Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
File: EHQA5PCchADaMYvWywP9XFSqqfE.mft (raw, json)
Hash identifier: rLWxJACDBSMcdevglDSXeBmXzOoG9BNptLY+HHNSI6Y=
Subject key identifier: 26:0C:31:03:25:A6:DA:37:41:62:79:26:67:B5:B3:A8:C6:E5:F8:B0
Authority key identifier: 10:74:00:E4:F0:9C:84:00:DA:31:8B:D6:CB:03:FD:5C:54:AA:A9:F1
Certificate issuer: /CN=107400e4f09c8400da318bd6cb03fd5c54aaa9f1
Certificate serial: 019FA7BD172B54B10DC4037193711168A652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
Manifest number: 0232
Signing time: Tue 28 Jul 2026 08:00:14 +0000
Manifest this update: Tue 28 Jul 2026 08:00:14 +0000
Manifest next update: Wed 29 Jul 2026 08:00:14 +0000
Files and hashes: 1: EHQA5PCchADaMYvWywP9XFSqqfE.crl (hash: av8yMTk5Xad+LAD1ehoUMm5kcRYG61lQgLL8Mrab5Zk=)
2: OGjeDErcHRCzEaNJIlL9WLO39x0.asa (hash: twryuu4Niufwid1brPkWkntu7TTmLytf1vNFmmKb5Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:17:2b:54:b1:0d:c4:03:71:93:71:11:68:a6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107400e4f09c8400da318bd6cb03fd5c54aaa9f1
Validity
Not Before: Jul 28 08:00:14 2026 GMT
Not After : Jul 29 08:00:14 2026 GMT
Subject: CN=260c310325a6da374162792667b5b3a8c6e5f8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ff:51:ce:fa:ae:87:f8:03:3f:5d:b4:b6:29:
6a:1b:88:97:3e:71:88:11:d4:aa:7f:37:35:1c:1c:
ce:90:5f:a7:5c:3c:7b:62:bb:26:d9:b6:bb:03:71:
a1:26:dc:d4:d3:b3:0f:d6:53:ae:6e:ef:f0:f7:bf:
10:02:09:0e:9f:37:1f:40:f1:56:a2:84:38:2e:44:
ad:fc:76:81:83:83:a2:94:35:b6:29:cd:68:ff:63:
e4:6d:d2:80:8e:e2:43:e7:2b:e4:76:82:13:1c:45:
68:58:80:a3:68:87:78:ca:1b:c9:60:92:6d:c1:84:
9a:19:6c:65:3b:68:2f:74:e2:2a:53:61:fb:12:48:
cf:6d:46:53:38:cd:02:02:a9:04:52:22:df:25:96:
6f:61:bb:d2:e2:72:be:41:8e:f5:3d:d8:92:e1:e0:
38:0d:3f:d1:81:60:5c:b4:63:a0:4a:63:ec:f4:e2:
c9:4b:30:5e:bc:15:7a:7b:85:56:c1:88:fb:b4:f0:
35:ce:db:b9:00:c2:30:5c:c3:4f:32:b0:3b:30:01:
58:34:19:f9:12:45:9f:3a:8f:09:1d:97:cd:47:a4:
90:aa:c9:c6:c6:95:d0:4a:96:2e:f7:70:3c:b3:9d:
e7:23:68:d8:fb:92:14:5a:45:69:a0:dd:fe:12:6e:
f4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0C:31:03:25:A6:DA:37:41:62:79:26:67:B5:B3:A8:C6:E5:F8:B0
X509v3 Authority Key Identifier:
keyid:10:74:00:E4:F0:9C:84:00:DA:31:8B:D6:CB:03:FD:5C:54:AA:A9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0e:8a:b1:56:67:cf:0c:0c:bb:68:14:6e:ca:86:a7:71:24:
