Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
File: EHQA5PCchADaMYvWywP9XFSqqfE.mft (raw, json)
Hash identifier: WojtS59OKvXWDDGk5Sq2B9CPsGlpMCeu02HhRRHE+uw=
Subject key identifier: F6:B3:E4:C2:B5:2F:89:9D:18:73:B8:4D:F8:68:E0:97:7A:F2:6D:44
Authority key identifier: 10:74:00:E4:F0:9C:84:00:DA:31:8B:D6:CB:03:FD:5C:54:AA:A9:F1
Certificate issuer: /CN=107400e4f09c8400da318bd6cb03fd5c54aaa9f1
Certificate serial: 01A0BDD4920D1C4DB7EB119264E223474B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
Manifest number: 02C2
Signing time: Sun 20 Sep 2026 08:00:19 +0000
Manifest this update: Sun 20 Sep 2026 08:00:19 +0000
Manifest next update: Mon 21 Sep 2026 08:00:19 +0000
Files and hashes: 1: EHQA5PCchADaMYvWywP9XFSqqfE.crl (hash: gcG4iGDXsuRNM4jkarDzfYsVNq+7vilDPxnoLsQCDJU=)
2: OGjeDErcHRCzEaNJIlL9WLO39x0.asa (hash: twryuu4Niufwid1brPkWkntu7TTmLytf1vNFmmKb5Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d4:92:0d:1c:4d:b7:eb:11:92:64:e2:23:47:4b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107400e4f09c8400da318bd6cb03fd5c54aaa9f1
Validity
Not Before: Sep 20 08:00:19 2026 GMT
Not After : Sep 21 08:00:19 2026 GMT
Subject: CN=f6b3e4c2b52f899d1873b84df868e0977af26d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b7:8e:ce:26:aa:60:1c:35:ca:57:fc:2e:a9:
37:c2:24:06:0c:25:7f:8e:06:5c:85:5b:68:e6:c3:
c5:d5:21:9c:33:e5:17:3c:2f:a3:90:b1:ec:76:73:
d9:31:fd:e1:9d:ca:fd:da:73:65:2a:66:c3:fd:bc:
4a:f4:52:b3:ef:0c:b4:d4:99:03:43:c3:5f:94:fe:
d9:35:4a:c4:e1:c8:56:96:2d:f1:0e:ee:78:2b:03:
25:f9:0d:98:69:3c:63:a6:d5:05:17:db:19:bc:48:
3f:d7:7e:a7:f0:2a:8b:82:02:39:1b:f8:4e:45:c4:
60:e6:58:ef:fa:c6:24:b9:cc:9f:79:4c:b1:ca:1f:
ca:2f:92:79:4d:d1:f7:48:fe:c5:0e:53:6b:18:90:
27:c1:5c:8b:b0:06:87:ae:74:80:a1:42:39:82:4d:
d6:dd:72:4d:ff:ad:0d:7a:97:5e:ba:24:7e:3d:0d:
78:bb:55:36:10:57:bf:28:7a:2f:12:17:ac:09:af:
8d:3e:cd:ad:2b:04:47:2d:b8:32:b3:4b:66:32:e4:
0d:6d:0d:88:d2:ee:13:1a:48:44:f1:b2:dc:96:1f:
87:bf:9f:07:5b:db:9e:6d:61:8d:94:9b:91:64:d5:
d9:ab:8e:4a:28:6c:b7:63:05:2d:fb:61:88:92:25:
1b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B3:E4:C2:B5:2F:89:9D:18:73:B8:4D:F8:68:E0:97:7A:F2:6D:44
X509v3 Authority Key Identifier:
keyid:10:74:00:E4:F0:9C:84:00:DA:31:8B:D6:CB:03:FD:5C:54:AA:A9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ae:c6:ab:3c:0d:5a:57:45:d5:06:0e:28:bd:a3:04:fc:26:
