Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
File: EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft (raw, json)
Hash identifier: mT/ULLQXJn2rEhebIKX0EfYMkikn+2BYW58U7BWA3VE=
Subject key identifier: 64:06:17:47:BB:B4:4D:79:D2:4E:65:0E:C7:D3:FB:AD:49:96:96:04
Authority key identifier: 12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64
Certificate issuer: /CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64
Certificate serial: 019CA9B38AA34100734A56462CE99A9C71A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
Manifest number: 0946
Signing time: Sun 01 Mar 2026 14:00:41 +0000
Manifest this update: Sun 01 Mar 2026 14:00:41 +0000
Manifest next update: Mon 02 Mar 2026 14:00:41 +0000
Files and hashes: 1: EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl (hash: dwPGD8KVV3NzuyJCvkAwEOMeq0RppzGJPbFBiTDYcO4=)
2: zY6-TSsM-n0cGeuR4MC7O4QKpZU.roa (hash: pDF4f+98qM6dWbtI9D665+bMv7kt2epaA+MQQ2O8Qdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:8a:a3:41:00:73:4a:56:46:2c:e9:9a:9c:71:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64
Validity
Not Before: Mar 1 14:00:41 2026 GMT
Not After : Mar 2 14:00:41 2026 GMT
Subject: CN=64061747bbb44d79d24e650ec7d3fbad49969604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0d:d4:9b:bc:d4:d2:d1:b9:0c:9e:b3:2d:26:
d0:36:92:59:14:1e:86:a3:53:19:1e:4a:46:6f:f0:
11:4b:eb:f3:a7:2f:f0:28:a1:65:24:f3:fe:fb:3e:
23:d2:a0:3c:84:e7:20:ee:f1:30:d3:1a:a3:e0:7c:
19:bd:6c:5d:a4:54:00:a3:01:5a:3e:b7:64:3c:e7:
e6:5d:ac:de:fe:36:15:83:4a:7a:8a:c2:93:4a:ad:
72:a2:ca:f0:d3:c7:98:f5:a8:2f:3c:c5:be:e8:6c:
cc:91:c2:10:77:b6:ab:6d:87:38:11:d6:02:cc:33:
54:5f:c4:ec:9b:d6:00:00:74:c0:14:eb:1c:f2:1a:
54:e5:6a:58:c9:55:2a:99:9a:0f:46:58:fe:32:55:
70:48:82:6f:b4:1b:6d:e9:6b:da:ce:c9:49:cf:f7:
45:0d:51:ff:a9:9d:4b:d5:87:3f:d4:ff:d2:fa:56:
89:59:f9:89:98:3f:72:fb:5c:20:d1:9a:8d:27:b4:
e7:a8:4f:40:a2:9e:e7:58:2e:ec:93:5e:90:ea:b6:
21:c5:28:fd:f2:13:b1:58:43:8c:b0:67:08:4b:20:
dd:a8:f8:38:48:a5:ca:f6:bc:96:aa:f9:da:58:58:
d8:3a:1d:d6:47:ae:43:ab:bb:18:7e:70:93:e5:b1:
d0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:06:17:47:BB:B4:4D:79:D2:4E:65:0E:C7:D3:FB:AD:49:96:96:04
X509v3 Authority Key Identifier:
keyid:12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c5:53:e8:e1:23:68:62:b4:7b:06:3e:3b:bc:92:b3:f5:3f:
16:66:96:ba:65:80:b4:6d:1b:ba:22:78:68:27:cb:92:13:ec:
