4:cd:4d:2d:4c:dc:33:0d:44:ae:d6:e8:1c:40:03:6c:
53:5c:ca:2a:75:64:fd:c0:98:c8:3f:be:fc:e0:8f:6d:e8:26:
6b:95:a2:31:95:73:88:3c:09:11:c7:b3:9c:eb:0b:93:df:a4:
e4:88:45:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:47:12 2026 by rpki-client