Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
File: EHMSpQFqPNzAt-Ydx59V09Xss34.mft (raw, json)
Hash identifier: Nueoa3nflw3tiCIjKxdBNha3mv7Xzt0cAXj3ao6RiVM=
Subject key identifier: 6B:46:E2:D9:50:A3:80:A4:94:29:8B:2B:E0:6C:97:87:88:CE:25:27
Authority key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
Certificate issuer: /CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Certificate serial: 019D98BDE513FF8CA1F069CB40DAEEF1B59C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
Manifest number: 15CB
Signing time: Fri 17 Apr 2026 00:01:14 +0000
Manifest this update: Fri 17 Apr 2026 00:01:14 +0000
Manifest next update: Sat 18 Apr 2026 00:01:14 +0000
Files and hashes: 1: 9EbWOWRofqpIjBa4vozEsoLxjYM.roa (hash: x7SOGLYmI9OiM+ggvSbmLAxdesreHqxj6Es4xw9IiFM=)
2: EHMSpQFqPNzAt-Ydx59V09Xss34.crl (hash: uib5A1Gw1n5cNa6kz193cC8A9C4KncN12yudQnUg77U=)
3: bzC7j0omLj_YNcYGEgPw6KsNGos.roa (hash: JbFBMLyqogdNayBZyhkASdXp//+KG+bIXMjX3s0pjGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:e5:13:ff:8c:a1:f0:69:cb:40:da:ee:f1:b5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Validity
Not Before: Apr 17 00:01:14 2026 GMT
Not After : Apr 18 00:01:14 2026 GMT
Subject: CN=6b46e2d950a380a494298b2be06c978788ce2527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:73:64:7d:26:1c:c5:09:f3:40:c1:6c:ed:f1:
73:ef:8b:de:37:4e:83:13:a4:6f:7b:a0:84:bd:8d:
e7:cb:0c:c2:95:ee:0e:0f:a7:06:6d:71:19:2b:46:
34:13:cb:40:1b:4a:f4:b4:73:39:c4:82:0c:b0:cd:
6b:ff:57:cf:48:c7:0c:c6:fc:67:5f:53:17:05:90:
ce:04:bc:46:7a:e6:2e:ec:1e:67:e4:c7:24:a5:ae:
9b:d7:08:c1:1b:f5:5b:6b:97:55:26:f1:28:a0:d3:
3f:29:90:ef:54:0b:02:32:17:82:88:f8:1a:e4:3a:
d8:a7:8f:e6:7f:36:99:97:6f:65:7e:97:90:7d:bc:
90:85:ef:81:e6:eb:98:30:96:09:54:02:80:87:28:
a0:f1:9c:59:50:3e:d6:2e:41:c8:fa:e2:f9:3a:05:
30:06:c1:56:f6:b3:79:1e:1c:80:30:18:4f:3b:bd:
ae:b9:82:b9:1f:1f:45:21:75:aa:8f:cf:03:34:d5:
d7:1d:0e:6c:5c:63:38:fe:c0:7c:3a:33:8d:7c:94:
5b:59:2a:f3:e2:86:0f:07:96:2f:82:10:77:39:9a:
0a:b0:5d:5c:43:ed:c1:7e:62:f9:f5:fe:45:e7:4f:
e3:df:b4:d6:fe:6e:5b:2b:2c:82:6a:ba:41:c4:f1:
9b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:46:E2:D9:50:A3:80:A4:94:29:8B:2B:E0:6C:97:87:88:CE:25:27
X509v3 Authority Key Identifier:
keyid:10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:7c:e8:3e:95:e2:ca:8a:cb:ce:23:25:4a:bc:0f:08:57:38:
c3:90:c8:57:35:0a:91:ef:79:0d:a7:85:f0:8c:69:c5:cd:e2:
81:44:1e:7f:15:a7:87:8b:01:a2:50:d5:86:b1:53:da:d1:f0:
37:3c:38:0b:65:96:94:0b:48:47:ba:2c:02:0c:bd:29:66:f1:
59:40:2c:2f:eb:65:70:8c:14:b3:50:ca:c0:cf:00:a2:20:33:
a2:b2:62:90:23:93:6e:10:9b:be:0c:f0:30:cd:5d:c3:8e:68:
31:cb:ca:ac:b1:09:00:e2:1e:41:14:90:d0:46:88:3a:4c:34:
27:99:4c:5f:44:e6:88:e6:4c:f2:0a:32:53:8d:fd:78:2a:d8:
64:9c:58:71:0f:5c:37:4b:fd:e5:5b:1e:a1:74:15:67:b3:1a:
da:3d:48:03:88:90:b2:1d:03:73:e0:ea:70:cc:bc:e1:a0:e9:
6f:5a:4a:fa:df:6f:41:a6:da:08:62:a3:b6:5a:19:16:64:5e:
c2:77:20:c3:a4:ff:51:f3:7c:a2:9f:b0:14:91:6c:a7:10:c5:
4f:43:ba:54:a7:e9:8a:4a:7b:e9:16:06:80:4b:cf:5a:bf:7b:
7d:c8:1c:7d:1a:ec:cd:63:e2:34:65:87:60:b7:8c:66:a3:88:
61:60:87:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:53 2026 by rpki-client