83:4f:2e:cd:df:c8:8c:67:ae:7b:94:a1:04:ab:53:c7:6e:17:
59:ad:90:23:79:ca:79:28:1a:46:e7:d1:8d:56:be:4d:89:51:
4c:e5:b3:7e:e0:08:a2:13:66:21:b9:92:c3:4b:39:59:c6:a4:
96:52:41:f7:33:6f:0c:6a:85:95:ff:78:07:38:c3:af:da:0e:
4b:3e:2a:be:52:56:77:6e:06:40:de:86:bf:61:42:76:80:8c:
c4:0c:eb:75:43:6b:41:fb:05:f1:7c:2a:41:9e:f2:b2:fd:69:
42:51:33:26:72:12:67:dd:d3:8b:db:c6:c7:ec:5e:31:89:00:
8c:21:31:bb:c0:24:7a:c4:fd:b8:94:6b:f7:86:f6:44:29:e3:
6a:3a:fa:62:f4:63:3b:1a:13:34:bd:06:54:d8:8a:10:55:30:
27:b5:05:e2:87:55:03:2f:7d:40:fe:36:0e:29:0c:63:47:6e:
ec:c8:62:08:89:65:28:2c:e3:31:89:d5:94:3c:dd:ce:62:6a:
4a:57:5f:50:da:e8:71:d2:78:79:38:61:a9:dc:82:58:72:3f:
25:c5:00:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyps4qjQQBzSlZGLOmanHGnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMTMzYTY1MjNlMmVkMGEwYzlhMzZlYThhN2M2ZjBlNzJh
NWRkNjQwHhcNMjYwMzAxMTQwMDQxWhcNMjYwMzAyMTQwMDQxWjAzMTEwLwYDVQQD
Eyg2NDA2MTc0N2JiYjQ0ZDc5ZDI0ZTY1MGVjN2QzZmJhZDQ5OTY5NjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA3Um7zU0tG5DJ6zLSbQNpJZFB6G
o1MZHkpGb/ARS+vzpy/wKKFlJPP++z4j0qA8hOcg7vEw0xqj4HwZvWxdpFQAowFa
PrdkPOfmXaze/jYVg0p6isKTSq1yosrw08eY9agvPMW+6GzMkcIQd7arbYc4EdYC
zDNUX8Tsm9YAAHTAFOsc8hpU5WpYyVUqmZoPRlj+MlVwSIJvtBtt6WvazslJz/dF
DVH/qZ1L1Yc/1P/S+laJWfmJmD9y+1wg0ZqNJ7TnqE9Aop7nWC7sk16Q6rYhxSj9
8hOxWEOMsGcISyDdqPg4SKXK9ryWqvnaWFjYOh3WR65Dq7sYfnCT5bHQLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQGF0e7tE150k5lDsfT+61JlpYEMB8GA1UdIwQY
MBaAFBITOmUj4u0KDJo26op8bw5ypd1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWhNNlpTUGk3UW9NbWpicWlueHZEbktsM1dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85MzRlYzMtYjc2YS00MGQwLThhM2Et
ODI0NzI5YWI0YjlhLzEvRWhNNlpTUGk3UW9NbWpicWlueHZEbktsM1dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC85MzRlYzMtYjc2YS00MGQwLThhM2EtODI0NzI5YWI0Yjlh
LzEvRWhNNlpTUGk3UW9NbWpicWlueHZEbktsM1dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMVT6OEj
aGK0ewY+O7ySs/U/FmaWumWAtG0buiJ4aCfLkhPsg08uzd/IjGeue5ShBKtTx24X
Wa2QI3nKeSgaRufRjVa+TYlRTOWzfuAIohNmIbmSw0s5WcakllJB9zNvDGqFlf94
BzjDr9oOSz4qvlJWd24GQN6Gv2FCdoCMxAzrdUNrQfsF8XwqQZ7ysv1pQlEzJnIS
Z93Ti9vGx+xeMYkAjCExu8AkesT9uJRr94b2RCnjajr6YvRjOxoTNL0GVNiKEFUw
J7UF4odVAy99QP42DikMY0du7MhiCIllKCzjMYnVlDzdzmJqSldfUNrocdJ4eThh
qdyCWHI/JcUAPw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:44 2026 by rpki-client