19:3f:d7:b2:03:b4:3d:b7:1f:db:3a:f4:a2:97:2a:a5:8c:fc:
01:29:ee:e8:00:9f:a0:b2:89:77:46:e5:6a:22:ed:fb:d5:2f:
16:32:dc:ab:1d:72:00:7c:37:c0:05:ad:fe:b0:ec:e4:28:8e:
6f:8f:21:a4:fb:af:f7:e3:bf:32:d3:8d:01:35:c5:45:fa:ec:
83:0f:ae:65:25:bb:a0:e1:53:ce:42:71:5a:c4:ab:e3:56:0d:
c6:e7:7e:4d:ec:cd:16:f5:7b:ca:7e:0c:48:22:db:9f:d6:36:
ef:a5:57:5d:f8:a1:17:fc:85:34:e3:52:ad:c0:e0:57:e9:b5:
ed:f5:8b:9d:e1:6c:57:3b:27:4e:25:be:ac:10:1d:10:fb:c9:
08:3c:e5:94:48:2d:f2:e2:99:e4:7e:15:ab:82:9a:26:d9:70:
07:7a:aa:9c:81:25:b9:ee:5a:0a:3f:0f:e4:57:37:80:cd:b7:
4c:cf:48:25:e0:2b:7d:f2:db:c9:07:15:12:1e:18:df:70:f1:
4a:25:83:48:3c:4a:9c:7c:2f:0e:97:0d:9f:95:13:ee:ed:60:
af:00:15:8b:3c:fb:64:a4:7c:67:5b:6d:32:ea:2e:e4:25:2d:
85:17:fd:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+nvRcrVLENxANxk3ERaKZSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzQwMGU0ZjA5Yzg0MDBkYTMxOGJkNmNiMDNmZDVjNTRh
YWE5ZjEwHhcNMjYwNzI4MDgwMDE0WhcNMjYwNzI5MDgwMDE0WjAzMTEwLwYDVQQD
EygyNjBjMzEwMzI1YTZkYTM3NDE2Mjc5MjY2N2I1YjNhOGM2ZTVmOGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf9Rzvquh/gDP120tilqG4iXPnGI
EdSqfzc1HBzOkF+nXDx7Yrsm2ba7A3GhJtzU07MP1lOubu/w978QAgkOnzcfQPFW
ooQ4LkSt/HaBg4OilDW2Kc1o/2PkbdKAjuJD5yvkdoITHEVoWICjaId4yhvJYJJt
wYSaGWxlO2gvdOIqU2H7EkjPbUZTOM0CAqkEUiLfJZZvYbvS4nK+QY71PdiS4eA4
DT/RgWBctGOgSmPs9OLJSzBevBV6e4VWwYj7tPA1ztu5AMIwXMNPMrA7MAFYNBn5
EkWfOo8JHZfNR6SQqsnGxpXQSpYu93A8s53nI2jY+5IUWkVpoN3+Em70GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYMMQMlpto3QWJ5Jme1s6jG5fiwMB8GA1UdIwQY
MBaAFBB0AOTwnIQA2jGL1ssD/VxUqqnxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhRQTVQQ2NoQURhTVl2V3l3UDlYRlNxcWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9mMWVmYTktZDdlYS00YzI5LWJjZWYt
MDM1NjM5ZTllYmI1LzEvRUhRQTVQQ2NoQURhTVl2V3l3UDlYRlNxcWZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9mMWVmYTktZDdlYS00YzI5LWJjZWYtMDM1NjM5ZTllYmI1
LzEvRUhRQTVQQ2NoQURhTVl2V3l3UDlYRlNxcWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQ6KsVZn
zwwMu2gUbsqGp3EkGT/XsgO0Pbcf2zr0opcqpYz8ASnu6ACfoLKJd0blaiLt+9Uv
FjLcqx1yAHw3wAWt/rDs5CiOb48hpPuv9+O/MtONATXFRfrsgw+uZSW7oOFTzkJx
WsSr41YNxud+TezNFvV7yn4MSCLbn9Y276VXXfihF/yFNONSrcDgV+m17fWLneFs
VzsnTiW+rBAdEPvJCDzllEgt8uKZ5H4Vq4KaJtlwB3qqnIElue5aCj8P5Fc3gM23
TM9IJeArffLbyQcVEh4Y33DxSiWDSDxKnHwvDpcNn5UT7u1grwAVizz7ZKR8Z1tt
Muou5CUthRf9QQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 13:35:42 2026 by rpki-client