Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
File: EHWcamLieNqDEa_sj3Z3xBNj0fg.mft (raw, json)
Hash identifier: 6tfAtCIGLdRJovxrg0iQ/WV3QjJfIUC8qeeS2HpWdKo=
Subject key identifier: DD:C1:24:BD:86:D2:B4:74:B9:68:C7:69:97:88:0E:EF:60:AA:FA:B4
Authority key identifier: 10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8
Certificate issuer: /CN=10759c6a62e278da8311afec8f7677c41363d1f8
Certificate serial: 019CAA8F8CD61BEE91D0D4929751100580ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
Manifest number: 06EC
Signing time: Sun 01 Mar 2026 18:01:00 +0000
Manifest this update: Sun 01 Mar 2026 18:01:00 +0000
Manifest next update: Mon 02 Mar 2026 18:01:00 +0000
Files and hashes: 1: EHWcamLieNqDEa_sj3Z3xBNj0fg.crl (hash: O3zZediC4dwSjlbpa2vK9k5UhlfOCZN2LZQVjff8IoE=)
2: WzghRqzGjI_eG3WiC84nx-l-Aus.roa (hash: BkSKCwkOQoqJmPqml1/0+ldKWjkL69DMpw0CtVVRSPA=)
3: mHoBt9PDNYSmvIbOtBMkSD1EeQc.roa (hash: NyFP79wSko1G5ztyYBa7m1r2+XgRX6VCVkCRadeTppY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:8c:d6:1b:ee:91:d0:d4:92:97:51:10:05:80:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10759c6a62e278da8311afec8f7677c41363d1f8
Validity
Not Before: Mar 1 18:01:00 2026 GMT
Not After : Mar 2 18:01:00 2026 GMT
Subject: CN=ddc124bd86d2b474b968c76997880eef60aafab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a4:da:24:31:9e:ac:6c:63:8d:c8:a1:aa:a5:
e2:45:8e:ac:9a:e1:2d:4f:a1:35:c8:a6:d7:5a:c1:
47:25:d7:a5:56:a4:95:a7:52:9c:41:0d:07:5d:22:
cf:6d:d1:b9:b0:2f:e7:1a:b7:d1:20:8c:66:4b:4b:
14:d1:22:de:0c:85:c7:46:46:02:d4:9c:e7:0d:2c:
71:53:df:af:0a:ca:7e:83:65:50:30:d6:04:ec:0d:
d4:eb:0e:48:92:23:2f:a3:ac:e9:35:8d:ff:aa:f9:
0a:78:b2:13:57:f1:d0:a1:0f:8b:5b:5f:d5:8a:a7:
b2:8c:d5:0d:30:76:29:67:a1:0e:cb:8a:e0:c6:31:
5a:14:99:84:cc:c9:e3:b1:22:a9:85:7a:c3:b0:18:
a4:b8:46:20:0f:44:ec:d1:50:5c:30:ef:99:d5:d8:
53:5f:5f:9e:d8:31:dd:08:f8:31:ed:1d:ee:bc:d9:
9f:6a:38:64:9b:38:a4:fb:ec:ff:6e:92:a0:11:60:
79:a7:d0:5f:53:61:02:c0:8c:4c:8f:a5:a2:1b:5d:
5b:98:6f:0c:45:b0:c5:63:e6:ca:6c:cd:3f:93:66:
ea:25:6e:b0:d0:7b:d2:06:70:12:3e:f4:57:ff:88:
5f:ef:3c:4e:9a:9f:8d:0a:55:36:b9:c8:ee:13:b8:
d2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C1:24:BD:86:D2:B4:74:B9:68:C7:69:97:88:0E:EF:60:AA:FA:B4
X509v3 Authority Key Identifier:
keyid:10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:54:da:27:0d:40:bb:2d:51:b5:d9:cf:ed:a8:6d:db:df:0d:
81:42:a7:f5:2e:e5:87:d1:6b:59:7f:cf:03:d4:81:79:c0:a2:
bd:e6:36:56:47:0a:44:bc:19:4f:d5:4c:0d:54:c6:d6:3d:dc:
40:9a:a4:3c:19:44:de:47:c9:1f:f8:99:76:b2:74:1b:3a:b3:
f5:74:bd:8f:ec:d3:5b:21:34:f2:e0:f2:60:10:0f:99:8f:15:
43:39:3a:5d:8f:f6:f5:02:9a:b1:69:18:67:3f:10:e8:69:bd:
84:2b:98:38:a9:11:81:d4:2a:f6:3e:76:2a:10:c7:a9:11:1a:
1d:45:d4:af:5b:cd:ab:1f:7c:da:65:42:c2:0b:a8:05:5b:83:
b0:45:a9:3e:70:97:82:9d:5b:b7:34:22:f3:c3:6c:25:8f:93:
aa:49:62:d6:98:9f:60:4c:c8:23:91:10:c8:72:d7:6a:60:9f:
d9:da:2f:c4:23:38:29:1a:38:7a:f6:33:9c:c8:a0:ba:11:ea:
a9:32:bf:5e:2d:39:83:1c:b0:30:bf:97:e9:4a:9b:cd:a3:bb:
b4:62:fc:11:0a:2e:5e:f8:9d:c0:24:b9:18:ca:d3:b3:e5:b3:
e7:e7:2f:88:14:5a:cc:5a:dd:0b:7f:93:c0:a1:41:69:8d:2f:
ac:3f:8e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:33 2026 by rpki-client