Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
File: EHMSpQFqPNzAt-Ydx59V09Xss34.mft (raw, json)
Hash identifier: oNCop2UM6xrMZ2SJkb+NS4tTffBa8VJBAtuPWsNMpyw=
Subject key identifier: 60:EB:73:CC:FA:40:9C:A1:FF:9C:90:2F:36:DD:BE:F0:D0:E0:81:16
Authority key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
Certificate issuer: /CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Certificate serial: 019EBE47CB302AF68788814BEB19A60A2336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
Manifest number: 1663
Signing time: Sat 13 Jun 2026 00:00:36 +0000
Manifest this update: Sat 13 Jun 2026 00:00:36 +0000
Manifest next update: Sun 14 Jun 2026 00:00:36 +0000
Files and hashes: 1: 9EbWOWRofqpIjBa4vozEsoLxjYM.roa (hash: x7SOGLYmI9OiM+ggvSbmLAxdesreHqxj6Es4xw9IiFM=)
2: EHMSpQFqPNzAt-Ydx59V09Xss34.crl (hash: MDxAxtR56sRyrca4aTMDotfOreDxpYEcGRkk7+SEDaw=)
3: bzC7j0omLj_YNcYGEgPw6KsNGos.roa (hash: JbFBMLyqogdNayBZyhkASdXp//+KG+bIXMjX3s0pjGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:47:cb:30:2a:f6:87:88:81:4b:eb:19:a6:0a:23:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Validity
Not Before: Jun 13 00:00:36 2026 GMT
Not After : Jun 14 00:00:36 2026 GMT
Subject: CN=60eb73ccfa409ca1ff9c902f36ddbef0d0e08116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1c:ac:d6:1a:d5:ce:d3:34:9b:fa:f8:31:85:
32:cd:f5:20:15:03:87:ac:f5:e8:62:b8:9f:d0:5e:
4c:29:48:8a:cf:dd:dc:d9:64:77:9e:ff:9c:1a:9b:
d4:7a:d4:bd:06:ca:fd:bb:2b:45:fa:a3:86:08:59:
e0:19:43:49:c3:2e:0e:c2:e9:c5:f4:ce:f2:a0:74:
7b:be:55:9f:34:81:23:df:f6:9f:c5:4c:68:06:1d:
65:9e:6e:a9:57:05:9b:46:ed:70:9c:32:77:e7:a9:
fe:2d:48:83:08:47:97:bb:6f:99:5c:48:34:76:43:
0a:a9:80:94:e0:79:cb:10:d3:dc:68:81:b8:1b:5c:
44:eb:3f:10:e0:ba:52:13:96:de:c6:cc:fa:9f:76:
6a:a0:d4:2f:cf:c6:77:a0:28:61:11:d2:b0:9e:71:
52:18:3b:2b:21:bf:e4:84:87:21:4a:ec:5c:b2:d4:
a2:a7:4f:a0:57:c5:dc:9b:0b:20:17:37:01:44:ff:
3a:28:ba:db:ce:fd:06:f5:51:e3:3b:04:ed:38:fc:
db:45:29:93:05:6a:0b:bf:51:df:aa:88:2c:e1:71:
3d:6a:3c:d5:20:d4:d4:75:04:ff:9c:81:7b:19:b1:
90:60:34:ad:ce:7a:fc:48:d1:c0:31:e4:7e:be:81:
7c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EB:73:CC:FA:40:9C:A1:FF:9C:90:2F:36:DD:BE:F0:D0:E0:81:16
X509v3 Authority Key Identifier:
keyid:10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:8c:36:4d:22:60:e1:23:df:f8:69:f8:0d:96:d6:53:6f:8e:
a6:b1:a9:74:98:02:66:cc:68:9a:bf:29:e8:5c:5a:ec:ab:f5:
e9:71:04:35:f0:37:8d:10:0e:58:0d:d4:cd:cb:5c:1a:58:66:
2f:ee:aa:58:17:32:49:67:a5:52:5a:16:dd:72:ff:4b:20:02:
bf:a9:fc:fe:0b:ba:48:1e:0c:e4:55:20:cb:db:1f:38:5b:32:
ed:e3:76:bb:d4:0c:08:70:a2:50:bd:59:c8:38:7d:5d:79:0e:
a0:44:9f:03:14:16:99:1d:84:d1:a9:12:b5:1f:96:d0:02:87:
15:4b:61:4f:49:f6:76:4c:b6:5e:8a:09:2e:a1:5a:e3:fd:21:
21:73:cf:20:68:7c:dc:a5:7b:30:c1:4a:33:17:5d:07:b2:5c:
da:f8:91:1b:ad:35:24:1b:66:bc:1f:fe:fe:9b:3e:6d:0a:c7:
e2:3d:00:45:8f:90:a6:61:73:27:db:25:b0:59:12:9f:c5:57:
41:0f:96:a7:57:dc:be:9b:e0:7e:2c:7c:c8:66:8d:21:20:47:
09:f0:cc:62:b1:ca:14:54:a0:3c:57:ee:32:4d:8e:6c:18:ea:
2c:9b:96:61:20:e0:dc:a3:d6:f9:25:69:3c:57:cd:bd:02:b8:
80:bc:e3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:52:44 2026 by rpki-client