Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
File: EHMSpQFqPNzAt-Ydx59V09Xss34.mft (raw, json)
Hash identifier: Vib3LslrYLaOX/h+IpOukQNspsYdI2KIj08gR4yMmSI=
Subject key identifier: 2F:D6:7A:2A:CF:28:04:01:59:0E:90:2E:5F:FD:88:9F:5D:62:C1:DC
Authority key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
Certificate issuer: /CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Certificate serial: 019CA94640256299458FE405018AC9A52F6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
Manifest number: 154E
Signing time: Sun 01 Mar 2026 12:01:19 +0000
Manifest this update: Sun 01 Mar 2026 12:01:19 +0000
Manifest next update: Mon 02 Mar 2026 12:01:19 +0000
Files and hashes: 1: 9EbWOWRofqpIjBa4vozEsoLxjYM.roa (hash: x7SOGLYmI9OiM+ggvSbmLAxdesreHqxj6Es4xw9IiFM=)
2: EHMSpQFqPNzAt-Ydx59V09Xss34.crl (hash: xR/v7DMWYVKI/UDu5XNstZNagqRRR9urAaQLI5qgRuc=)
3: uNs7lPFNPshEKIeKrT9kYzvj6PU.roa (hash: 1d4TVLPu2hGqSAh+/9a4WZpxJbG8fGNAEg4csKG4Azw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:40:25:62:99:45:8f:e4:05:01:8a:c9:a5:2f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Validity
Not Before: Mar 1 12:01:19 2026 GMT
Not After : Mar 2 12:01:19 2026 GMT
Subject: CN=2fd67a2acf280401590e902e5ffd889f5d62c1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b3:ef:6c:18:46:59:70:96:11:78:41:2c:e6:
48:21:41:37:f3:d1:b1:a4:a3:80:c9:dc:02:3d:a3:
71:7e:a1:d7:4b:ff:8e:75:6f:3c:6b:ac:02:f5:54:
49:a6:df:73:44:3d:e5:17:52:d7:9c:6f:fe:36:7e:
fb:97:da:b6:2e:3e:30:8a:6e:f9:1d:30:e6:63:85:
0d:a7:dc:21:47:9f:3b:3e:48:72:9c:23:2e:40:5d:
aa:c7:f2:45:ad:64:c4:54:09:70:cb:8d:9c:71:cd:
06:fa:03:1b:bd:65:8f:37:33:b7:d3:46:ad:8a:ef:
d9:06:15:dd:80:89:14:90:9b:5d:36:7b:d7:11:95:
60:51:61:c9:63:1c:62:0e:48:25:3f:36:41:22:00:
c9:1e:b8:80:96:0a:d2:d8:14:45:1a:0b:89:60:d5:
52:9f:4f:2c:33:e0:f9:68:a0:c5:88:01:ba:1d:09:
2d:47:10:ee:da:01:cb:15:3f:7c:27:be:85:96:17:
84:98:2b:24:48:52:2b:89:e8:53:ea:bc:62:75:fc:
6d:bf:7f:fb:01:60:2f:98:8e:24:a4:2f:7d:52:7a:
9f:08:7d:41:35:b4:e4:23:96:09:c3:bb:fd:b3:0e:
9d:cb:55:ce:37:e9:9b:e9:20:b8:61:cc:35:2f:34:
f9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D6:7A:2A:CF:28:04:01:59:0E:90:2E:5F:FD:88:9F:5D:62:C1:DC
X509v3 Authority Key Identifier:
keyid:10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a7:5c:e7:93:26:42:c3:37:7c:4e:d1:d5:b8:bd:76:76:00:
7d:f7:30:10:4e:55:26:6f:36:cc:71:d5:c0:40:22:8b:73:96:
58:6a:c7:c1:bc:5a:d5:f8:7f:63:3c:e5:fb:77:c7:d8:47:d7:
0a:c5:b9:0e:dd:cf:61:28:cd:f5:ee:bf:76:05:2d:32:63:7e:
c4:7d:75:73:d5:11:23:27:a9:50:64:1a:f5:f1:2e:31:34:59:
72:dc:7c:af:35:c5:bc:ce:22:c2:06:1d:e8:8d:df:ea:d2:8a:
e5:9b:93:cb:a4:9d:c4:e1:b1:0c:2a:49:50:b7:61:df:27:f1:
8c:95:7a:79:2f:cf:55:87:db:f2:f6:2b:3a:7b:fa:39:57:95:
5d:29:1d:1a:e7:cc:3b:46:07:5a:ac:b9:39:9f:03:a8:d8:ed:
0a:9c:41:eb:c9:01:3c:1e:88:b5:cf:69:5b:ef:b5:c1:e1:bb:
ed:a2:4a:d5:74:20:3b:e8:39:6b:bb:55:fc:12:6b:8c:1a:6d:
80:01:d4:db:a7:e5:7e:34:d3:dd:ff:73:b2:cf:37:7a:51:f0:
f1:cc:40:8d:22:e7:c0:4d:b2:b3:1f:5f:ca:10:1e:86:da:92:
e6:cf:2a:45:12:54:fb:b7:64:8f:21:56:de:72:e5:28:a9:48:
a0:79:26:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:11 2026 by rpki-client