Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
File: EhUb9X9TFrLdXNij95hSfqwUt3Q.mft (raw, json)
Hash identifier: UTslNXEWr9/el/pdKeQIDTDrJKnuJPzIyZBhNZp75yQ=
Subject key identifier: 2B:71:33:45:9F:71:54:5D:E6:37:81:0A:DC:EB:C0:6D:F1:10:49:B2
Authority key identifier: 12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
Certificate issuer: /CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Certificate serial: 019D9A75005D79165C1D7C5983B7A897EB2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
Manifest number: 1855
Signing time: Fri 17 Apr 2026 08:00:52 +0000
Manifest this update: Fri 17 Apr 2026 08:00:52 +0000
Manifest next update: Sat 18 Apr 2026 08:00:52 +0000
Files and hashes: 1: EhUb9X9TFrLdXNij95hSfqwUt3Q.crl (hash: NttEbdc0+NIp27emaPX6Koe+8Nc1HPaJ74plbj2X+kg=)
2: cgx3Y5niHaURRA_j2XVnH5snZqE.roa (hash: wvI3PVCUphqU2rq2ZXh+5+5Blo4y6rgwv7y5x6vRtSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:00:5d:79:16:5c:1d:7c:59:83:b7:a8:97:eb:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Validity
Not Before: Apr 17 08:00:52 2026 GMT
Not After : Apr 18 08:00:52 2026 GMT
Subject: CN=2b7133459f71545de637810adcebc06df11049b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:3c:51:90:28:50:a2:5d:52:c8:e0:6d:0c:
f7:c8:0d:25:94:a8:0b:cf:24:9b:a4:8a:48:c3:4c:
5a:18:56:66:5e:a7:ac:fc:27:ac:ae:ca:f9:a9:7c:
6d:c5:23:d5:6c:e6:7e:88:b2:de:ea:26:4c:25:5e:
07:16:45:d8:0e:14:e1:0f:75:d3:63:91:d4:f6:ea:
7a:c7:35:be:07:35:ab:c2:7a:31:7f:65:44:da:a6:
22:c4:f3:6e:8c:b2:9f:01:8e:1c:21:d5:ad:3d:37:
f6:24:be:f8:da:3f:fb:ae:c4:cc:97:e7:a4:54:38:
c7:b3:ed:14:9c:b3:d7:52:b6:89:d0:21:71:a0:63:
94:5a:8c:19:ed:84:8c:84:57:b9:c0:d0:a7:74:4e:
9c:c3:ae:4f:f2:6a:10:31:2a:d7:dc:60:97:38:7b:
59:6c:d9:27:e0:1d:9f:7e:d4:56:8f:4e:50:b9:2c:
b9:8d:cf:4a:6e:5e:3f:81:2e:d6:0b:3f:e7:44:84:
3f:20:64:18:f5:57:12:c2:8d:d1:60:99:7e:09:07:
86:31:8b:19:31:0a:7f:d3:47:a8:75:94:1a:71:71:
fa:c4:7f:52:d5:29:ab:10:37:0c:88:8c:1e:a2:63:
1a:6c:a4:25:13:0c:f4:10:a8:a5:61:6d:36:72:95:
22:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:71:33:45:9F:71:54:5D:E6:37:81:0A:DC:EB:C0:6D:F1:10:49:B2
X509v3 Authority Key Identifier:
keyid:12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f2:9e:41:88:cc:39:bf:4d:a2:8b:5c:6e:fd:5a:db:8b:b4:
78:68:fa:53:0b:db:c5:3f:67:f2:6a:27:4b:dd:72:b4:e2:c1:
e2:0e:04:c0:18:85:5a:f5:f4:d1:45:ee:1c:c8:fa:dc:71:9f:
3f:ae:cc:27:8f:8e:b1:29:49:64:7a:68:a2:54:1a:9e:78:c1:
a7:cd:14:1c:f6:91:aa:c7:66:ec:a2:29:22:7c:52:53:78:a7:
08:0f:ae:04:79:e8:7b:df:78:2b:93:7c:2a:f2:5b:b4:47:db:
8b:0f:d0:e5:9c:0c:51:c5:d2:ec:30:2d:44:0d:47:55:cc:1e:
39:0c:c1:a6:5f:ba:ac:e3:a7:8f:77:09:c0:b3:11:7b:a7:3c:
89:2a:e7:2f:f7:4c:ab:35:64:f9:80:11:32:12:0c:d8:47:10:
d3:23:2a:81:3a:da:e6:88:29:81:ff:c6:e8:b4:2c:b3:49:d9:
e1:46:ba:5e:ca:cc:6d:5d:f8:0b:8b:e5:f7:88:ea:7f:ac:76:
b5:a3:9c:c6:b5:a6:ec:a0:72:8e:7c:b8:db:a9:cc:4f:2e:56:
65:71:fd:aa:ae:e5:9e:60:37:84:be:53:98:6e:0b:62:b9:55:
d2:48:99:42:0e:47:f8:b2:af:77:48:5f:75:c4:7d:72:ff:c0:
03:da:6c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:11:58 2026 by rpki-client