Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
File: EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft (raw, json)
Hash identifier: sllRBl+evMYz46H4k7t3UN7OR5ebplJAFg1m+DBVSVw=
Subject key identifier: DD:E6:B3:B9:D5:A2:69:0C:64:B8:11:48:1C:36:0F:3F:09:83:08:89
Authority key identifier: 10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8
Certificate issuer: /CN=10768d39f932791007a097209b0983fe85560cb8
Certificate serial: 01A0C5C570F004A07FF87D059D1CE12EAF36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 21:00:46 +0000
Manifest this update: Mon 21 Sep 2026 21:00:46 +0000
Manifest next update: Tue 22 Sep 2026 21:00:46 +0000
Files and hashes: 1: EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl (hash: 06/J/9+M9HSBrMV68PCv91jZvG5uGD6x5nBvQuMIMo4=)
2: sqH83fgWI2QXk67gXVqCFnY0PdM.roa (hash: Fkz5KCAQSTZpnaesgT+1Nr19dyLfyU9fM4+AXXInAiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:70:f0:04:a0:7f:f8:7d:05:9d:1c:e1:2e:af:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10768d39f932791007a097209b0983fe85560cb8
Validity
Not Before: Sep 21 21:00:46 2026 GMT
Not After : Sep 22 21:00:46 2026 GMT
Subject: CN=dde6b3b9d5a2690c64b811481c360f3f09830889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ed:35:56:88:69:65:a3:a0:1e:ff:5e:cb:bc:
0f:7b:e8:74:5b:ba:10:bc:aa:b7:44:8e:f2:6d:3a:
8b:4b:69:cd:a3:06:6e:f6:f3:82:1f:77:4a:b1:fd:
0f:8e:80:91:57:7b:5d:8b:3a:f0:04:12:f1:27:19:
24:3d:a0:85:1c:cb:50:e2:71:f9:df:c7:a1:e3:06:
95:51:e7:65:ac:d7:05:37:c8:62:c0:e3:df:e8:92:
e8:16:66:82:fc:ff:c1:51:06:75:40:28:c7:f1:c5:
48:d8:6c:ce:cc:e1:0f:8d:fc:f0:59:5e:6d:44:6e:
06:9e:31:48:18:5e:82:2e:76:4f:85:7d:5f:f1:c8:
64:3f:9f:ca:f6:2d:ea:21:81:50:13:f9:7b:fd:2a:
b4:62:f6:04:d4:f7:ef:1d:49:32:68:6d:d9:ce:20:
66:4f:19:a7:7b:2f:bc:30:e5:31:f1:13:84:d1:b0:
36:16:4c:d8:42:89:6a:81:4b:52:18:8f:66:b1:91:
e6:4e:86:81:27:84:91:86:6b:53:ff:60:09:e3:be:
56:ff:85:3c:e9:6e:8d:21:5c:80:2f:4c:be:99:2e:
2a:7c:31:f2:af:c8:de:e7:e8:d4:80:e0:e7:77:b9:
d3:7b:af:db:d7:cf:40:59:71:d7:0f:bd:69:2e:94:
4f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E6:B3:B9:D5:A2:69:0C:64:B8:11:48:1C:36:0F:3F:09:83:08:89
X509v3 Authority Key Identifier:
keyid:10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c2:17:e4:fb:e9:35:45:53:3e:ab:f4:6b:83:93:c5:87:bb:
fa:3e:54:45:94:13:27:ff:23:e6:6d:46:65:20:ad:d3:4f:b9:
80:6f:be:92:40:90:30:1e:5f:37:96:b6:8e:6a:70:be:1b:54:
de:ab:bf:ef:31:d1:a0:ba:8a:45:ae:ee:a5:60:f1:f7:fb:57:
01:ee:b5:ff:7d:1f:18:98:ee:6d:45:64:7c:e3:cd:99:64:5a:
7f:4a:0d:d9:98:fd:91:0d:53:99:b1:b5:46:b4:a2:87:fe:e6:
ae:82:68:e8:be:30:6a:97:0c:4d:9b:9c:f3:85:0a:c2:ec:66:
b2:29:eb:bd:88:eb:d5:5d:cc:66:a4:61:9e:f6:7d:3d:f7:2d:
40:e8:6b:1a:29:53:14:71:7a:7a:29:cf:db:ef:52:72:b0:b2:
b0:23:4e:40:3d:c4:b9:a2:de:83:f0:73:6d:57:df:ad:83:ab:
eb:f3:79:18:a7:59:4c:39:46:61:e3:be:f5:01:f3:95:8a:e6:
c9:8d:50:3d:d4:b7:5d:43:08:88:e4:1a:38:30:33:09:9d:b2:
43:8f:cc:10:5c:95:81:16:3f:b1:61:20:34:4e:b4:86:57:29:
51:bd:ec:be:59:a4:f0:b8:39:6f:72:f3:74:f3:17:5c:9e:27:
dd:93:a4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:15:10 2026 by rpki-client