Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
File: EHQA5PCchADaMYvWywP9XFSqqfE.mft (raw, json)
Hash identifier: 3C64XaEZ1UBtFgAlmhBxwjHc6q8ff5Xy+URFzJeq4LY=
Subject key identifier: 8B:4A:69:A6:BC:2D:1B:C7:DF:5D:9C:AA:88:8E:17:01:26:99:5F:71
Authority key identifier: 10:74:00:E4:F0:9C:84:00:DA:31:8B:D6:CB:03:FD:5C:54:AA:A9:F1
Certificate issuer: /CN=107400e4f09c8400da318bd6cb03fd5c54aaa9f1
Certificate serial: 01A1A970DBA27461354B2BC6F6739BDFD098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
Manifest number: 033C
Signing time: Thu 05 Nov 2026 02:01:48 +0000
Manifest this update: Thu 05 Nov 2026 02:01:48 +0000
Manifest next update: Fri 06 Nov 2026 02:01:48 +0000
Files and hashes: 1: EHQA5PCchADaMYvWywP9XFSqqfE.crl (hash: L9ytauukzCj0d4Tv8yO4hSw5mmL1WU72hqiKcTE6OPo=)
2: OGjeDErcHRCzEaNJIlL9WLO39x0.asa (hash: twryuu4Niufwid1brPkWkntu7TTmLytf1vNFmmKb5Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:70:db:a2:74:61:35:4b:2b:c6:f6:73:9b:df:d0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107400e4f09c8400da318bd6cb03fd5c54aaa9f1
Validity
Not Before: Nov 5 02:01:48 2026 GMT
Not After : Nov 6 02:01:48 2026 GMT
Subject: CN=8b4a69a6bc2d1bc7df5d9caa888e170126995f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9e:3a:92:15:f2:bb:c6:cd:47:2f:cf:27:81:
2a:61:ab:49:c0:3a:3c:fc:00:bd:6e:97:85:52:f6:
81:e8:2f:6d:59:dd:0d:92:04:af:ba:e4:2c:cf:18:
f6:e9:03:87:40:32:fa:49:8f:5b:61:4d:9c:aa:e9:
72:bd:af:67:3c:08:fd:9b:b3:3e:29:de:95:6b:0d:
0e:cd:ef:cf:b4:91:0c:58:82:c2:9b:54:1b:93:a7:
9b:80:e7:d5:c4:44:9b:9e:af:07:a0:97:1a:c3:1b:
d7:e0:46:bc:70:04:26:0e:c8:51:be:32:58:f0:65:
1f:ad:52:80:53:c1:53:43:f2:f7:60:d8:07:9d:9a:
84:54:77:90:8d:b4:2f:49:28:a0:26:25:c2:18:f6:
17:4f:4f:41:52:5b:c6:f9:fc:f7:dc:5c:2c:55:35:
30:04:5e:9b:a3:f5:98:54:58:e7:65:4d:97:d8:d1:
b0:24:ff:94:f9:56:9d:6f:6f:f6:2e:e7:87:33:84:
6e:f3:99:a0:12:35:60:ee:a4:e8:15:b8:db:2a:62:
43:c8:3c:32:43:07:f3:db:90:3b:43:1d:e6:5f:25:
5a:b6:1e:c0:c4:2d:a7:2b:31:f1:ad:83:c5:93:a1:
27:87:32:ff:87:27:1a:31:6e:dd:12:bd:66:de:d4:
69:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4A:69:A6:BC:2D:1B:C7:DF:5D:9C:AA:88:8E:17:01:26:99:5F:71
X509v3 Authority Key Identifier:
keyid:10:74:00:E4:F0:9C:84:00:DA:31:8B:D6:CB:03:FD:5C:54:AA:A9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:0f:80:68:11:f0:4a:32:f0:31:0c:b5:3c:60:1f:75:a3:85:
