
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
File: EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft (raw, json)
Hash identifier: 8Ine7Fdoy6eoUNvtNi6jgFthhXKqgV/FibmBcEJp5gM=
Subject key identifier: 90:04:8D:69:CC:33:B1:4D:86:0E:EA:59:0D:7F:2C:A8:06:83:14:25
Authority key identifier: 12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64
Certificate issuer: /CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64
Certificate serial: 019DA2D316C59B3483394C5FF00EE8551C8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
Manifest number: 09C7
Signing time: Sat 18 Apr 2026 23:00:36 +0000
Manifest this update: Sat 18 Apr 2026 23:00:36 +0000
Manifest next update: Sun 19 Apr 2026 23:00:36 +0000
Files and hashes: 1: EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl (hash: QzKQrWzjxpjlTAP+lBS072QNclRpuF+1iX7JiaMX8O8=)
2: zY6-TSsM-n0cGeuR4MC7O4QKpZU.roa (hash: pDF4f+98qM6dWbtI9D665+bMv7kt2epaA+MQQ2O8Qdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:16:c5:9b:34:83:39:4c:5f:f0:0e:e8:55:1c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64
Validity
Not Before: Apr 18 23:00:36 2026 GMT
Not After : Apr 19 23:00:36 2026 GMT
Subject: CN=90048d69cc33b14d860eea590d7f2ca806831425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c8:08:5e:e8:6d:b7:2c:0f:e8:fb:f7:cb:4d:
cd:99:04:b4:7d:e3:85:2b:1e:49:d9:8a:4e:80:ea:
5f:b1:2a:fa:17:3c:e7:77:55:5b:e3:bd:35:33:e6:
79:7e:f3:55:ff:aa:b0:a4:c7:a3:c9:b0:b4:84:7b:
77:84:01:b7:c0:d8:d0:1b:93:13:f6:3c:c6:c1:37:
91:49:d9:fb:33:78:b0:58:44:8f:b4:6c:dc:1c:f7:
c4:83:78:3e:92:77:9e:1f:54:41:6d:e1:1e:67:1a:
b5:01:14:c9:a7:6a:6a:7e:6d:6e:ff:98:e6:8d:8b:
62:5c:ca:f4:c3:eb:80:34:0e:59:07:5f:30:20:94:
99:20:44:23:6d:de:3d:39:0f:e9:93:d9:6f:2f:d4:
6e:3d:c9:b7:33:c4:f6:4d:75:8a:49:b5:30:54:ac:
8b:6c:b4:73:15:ea:d2:ce:65:00:9c:34:4c:3c:44:
1e:ae:04:8e:8b:7f:63:e6:44:b5:12:1d:e4:86:48:
48:e1:b5:9c:69:5a:d5:f7:45:3b:ee:10:01:92:3f:
76:2f:c1:34:13:b2:2b:0e:d1:7c:6f:eb:e2:b0:52:
e7:a4:6a:60:a9:86:af:3a:b6:5d:1c:52:42:a5:7c:
ee:7e:30:e4:74:88:0b:85:3e:d5:23:02:f3:e7:6b:
a6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:04:8D:69:CC:33:B1:4D:86:0E:EA:59:0D:7F:2C:A8:06:83:14:25
X509v3 Authority Key Identifier:
keyid:12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:15:c0:e6:3b:0a:44:58:2e:ad:a9:93:0c:5f:fb:a5:f2:3d:
68:b8:bd:de:02:7b:e0:af:2a:8c:64:c2:f4:77:86:18:2c:03:
fc:5a:5b:15:0c:34:d1:0a:ae:c4:b6:5b:28:12:0e:3e:2d:c8:
9f:2f:1d:85:ba:b5:a0:1a:3b:ae:4e:f8:b2:ce:f5:d5:c3:99:
39:b2:6d:ad:3e:b0:fd:7e:bc:1c:95:a3:00:a9:29:2e:83:42:
a6:db:f5:a7:6c:56:6b:08:ac:a7:af:0a:31:00:fb:53:e5:d9:
cb:e9:ec:47:ae:34:5c:34:92:d8:cf:27:8b:01:19:59:54:6d:
10:27:0f:54:fa:11:16:5d:10:50:5d:f8:54:e7:33:29:a6:57:
83:72:57:c6:32:d6:96:88:ba:f8:b6:a8:a3:f8:26:d1:1f:47:
45:33:6e:e3:0d:95:cb:70:26:d9:05:1f:be:3d:ae:1b:3f:4e:
55:45:d4:d4:ec:ea:53:29:b7:2a:55:06:45:38:59:4b:93:50:
18:51:49:30:e3:31:ea:05:78:b4:9c:36:23:7b:9a:27:24:f2:
0b:c2:f5:fa:3c:07:a4:67:07:97:11:e4:ee:a8:fe:2e:20:3a:
c9:21:66:a6:00:f4:da:55:5b:94:19:cb:00:6e:d8:a1:6b:38:
44:42:1b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:28:58 2026 by rpki-client