Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
File: EHMSpQFqPNzAt-Ydx59V09Xss34.mft (raw, json)
Hash identifier: XsXP7rPtNZYbAI7AJPSrQ/cB9atKUipX9VJ42r+1Lc8=
Subject key identifier: D4:66:57:EA:3E:E5:EE:A9:DF:D1:B0:7F:34:23:F1:8A:C6:5C:72:0A
Authority key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
Certificate issuer: /CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Certificate serial: 01A0C7B399192055497693AB3452A8C46D01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
Manifest number: 1771
Signing time: Tue 22 Sep 2026 06:00:31 +0000
Manifest this update: Tue 22 Sep 2026 06:00:31 +0000
Manifest next update: Wed 23 Sep 2026 06:00:31 +0000
Files and hashes: 1: 9EbWOWRofqpIjBa4vozEsoLxjYM.roa (hash: x7SOGLYmI9OiM+ggvSbmLAxdesreHqxj6Es4xw9IiFM=)
2: EHMSpQFqPNzAt-Ydx59V09Xss34.crl (hash: 7pgFgF0t/NXEkjsHxmNAY888x+lLOay0evp8vvDzAwk=)
3: bzC7j0omLj_YNcYGEgPw6KsNGos.roa (hash: JbFBMLyqogdNayBZyhkASdXp//+KG+bIXMjX3s0pjGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:99:19:20:55:49:76:93:ab:34:52:a8:c4:6d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Validity
Not Before: Sep 22 06:00:31 2026 GMT
Not After : Sep 23 06:00:31 2026 GMT
Subject: CN=d46657ea3ee5eea9dfd1b07f3423f18ac65c720a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e6:7a:cd:88:f5:e7:bb:26:75:91:0e:16:13:
6d:57:6e:1f:74:b3:d7:2d:86:7d:33:33:a2:9e:35:
f6:69:e1:be:c9:86:34:44:6a:ad:80:92:38:ac:56:
d6:4a:94:32:b2:33:74:0f:cb:7d:21:6e:f3:c6:63:
f9:42:ef:33:82:1f:59:2b:10:24:0a:43:30:92:4b:
4a:f9:44:b9:a5:f5:64:49:20:78:87:4b:07:05:a3:
48:75:a1:a4:63:a9:35:83:00:23:1d:5b:10:72:a9:
dc:c9:1a:f0:56:b1:2c:cd:40:c2:9e:f9:e4:fc:d2:
fa:4b:a7:1e:7f:bb:2a:55:c4:e6:32:48:40:6b:08:
ee:d7:88:49:a0:dd:65:da:94:50:5b:30:ef:05:b9:
6e:b9:d9:e3:6b:1a:b5:9b:0b:fd:d8:a6:9b:a1:fc:
77:70:72:6d:89:af:73:aa:cf:11:88:b8:95:a8:a4:
25:8a:ce:39:7e:49:3e:be:0c:57:50:80:ca:1a:64:
dc:2f:77:2d:b8:31:c2:12:65:22:74:62:df:53:de:
33:7a:00:65:9d:86:9b:96:7b:57:04:86:32:64:95:
e0:46:17:f4:a1:bb:f1:b6:17:e8:34:be:e5:60:e5:
9a:d8:6e:3b:d9:ac:66:bb:93:36:db:51:6a:cc:2e:
30:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:66:57:EA:3E:E5:EE:A9:DF:D1:B0:7F:34:23:F1:8A:C6:5C:72:0A
X509v3 Authority Key Identifier:
keyid:10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:92:77:b4:12:e8:70:23:b0:1c:a3:0e:da:7b:e4:1e:f6:dd:
60:35:50:c7:55:4b:35:8b:0d:a3:0a:47:81:3a:31:bb:31:62:
eb:bd:d1:95:b6:e7:6b:3f:ac:8c:ce:67:4b:6d:6c:f5:6e:2f:
26:e3:94:57:e0:45:7c:75:5e:65:3a:73:87:3f:5b:43:54:2a:
5d:3a:e0:47:cd:ec:c4:f6:51:a4:b0:b7:b6:ff:9b:fa:5a:f7:
a9:61:50:f5:ec:e5:1e:48:04:3a:ae:98:d4:c3:d3:e4:5b:53:
ec:87:12:d3:34:f5:fc:c1:44:57:36:9d:f7:d2:76:8c:53:72:
4c:8d:73:88:95:02:f8:d3:37:55:96:cb:a0:ae:ca:06:48:70:
d1:23:3e:05:3c:52:98:ba:61:f0:07:fa:33:c7:82:07:d9:6a:
7f:c4:6b:86:85:88:81:48:0b:5f:98:33:a8:2b:b7:9f:95:10:
f0:6b:d3:d9:ad:25:b3:41:90:c6:e1:fd:74:2b:e4:2b:6a:c4:
c9:5d:37:a9:21:2c:15:7f:6e:5b:a4:2e:c7:21:da:dd:0e:08:
63:b6:b2:f4:83:32:73:b9:5c:38:ff:16:91:6f:5f:49:33:68:
2e:99:81:f5:17:a7:cb:f5:2d:0f:bb:dd:4c:35:0a:17:80:cf:
23:45:85:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:30:59 2026 by rpki-client