Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
File: EhUb9X9TFrLdXNij95hSfqwUt3Q.mft (raw, json)
Hash identifier: QPPEgsGUoCB4u397JJ4VIQ+yie2go/aCR00MepfSoss=
Subject key identifier: 2B:52:62:39:30:B9:59:FA:E7:43:A8:E8:90:26:CB:7B:AD:CB:1E:FE
Authority key identifier: 12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
Certificate issuer: /CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Certificate serial: 019CAAFD5EEBD1BE016AED8C1E189D13AE2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
Manifest number: 17D9
Signing time: Sun 01 Mar 2026 20:00:57 +0000
Manifest this update: Sun 01 Mar 2026 20:00:57 +0000
Manifest next update: Mon 02 Mar 2026 20:00:57 +0000
Files and hashes: 1: EhUb9X9TFrLdXNij95hSfqwUt3Q.crl (hash: k3CLRXL2ROpBg5R4YYFq0blH4Kd/TnjPUhRziXk7vKQ=)
2: cgx3Y5niHaURRA_j2XVnH5snZqE.roa (hash: wvI3PVCUphqU2rq2ZXh+5+5Blo4y6rgwv7y5x6vRtSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:5e:eb:d1:be:01:6a:ed:8c:1e:18:9d:13:ae:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Validity
Not Before: Mar 1 20:00:57 2026 GMT
Not After : Mar 2 20:00:57 2026 GMT
Subject: CN=2b52623930b959fae743a8e89026cb7badcb1efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:99:6f:4d:9f:5b:d0:76:a5:4c:19:56:16:b3:
86:6e:ed:be:89:a4:7f:35:fa:6a:11:12:ac:4d:40:
3b:1e:3f:26:81:32:4d:07:59:7f:44:97:1a:da:da:
15:4a:c7:a3:2a:9b:81:3c:5c:3a:5a:0e:29:08:54:
85:7a:16:09:b6:a6:6a:d1:55:45:ba:f8:c1:ac:71:
fd:c1:65:91:77:f3:83:34:5e:f1:59:75:8e:5a:7a:
6a:74:d1:55:0b:a2:3c:69:f9:6a:7a:77:e4:a7:7d:
ea:d8:05:28:22:3f:83:f9:b0:3a:4f:d5:b2:e0:94:
58:26:fb:13:e7:21:28:82:d0:b4:73:6a:07:24:2a:
6e:9f:f8:f7:57:0d:e0:5c:81:58:0b:f5:72:05:70:
28:f0:b1:24:43:ae:4b:88:78:49:63:49:ee:93:a5:
62:91:f4:64:09:05:60:92:82:64:24:fd:7b:5e:e0:
cf:16:c3:5c:f9:b5:54:a7:ae:cf:70:a9:25:92:19:
5b:61:b8:59:62:c2:ac:15:26:74:a6:1f:28:63:76:
47:1a:9b:6f:69:24:1e:9e:e9:d7:75:73:d2:3d:7d:
30:e5:65:4f:51:0a:90:d3:df:6a:7e:53:43:ce:e4:
0c:e2:92:fe:1e:02:81:17:1b:ac:bf:79:25:2a:f2:
57:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:52:62:39:30:B9:59:FA:E7:43:A8:E8:90:26:CB:7B:AD:CB:1E:FE
X509v3 Authority Key Identifier:
keyid:12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:ae:e7:20:b6:85:30:ec:cb:d3:ee:28:26:a2:c6:95:ea:bc:
09:25:b7:b3:81:54:e1:c1:12:14:f8:d2:34:05:d0:0b:9d:7e:
5c:18:72:cb:e3:a3:1d:2c:6e:37:3b:91:38:65:a8:b3:30:20:
49:89:84:21:28:6a:fb:10:6f:8a:54:db:c5:c6:b4:c3:50:44:
05:0e:4a:74:9a:f7:3a:6f:a7:0c:52:51:0e:ea:b5:41:15:35:
1d:1f:66:28:b5:c7:dc:ac:c3:c6:49:83:0d:93:7f:f9:47:60:
4b:b3:86:ef:07:e9:0e:eb:3c:09:86:ed:94:db:29:a6:5c:b5:
de:ba:68:fd:49:4c:2a:e3:71:32:df:2e:3c:ef:49:3c:b0:6e:
35:fb:d0:92:85:bd:bf:42:d3:f6:7e:5f:ef:c4:fb:37:d8:43:
6c:25:34:0d:43:fc:dd:d3:07:54:c9:19:79:d9:26:94:58:c4:
a5:25:2d:a1:7f:26:08:21:d4:12:6e:04:e4:da:0b:d9:58:4d:
cc:31:f6:12:ea:c8:f2:dd:32:ca:63:61:61:80:bc:46:9e:a9:
ce:81:aa:3b:a2:44:c2:a1:f8:dc:7c:4b:3c:61:4e:cf:81:3b:
1b:9b:a4:c0:fd:58:23:55:f3:2c:51:28:46:96:4e:87:63:bd:
32:00:c4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:06 2026 by rpki-client