Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
File: EhUb9X9TFrLdXNij95hSfqwUt3Q.mft (raw, json)
Hash identifier: yXLwcOI893Nv1QjZK248z0JhAj6CxZMCRjyP3tHtyck=
Subject key identifier: F0:A0:82:E8:DE:1A:FD:D9:FB:90:37:3F:2C:7A:3C:85:E3:79:A3:27
Authority key identifier: 12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
Certificate issuer: /CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Certificate serial: 01A0E098C97BDA910776929F4D3E72376E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
Manifest number: 1A07
Signing time: Sun 27 Sep 2026 02:01:44 +0000
Manifest this update: Sun 27 Sep 2026 02:01:44 +0000
Manifest next update: Mon 28 Sep 2026 02:01:44 +0000
Files and hashes: 1: EhUb9X9TFrLdXNij95hSfqwUt3Q.crl (hash: jz2bcPGgA2AS6+6yAfCGaLtPtJJT43FHYmvCBFyBrz8=)
2: cgx3Y5niHaURRA_j2XVnH5snZqE.roa (hash: wvI3PVCUphqU2rq2ZXh+5+5Blo4y6rgwv7y5x6vRtSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:c9:7b:da:91:07:76:92:9f:4d:3e:72:37:6e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Validity
Not Before: Sep 27 02:01:44 2026 GMT
Not After : Sep 28 02:01:44 2026 GMT
Subject: CN=f0a082e8de1afdd9fb90373f2c7a3c85e379a327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:da:51:41:d2:aa:e3:e8:24:06:81:84:21:14:
ef:de:82:c4:f3:22:99:c3:a0:81:de:60:ce:2b:14:
b3:e3:38:93:ac:b4:0d:81:8a:70:48:6a:33:ba:2c:
6c:d9:63:83:05:23:b2:33:c5:ac:9c:c0:3c:7c:76:
6e:5a:4c:00:37:f3:44:0a:5b:2d:b4:53:35:8d:7d:
5e:a6:5d:c0:da:6d:31:bf:3c:f9:46:90:91:12:b0:
3b:be:98:b4:19:27:6f:59:f0:47:0a:e7:f0:18:6a:
ce:1d:c0:ca:12:9b:69:f6:dd:43:cd:7d:b3:50:36:
d1:3b:24:a0:3b:fd:29:44:34:92:76:97:1b:93:2e:
93:84:be:7d:8a:2f:76:53:4e:cf:8e:62:25:1a:3c:
34:5b:6e:1d:f0:6b:5f:f6:83:5e:5f:99:8f:53:2a:
99:cb:8b:39:a5:15:6e:e1:21:23:28:71:43:d8:a6:
ec:7a:a8:64:7a:74:10:5d:5c:5a:10:98:30:3f:98:
56:09:e5:a3:ca:82:52:35:9a:15:63:e0:05:64:ec:
04:d3:ed:66:33:7d:5c:17:0f:41:d3:bd:4e:26:d8:
02:90:8d:86:11:69:4d:4d:46:3d:15:78:39:50:15:
2d:61:a8:ed:19:53:8d:0c:f6:16:96:a8:e9:6d:65:
ad:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A0:82:E8:DE:1A:FD:D9:FB:90:37:3F:2C:7A:3C:85:E3:79:A3:27
X509v3 Authority Key Identifier:
keyid:12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:8c:ff:9b:7c:fb:e1:1e:1b:e1:4b:a7:69:32:72:87:ee:a8:
44:9d:9e:0b:4f:2c:b3:00:e4:d5:33:45:e6:cf:0a:b9:94:f6:
8d:c8:33:17:a7:7c:c8:0a:58:79:c0:7d:ae:58:c5:ae:d6:7a:
2b:34:58:04:07:c0:5d:cc:59:83:d5:29:b0:a0:88:e7:55:b6:
6c:b5:0c:e8:a5:99:05:ec:1c:ce:a2:f9:37:7e:ea:f6:40:63:
4e:1f:9f:6e:5a:87:b4:5d:a2:03:28:d2:23:41:0e:76:da:f7:
bc:3e:87:e3:22:c5:d2:1f:8d:18:42:93:8c:95:48:78:6f:d5:
7f:e5:59:86:d2:c9:5e:10:8f:33:74:c9:fc:87:fd:55:6e:de:
8e:22:98:6b:1a:86:45:e5:2e:a4:62:38:1c:f7:11:4c:c0:b4:
6f:e2:b9:93:85:30:1f:ac:93:4d:00:67:bb:57:b2:d5:f8:8d:
20:84:14:28:b6:06:56:94:d7:b2:78:00:c8:b7:09:dc:44:b5:
84:26:b8:de:0f:df:86:22:2f:7a:ce:1a:44:1f:44:4e:76:96:
a4:ad:73:e7:21:6c:2c:23:11:8a:69:25:81:38:fb:7d:61:a7:
ed:e0:22:47:5a:bd:44:bf:ad:05:50:ab:bd:ef:aa:44:b0:b3:
0d:a3:2c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:10:42 2026 by rpki-client