Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
File: EHTblkAv9c8YdWRWDqjxPu61_-s.mft (raw, json)
Hash identifier: 7HJ1P4jHxzdisifit9zKdO6yUW17Z6Qr0x/UF+0rULc=
Subject key identifier: 4D:68:7E:53:72:B7:77:4E:24:58:C8:F4:2E:E6:13:2D:17:CF:02:07
Authority key identifier: 10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
Certificate issuer: /CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Certificate serial: 019CABD9EFF1AB7B08FB3CAECFB0547C9470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
Manifest number: 1888
Signing time: Mon 02 Mar 2026 00:01:52 +0000
Manifest this update: Mon 02 Mar 2026 00:01:52 +0000
Manifest next update: Tue 03 Mar 2026 00:01:52 +0000
Files and hashes: 1: EHTblkAv9c8YdWRWDqjxPu61_-s.crl (hash: nd6RcIVwPebDh4CB0ZxSRlEyibdyIgqAZMCIpjDbC1g=)
2: oGSX6Be2A4gMsymfO3IeIELxVGc.roa (hash: 9nynO0eaDCEM38Kekr3tOs/yAPJlXITpxT9ftUpbs/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:ef:f1:ab:7b:08:fb:3c:ae:cf:b0:54:7c:94:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Validity
Not Before: Mar 2 00:01:52 2026 GMT
Not After : Mar 3 00:01:52 2026 GMT
Subject: CN=4d687e5372b7774e2458c8f42ee6132d17cf0207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f2:41:1a:85:fe:33:c2:b3:e7:d6:f7:a4:3f:
68:91:8f:7a:55:9f:7f:88:bf:c2:1c:96:e5:25:b2:
b6:0d:ca:6e:20:25:ba:e5:44:c7:1e:67:dd:6e:43:
4b:76:b8:c2:b3:23:ea:c8:83:27:e3:d7:98:62:39:
5e:22:7e:de:fc:e7:02:81:f2:74:d9:5f:c7:4f:70:
e4:bc:a5:bb:16:8f:44:9a:c4:80:53:49:d9:dd:80:
cf:fa:11:f1:fe:f6:ed:8f:4f:69:c8:2f:55:c8:d8:
fa:a4:ee:a4:9b:72:60:34:b9:c9:ff:f0:b0:e3:d1:
15:e8:e3:8c:b9:d9:52:f3:68:f2:f4:0a:d0:8d:c4:
a2:18:e4:5e:da:c6:44:d5:40:94:07:6a:5b:9d:2d:
b5:ea:dc:51:cd:f1:79:f3:4f:7a:0a:1b:61:ff:de:
64:b4:57:aa:63:14:83:11:a8:41:ff:f7:7c:4e:87:
4d:8d:44:04:64:89:94:fc:2c:79:91:96:0a:63:0a:
2c:a8:39:ed:b1:c1:fb:45:1b:a9:08:d1:7c:2e:1b:
ca:53:3c:63:57:47:a8:d3:4e:d5:c1:e1:f9:fb:ed:
f8:40:31:a6:d4:ae:df:ec:ad:e5:d8:ee:4a:3d:0f:
80:f4:73:10:29:1f:81:e5:4b:00:0b:4a:58:ea:ee:
18:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:68:7E:53:72:B7:77:4E:24:58:C8:F4:2E:E6:13:2D:17:CF:02:07
X509v3 Authority Key Identifier:
keyid:10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:4e:f8:63:73:24:9f:d0:08:ad:e1:d7:42:d0:78:dd:bf:06:
9a:7d:8f:7c:ae:8b:4f:86:4a:af:0c:37:1e:dd:bc:1e:eb:36:
2d:bb:38:ec:c6:26:49:2f:bf:b1:c3:06:f4:fb:5d:a1:97:8b:
95:52:fd:a6:e9:37:99:98:e9:41:ee:24:67:53:a6:01:62:71:
12:0d:76:35:94:ff:9c:7b:d9:d7:ec:2a:90:5a:29:90:26:74:
34:78:4d:f6:18:98:66:29:d0:a6:07:1f:83:de:c7:ae:1c:70:
6b:24:f4:fc:3c:f7:ad:83:b5:10:40:47:be:a4:d6:98:cf:06:
63:3d:25:85:bb:22:46:70:79:ea:c7:95:1b:df:b7:cf:d3:d8:
ad:91:9e:6a:3d:c7:39:8b:3c:92:72:43:c5:5b:30:f9:98:c8:
e4:d2:61:a5:07:8f:52:83:62:90:ef:37:fb:58:d9:b4:7c:24:
e8:07:47:1c:ec:26:f3:21:35:60:7c:d7:95:a9:fc:d3:9b:ea:
fb:65:60:ec:1f:60:8b:a2:5d:51:2f:e5:1b:37:bf:d3:08:0e:
bb:39:24:4b:0d:70:9d:ad:94:36:fc:ec:f8:3f:93:07:0c:ed:
c8:fd:6b:6f:3d:42:8c:d8:2e:cd:6e:4d:5e:b4:5c:5f:df:32:
e1:df:9b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:47 2026 by rpki-client