8a:16:e5:b1:9d:7f:cc:ec:5c:8a:ee:77:15:8f:0a:93:33:67:
5c:39:3c:ae:32:03:a2:d5:c3:92:a0:32:a0:19:fc:0d:5c:c7:
8e:c4:ff:f1:42:55:f4:7d:4c:29:da:60:3b:fb:d0:95:9d:54:
ae:96:cb:64:9a:1a:9c:32:1c:1c:d7:35:d0:68:f3:25:18:fb:
8d:35:fd:a6:1c:2e:0e:37:02:8d:0c:0c:15:d1:8d:f9:4b:ad:
04:31:b7:8a:a7:95:8a:e5:c4:1f:e5:45:26:59:cd:b2:76:f1:
f9:5b:ae:98:db:bb:81:d7:cb:df:50:34:f7:01:9f:5e:a3:c9:
37:53:6e:12:f7:8c:ae:bc:23:dd:0e:c5:ab:04:ad:d1:87:49:
9b:c8:3d:35:44:3b:ed:29:10:42:76:95:1a:d1:b1:af:d6:53:
0c:b2:3a:bd:42:99:fd:f7:0f:bb:9d:3c:db:b4:ad:b8:17:fb:
41:c3:d2:4d:11:31:7d:9b:d9:17:b1:56:b3:a9:38:0e:0e:07:
53:ab:e5:23:98:7c:79:3c:7c:c0:77:4d:9c:2d:7f:12:93:fc:
46:c0:98:ef:3e:7b:94:ea:97:61:17:30:ac:09:7d:86:c3:f4:
a6:7b:38:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGpcNuidGE1SyvG9nOb39CYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzQwMGU0ZjA5Yzg0MDBkYTMxOGJkNmNiMDNmZDVjNTRh
YWE5ZjEwHhcNMjYxMTA1MDIwMTQ4WhcNMjYxMTA2MDIwMTQ4WjAzMTEwLwYDVQQD
Eyg4YjRhNjlhNmJjMmQxYmM3ZGY1ZDljYWE4ODhlMTcwMTI2OTk1ZjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5p46khXyu8bNRy/PJ4EqYatJwDo8
/AC9bpeFUvaB6C9tWd0NkgSvuuQszxj26QOHQDL6SY9bYU2cqulyva9nPAj9m7M+
Kd6Vaw0Oze/PtJEMWILCm1Qbk6ebgOfVxESbnq8HoJcawxvX4Ea8cAQmDshRvjJY
8GUfrVKAU8FTQ/L3YNgHnZqEVHeQjbQvSSigJiXCGPYXT09BUlvG+fz33FwsVTUw
BF6bo/WYVFjnZU2X2NGwJP+U+Vadb2/2LueHM4Ru85mgEjVg7qToFbjbKmJDyDwy
Qwfz25A7Qx3mXyVath7AxC2nKzHxrYPFk6EnhzL/hycaMW7dEr1m3tRpEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItKaaa8LRvH312cqoiOFwEmmV9xMB8GA1UdIwQY
MBaAFBB0AOTwnIQA2jGL1ssD/VxUqqnxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhRQTVQQ2NoQURhTVl2V3l3UDlYRlNxcWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9mMWVmYTktZDdlYS00YzI5LWJjZWYt
MDM1NjM5ZTllYmI1LzEvRUhRQTVQQ2NoQURhTVl2V3l3UDlYRlNxcWZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9mMWVmYTktZDdlYS00YzI5LWJjZWYtMDM1NjM5ZTllYmI1
LzEvRUhRQTVQQ2NoQURhTVl2V3l3UDlYRlNxcWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIg+AaBHw
SjLwMQy1PGAfdaOFihblsZ1/zOxciu53FY8KkzNnXDk8rjIDotXDkqAyoBn8DVzH
jsT/8UJV9H1MKdpgO/vQlZ1UrpbLZJoanDIcHNc10GjzJRj7jTX9phwuDjcCjQwM
FdGN+UutBDG3iqeViuXEH+VFJlnNsnbx+VuumNu7gdfL31A09wGfXqPJN1NuEveM
rrwj3Q7FqwSt0YdJm8g9NUQ77SkQQnaVGtGxr9ZTDLI6vUKZ/fcPu50827StuBf7
QcPSTRExfZvZF7FWs6k4Dg4HU6vlI5h8eTx8wHdNnC1/EpP8RsCY7z57lOqXYRcw
rAl9hsP0pns42A==
-----END CERTIFICATE-----
Generated at Thu Nov 5 05:55:53 2026 by rpki-client