Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
File: EHMSpQFqPNzAt-Ydx59V09Xss34.mft (raw, json)
Hash identifier: P+GXGBsO3AWN5IzUJTACQc4s4J+J4WeDgOS/ABToRXg=
Subject key identifier: 19:3C:D1:1E:15:C3:37:B2:27:C1:0B:BB:79:FD:2A:2C:31:DA:14:53
Authority key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
Certificate issuer: /CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Certificate serial: 019FA7F455C57906B332C08352E96C072B18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
Manifest number: 16DC
Signing time: Tue 28 Jul 2026 09:00:35 +0000
Manifest this update: Tue 28 Jul 2026 09:00:35 +0000
Manifest next update: Wed 29 Jul 2026 09:00:35 +0000
Files and hashes: 1: 9EbWOWRofqpIjBa4vozEsoLxjYM.roa (hash: x7SOGLYmI9OiM+ggvSbmLAxdesreHqxj6Es4xw9IiFM=)
2: EHMSpQFqPNzAt-Ydx59V09Xss34.crl (hash: g5YHraSSVNoyXc1banxuxLtWyKirWEyRBMnNaIiJUUw=)
3: bzC7j0omLj_YNcYGEgPw6KsNGos.roa (hash: JbFBMLyqogdNayBZyhkASdXp//+KG+bIXMjX3s0pjGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f4:55:c5:79:06:b3:32:c0:83:52:e9:6c:07:2b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Validity
Not Before: Jul 28 09:00:35 2026 GMT
Not After : Jul 29 09:00:35 2026 GMT
Subject: CN=193cd11e15c337b227c10bbb79fd2a2c31da1453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4d:4c:e4:02:b6:e3:41:a3:f6:ee:14:41:05:
ec:ea:fe:cb:3a:d7:f5:0d:7e:27:fe:a9:c4:2b:37:
b5:e7:a5:61:d0:3b:76:d7:76:6b:b1:a9:e3:54:bf:
ca:68:74:87:36:f4:e6:93:cc:03:b8:79:d8:c0:ae:
4d:47:d9:93:64:57:42:1c:f9:55:77:4b:2f:27:fc:
dc:3a:de:28:56:4a:d9:ea:62:06:c2:6f:95:68:e3:
b3:22:b7:85:96:e3:45:cf:ff:e4:ca:4a:28:e0:70:
98:04:e9:10:cd:f2:57:7a:23:e6:b5:a8:3d:3c:4e:
67:70:a5:5f:67:eb:32:92:5f:a7:a2:2d:5b:00:3c:
31:b0:a0:dd:dc:5d:bd:78:e4:83:0f:48:18:9a:0c:
8c:4b:0c:c4:01:24:72:35:10:e6:ae:59:92:e8:62:
8b:96:0e:30:58:28:5a:a6:74:1c:6a:49:07:27:cd:
c0:ad:5e:58:47:f4:c6:18:1f:2a:c8:48:fa:2c:72:
e1:f8:8b:9d:1f:ea:a4:00:a6:7f:92:b0:07:1f:a5:
40:aa:93:b9:54:3b:57:3e:ff:69:71:f0:ba:0b:11:
2f:7a:07:72:d9:dd:4d:aa:78:be:06:07:b0:54:e1:
c0:b8:eb:a6:f0:f7:b3:73:29:1d:ef:39:90:6c:43:
aa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3C:D1:1E:15:C3:37:B2:27:C1:0B:BB:79:FD:2A:2C:31:DA:14:53
X509v3 Authority Key Identifier:
keyid:10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:7e:49:6c:5a:09:8c:0d:f9:b2:e6:db:4d:dc:e8:1f:a2:ab:
c1:e3:41:9b:72:37:75:ae:76:6e:64:ed:e9:1e:05:6f:46:7c:
2b:6c:d2:7b:73:ae:88:9e:75:ef:46:fa:5e:d3:39:74:6f:bc:
9e:50:d1:02:44:c0:8a:bf:b5:4f:2a:d7:a3:0d:07:bd:98:3e:
2d:40:a8:e9:5b:a8:5d:b1:b7:e8:d7:ce:6f:87:d6:ee:40:16:
e3:3b:d9:03:f7:3f:0c:2e:fb:b5:19:a6:b9:4f:59:4d:ca:7f:
24:03:d9:a4:de:91:cd:77:47:30:4a:6e:24:4b:b1:2d:af:3d:
27:36:82:a7:f2:fa:ac:5e:0f:3b:ae:87:98:b0:60:3c:c5:02:
10:4a:87:c3:e0:fd:b8:f7:00:da:54:df:3d:51:8f:b3:18:c7:
56:08:ef:58:b5:d2:b4:35:5e:c4:ef:58:fa:4e:d6:9f:58:58:
4f:f1:ba:de:1d:62:f9:35:20:37:02:3d:60:7a:a8:e5:cd:02:
3d:db:ad:07:f9:51:d1:01:70:84:c2:82:5f:58:94:22:a1:48:
2a:b5:ba:74:67:04:c9:7c:29:ef:cf:4b:8a:12:ce:ab:b7:29:
07:e1:83:54:3d:25:b2:2b:16:28:8c:c5:1e:2f:74:39:24:1c:
3f:1e:47:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:46 2026 by rpki-client