Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
File: EHTblkAv9c8YdWRWDqjxPu61_-s.mft (raw, json)
Hash identifier: GZn8tPpq4fJ85jX8qjHl7CLF9vkA9akTQMiLcIcFMaM=
Subject key identifier: D3:56:35:23:4B:23:48:E6:16:7C:42:CA:1D:EA:49:4A:1D:5B:36:55
Authority key identifier: 10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
Certificate issuer: /CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Certificate serial: 01A0C85947C0996029C1042A2506B29FEF1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
Manifest number: 1AA9
Signing time: Tue 22 Sep 2026 09:01:29 +0000
Manifest this update: Tue 22 Sep 2026 09:01:29 +0000
Manifest next update: Wed 23 Sep 2026 09:01:29 +0000
Files and hashes: 1: EHTblkAv9c8YdWRWDqjxPu61_-s.crl (hash: 56CefV6lmyFSxQgnTXRIRZzT3s4vj+LZwNQTdB4lWD4=)
2: oGSX6Be2A4gMsymfO3IeIELxVGc.roa (hash: 9nynO0eaDCEM38Kekr3tOs/yAPJlXITpxT9ftUpbs/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:59:47:c0:99:60:29:c1:04:2a:25:06:b2:9f:ef:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Validity
Not Before: Sep 22 09:01:29 2026 GMT
Not After : Sep 23 09:01:29 2026 GMT
Subject: CN=d35635234b2348e6167c42ca1dea494a1d5b3655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cc:b5:c0:ff:76:94:87:04:5d:1e:88:f2:d9:
f6:63:52:e6:e6:7e:00:af:6b:ac:72:94:31:85:03:
f8:ce:58:40:2b:08:42:cc:68:b0:06:3d:96:6c:d5:
5d:2c:4d:f3:5e:5b:09:b8:02:47:97:cf:d9:dd:49:
04:5f:dc:b4:da:42:1e:28:15:56:88:94:da:ae:7a:
25:9f:4a:8b:f3:cb:26:1e:67:c8:2b:27:81:ca:f8:
16:c4:d8:8f:16:74:7f:22:0c:31:06:57:d0:91:33:
53:8d:14:7c:cd:2a:66:67:c0:fb:ef:2e:ae:e2:e8:
1a:22:40:5f:6e:e6:9d:34:5a:e6:9d:1b:9a:b8:fe:
3e:09:f7:d1:6e:4e:d6:0b:e6:c1:aa:d0:e5:96:25:
d2:86:6d:30:28:6f:47:fe:42:9d:8c:f7:2d:3f:41:
4e:ce:1b:ca:16:fd:54:24:a1:4d:8e:fd:53:de:14:
dc:7f:59:3e:c0:7b:41:1e:fb:3a:0a:c9:3c:47:3b:
f6:8e:60:c0:f1:c3:05:54:2d:7d:d6:81:b6:44:23:
1f:8d:ea:8a:5f:f3:f4:30:6c:cd:db:c8:9c:0e:5e:
cd:6d:de:3a:76:bd:3c:b4:3b:9c:60:48:75:9c:6e:
d2:5d:41:c9:26:fa:fb:7c:dc:95:8e:ba:4c:fc:ae:
2e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:56:35:23:4B:23:48:E6:16:7C:42:CA:1D:EA:49:4A:1D:5B:36:55
X509v3 Authority Key Identifier:
keyid:10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ed:a3:32:0f:52:6d:a8:2b:df:e9:a9:6a:f0:0d:55:d4:de:
47:87:47:7e:84:dc:cd:e1:17:d2:d0:19:d8:66:6f:4c:af:e3:
2d:58:c8:f5:7d:41:1c:a5:6a:0f:9a:42:0d:e6:da:33:47:56:
f1:1e:b6:64:79:e6:ba:8a:31:53:0d:7d:df:86:bc:12:94:e7:
83:94:72:72:e0:cc:56:da:0c:1e:c8:db:63:2b:7c:c4:75:fc:
b7:04:75:66:a4:64:32:59:68:07:e9:a6:16:c5:c3:bc:13:20:
3c:73:6f:7b:17:c0:f9:f3:27:36:e5:f5:ab:ee:e6:dd:aa:a0:
01:94:d4:c9:75:8e:4f:e6:de:ea:a0:a4:17:1a:60:c3:eb:6f:
71:64:db:5f:e3:be:e6:f4:51:e4:9b:eb:c9:01:b1:f9:d5:88:
16:0f:65:1f:52:f1:c0:0c:1c:dd:88:8d:fd:9d:d1:09:f3:66:
c0:43:e1:bd:3d:70:87:de:c2:a2:0c:9d:7c:93:c3:c0:2c:65:
2e:b1:7a:ae:28:8f:46:cb:ab:19:4a:c6:ed:cf:8b:e7:90:ad:
22:08:96:9f:38:ee:a9:4b:60:7f:21:65:77:19:46:eb:3c:71:
d2:66:c6:14:20:2e:ea:61:78:14:a2:30:46:ff:0e:1c:2a:dc:
9e:f6:25:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:54:14 2026 by rpki-client