93:04:fc:5a:2c:8e:39:b5:e2:48:12:b9:a7:a8:07:81:b5:fb:
97:7f:a2:ef:9c:f6:1a:2c:53:5d:eb:36:51:40:7b:27:97:28:
f0:81:af:19:78:e0:3d:28:23:ab:12:c0:c5:18:f1:2d:03:21:
ba:d9:3a:b3:1e:68:01:d7:14:a5:cc:56:85:97:e6:31:c4:d9:
9c:dc:5c:b3:1a:09:c6:e3:b3:03:f0:dd:a1:a2:c3:51:04:0f:
92:36:94:d9:0f:37:d1:73:b9:b4:9f:13:8c:29:6c:51:5e:0c:
be:54:5c:76:71:88:ee:44:22:4b:3c:8c:bc:d9:f4:88:77:fd:
5f:9d:a3:ee:78:94:55:d4:ce:81:15:e1:f8:a4:f0:f2:83:68:
79:83:7e:6d:18:1c:ac:fa:64:29:65:45:8f:5e:6b:d7:d9:cc:
11:33:18:ef:a9:69:89:09:df:8a:b3:57:f4:65:e5:e9:a6:81:
20:88:3d:04:26:b5:0c:0a:b8:a3:0a:52:da:d1:47:4b:15:6b:
a2:0a:22:ce:77:a0:4b:00:d2:08:69:97:e5:94:d5:b8:bc:01:
87:cb:26:69:25:91:7c:08:1b:cb:9b:e8:6c:1b:fb:e1:c9:2b:
67:7f:92:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC91JINHE236xGSZOIjR0trMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzQwMGU0ZjA5Yzg0MDBkYTMxOGJkNmNiMDNmZDVjNTRh
YWE5ZjEwHhcNMjYwOTIwMDgwMDE5WhcNMjYwOTIxMDgwMDE5WjAzMTEwLwYDVQQD
EyhmNmIzZTRjMmI1MmY4OTlkMTg3M2I4NGRmODY4ZTA5NzdhZjI2ZDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLeOziaqYBw1ylf8Lqk3wiQGDCV/
jgZchVto5sPF1SGcM+UXPC+jkLHsdnPZMf3hncr92nNlKmbD/bxK9FKz7wy01JkD
Q8NflP7ZNUrE4chWli3xDu54KwMl+Q2YaTxjptUFF9sZvEg/136n8CqLggI5G/hO
RcRg5ljv+sYkucyfeUyxyh/KL5J5TdH3SP7FDlNrGJAnwVyLsAaHrnSAoUI5gk3W
3XJN/60NepdeuiR+PQ14u1U2EFe/KHovEhesCa+NPs2tKwRHLbgys0tmMuQNbQ2I
0u4TGkhE8bLclh+Hv58HW9uebWGNlJuRZNXZq45KKGy3YwUt+2GIkiUbcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPaz5MK1L4mdGHO4Tfho4Jd68m1EMB8GA1UdIwQY
MBaAFBB0AOTwnIQA2jGL1ssD/VxUqqnxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhRQTVQQ2NoQURhTVl2V3l3UDlYRlNxcWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9mMWVmYTktZDdlYS00YzI5LWJjZWYt
MDM1NjM5ZTllYmI1LzEvRUhRQTVQQ2NoQURhTVl2V3l3UDlYRlNxcWZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9mMWVmYTktZDdlYS00YzI5LWJjZWYtMDM1NjM5ZTllYmI1
LzEvRUhRQTVQQ2NoQURhTVl2V3l3UDlYRlNxcWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAda7GqzwN
WldF1QYOKL2jBPwmkwT8WiyOObXiSBK5p6gHgbX7l3+i75z2GixTXes2UUB7J5co
8IGvGXjgPSgjqxLAxRjxLQMhutk6sx5oAdcUpcxWhZfmMcTZnNxcsxoJxuOzA/Dd
oaLDUQQPkjaU2Q830XO5tJ8TjClsUV4MvlRcdnGI7kQiSzyMvNn0iHf9X52j7niU
VdTOgRXh+KTw8oNoeYN+bRgcrPpkKWVFj15r19nMETMY76lpiQnfirNX9GXl6aaB
IIg9BCa1DAq4owpS2tFHSxVrogoiznegSwDSCGmX5ZTVuLwBh8smaSWRfAgby5vo
bBv74ckrZ3+SJg==
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:35:52 2026 by rpki-client