Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
File: EHTblkAv9c8YdWRWDqjxPu61_-s.mft (raw, json)
Hash identifier: piFC8akHDdXmOBCIOmCgvd9ISSUYtjLz4+w2pCBrOwM=
Subject key identifier: 83:5A:0E:3F:13:2C:48:38:F6:B6:3C:A6:A0:7E:E3:E3:7D:2F:07:B5
Authority key identifier: 10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
Certificate issuer: /CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Certificate serial: 019FA89981AD467FE46E9982CFE2CC2F2E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
Manifest number: 1A14
Signing time: Tue 28 Jul 2026 12:01:00 +0000
Manifest this update: Tue 28 Jul 2026 12:01:00 +0000
Manifest next update: Wed 29 Jul 2026 12:01:00 +0000
Files and hashes: 1: EHTblkAv9c8YdWRWDqjxPu61_-s.crl (hash: qngb+3+F2i8slymeXFbmtDtg6jS9VBaghb8FTsggDLY=)
2: oGSX6Be2A4gMsymfO3IeIELxVGc.roa (hash: 9nynO0eaDCEM38Kekr3tOs/yAPJlXITpxT9ftUpbs/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:81:ad:46:7f:e4:6e:99:82:cf:e2:cc:2f:2e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Validity
Not Before: Jul 28 12:01:00 2026 GMT
Not After : Jul 29 12:01:00 2026 GMT
Subject: CN=835a0e3f132c4838f6b63ca6a07ee3e37d2f07b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:23:35:40:e7:82:a6:13:b1:f9:7a:5c:c5:9a:
08:27:52:2d:b2:2a:fe:a8:cb:f0:ec:3b:97:bd:30:
3d:36:9a:d3:da:db:aa:9a:15:96:70:cd:4e:6f:3d:
96:80:73:f5:92:a8:24:d4:42:d3:74:9a:d5:08:d3:
d8:5a:9a:c3:c2:80:23:b9:06:3f:98:01:a8:37:4c:
a0:fa:81:25:14:34:57:85:42:6a:b2:c9:d2:02:47:
60:36:80:50:d1:2b:12:6a:08:4f:e1:46:a4:a0:e7:
f2:07:36:25:0b:95:8e:d2:e8:01:bd:d9:f2:73:ec:
f6:b9:76:a9:9f:dc:5e:47:84:78:1e:0e:e1:f0:4b:
ab:53:37:7c:7d:f9:c2:af:61:c9:0b:14:46:20:17:
60:e1:be:24:0f:41:49:ad:ee:a0:c3:1e:b2:b7:2a:
c8:ae:9e:0c:98:52:21:11:26:c5:fd:c4:dd:12:b6:
04:3d:0c:9c:93:cb:01:c9:27:17:a0:7c:e3:d1:7d:
8b:ab:9a:42:43:ca:34:bf:27:31:f5:04:d7:d1:c0:
bf:78:2d:0d:97:fe:09:19:8f:61:7a:5f:a2:60:19:
72:81:b2:df:fa:c5:0d:9b:a9:08:a9:13:23:7b:62:
90:ef:2d:b7:f4:65:4a:20:d6:14:0d:45:05:04:18:
59:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5A:0E:3F:13:2C:48:38:F6:B6:3C:A6:A0:7E:E3:E3:7D:2F:07:B5
X509v3 Authority Key Identifier:
keyid:10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:45:de:fa:13:fb:4c:e8:fe:31:71:14:47:bc:f6:d1:1c:74:
2f:eb:4f:3e:86:30:c5:1b:9e:97:20:97:72:8f:86:1f:62:b8:
f5:70:36:84:e8:e5:4b:10:c0:41:fc:10:1b:44:1e:db:43:1d:
72:8f:f1:f7:14:18:60:91:87:1c:a1:ef:47:23:65:12:3a:d2:
0d:6c:01:db:26:2a:73:b5:d6:7c:4a:63:e5:f8:13:57:32:fc:
1b:99:50:31:9b:b4:2d:31:54:19:73:99:58:8c:f4:03:5f:3e:
55:bc:c0:60:2d:64:6a:1e:5b:76:fb:7e:2f:80:e4:15:50:79:
f7:61:08:3c:b7:21:5f:15:40:5c:ea:8a:b6:5a:ff:38:1d:30:
de:ff:db:8c:71:ac:53:8a:08:01:26:58:ff:78:de:73:da:26:
da:23:6f:2e:fe:91:a3:20:ed:d7:9d:50:bb:17:80:90:55:8d:
0f:15:0b:26:11:fa:6c:e1:17:17:b6:65:11:e1:ee:63:11:06:
6a:70:16:b4:6e:58:2a:a3:48:23:a9:a9:fe:cb:2a:13:1f:f5:
29:89:73:f4:5c:5f:04:f3:b5:97:64:8f:a0:60:52:e3:f5:d0:
7e:d6:e4:dc:7c:eb:a4:b7:bd:de:6b:e6:76:b5:db:1a:ea:79:
c3:36:70:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:14:12 2026 by rpki-client