Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
File: EharzETJqVVAzfWx3FQux9Ef4Ho.mft (raw, json)
Hash identifier: 7Noa7fAXvkOx5nFYptC1a+xt89jpqv/D+yGRFA6rJXY=
Subject key identifier: BD:0F:94:CA:1E:55:E6:D9:F2:5E:86:B5:C5:2D:34:55:FD:BF:01:31
Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
Certificate issuer: /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Certificate serial: 019D9A3E0B2FF015134D5482D13D3CFADBBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
Manifest number: 03DE
Signing time: Fri 17 Apr 2026 07:00:50 +0000
Manifest this update: Fri 17 Apr 2026 07:00:50 +0000
Manifest next update: Sat 18 Apr 2026 07:00:50 +0000
Files and hashes: 1: 9V3S7FKC66AOlqD78_S81truyog.roa (hash: zjtnM6n3Uet2Hry92cMihIwePJR9odotoqz4FTgtQpQ=)
2: EharzETJqVVAzfWx3FQux9Ef4Ho.crl (hash: GamLMlXtOXa58+392nBSqWknC0T8YkZJcw6oPIflhQI=)
3: Q89cC5EdEYVsTAR7wEMR5rmM-FA.roa (hash: IpAEUAQrDRw1Avy4gtoYvc+jdCy+th+rhrs9OezDlo8=)
4: R6vEKMp8XV0nRsp07cf4y7I04qo.roa (hash: nWBD/KxL+ZqMUbvdWaWo1r7/2jynLrCSHLN52H6UCwM=)
5: XGUIHnWF_LunuxvNcMmR57_WKzo.roa (hash: Gg+yICFewOrJllU9keGQjZ8+O9tNzguLLKLqMVLJpjs=)
6: b1NnfX82WWUKnDzO-T_p9BDnjPM.roa (hash: uuhxZnIOVP3yGkI2POwoZpysQSXnT6B0qJNkc7bJXFw=)
7: fYJN56gNpyjk6FeN9g2u8kda_Ck.roa (hash: 0Bz6iRQD5arZ6ysTUfpQvVjP86yHCsoWY8uCR19q2k4=)
8: iTrKyBgs_fihjw2gMNeMi35dTSA.roa (hash: zNTMLDdPTDqmLO0jhMMrsQBD6z1cOUxn49L1ph7eXpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:0b:2f:f0:15:13:4d:54:82:d1:3d:3c:fa:db:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Validity
Not Before: Apr 17 07:00:50 2026 GMT
Not After : Apr 18 07:00:50 2026 GMT
Subject: CN=bd0f94ca1e55e6d9f25e86b5c52d3455fdbf0131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:13:e3:80:1e:59:7a:a2:4c:ac:dc:7d:a2:35:
52:a6:a2:87:58:2f:76:d1:58:bb:ee:8d:4b:45:1e:
23:9e:84:53:33:9b:f9:cc:d3:00:08:98:f5:87:10:
d8:7c:fe:4c:f2:1f:d2:4a:61:49:c5:aa:02:0a:d3:
a4:75:6f:0e:32:1f:c5:24:6a:50:6a:dc:29:8b:af:
6d:ed:0f:71:61:d6:60:87:ff:cf:3d:f2:06:b3:13:
35:1b:59:b4:01:25:a9:d6:6f:00:9d:1d:b2:e4:cb:
0c:aa:92:58:35:43:4b:52:27:0f:8f:ed:df:7a:0f:
71:6c:73:91:ba:8d:69:a3:d2:94:09:63:74:fa:6c:
9c:aa:45:44:b9:69:a4:02:5f:44:02:7e:8d:72:17:
2c:dc:15:13:9c:21:91:2b:18:7a:00:21:55:8d:03:
40:69:9a:da:68:45:8f:1f:5d:59:14:a6:d5:62:10:
99:15:8c:e8:2d:62:34:0a:6f:cf:13:23:83:47:93:
3f:6c:84:26:81:3b:68:22:1e:83:dc:3e:28:c4:70:
0e:e4:bb:4d:cb:d5:ad:a2:c7:24:5e:e5:d2:6a:63:
76:d1:9d:d9:eb:01:14:5c:06:03:b8:a6:3d:09:c2:
ee:7d:34:ff:d2:fe:7d:05:d3:d5:a9:5d:aa:41:87:
38:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0F:94:CA:1E:55:E6:D9:F2:5E:86:B5:C5:2D:34:55:FD:BF:01:31
X509v3 Authority Key Identifier:
keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:af:15:44:69:3f:0d:78:bf:05:69:73:cb:55:28:9e:ad:32:
6a:1c:81:67:73:3f:ab:c8:9a:12:b1:31:72:7c:d8:65:d9:c1:
a2:17:19:e2:22:88:ba:b0:c3:ef:29:f7:42:0d:f0:ba:a5:89:
b5:e4:80:36:9a:b2:f5:27:ed:12:7d:80:12:94:1b:63:c9:cc:
06:ef:6a:8f:9a:d0:79:91:d9:3a:e6:8f:95:f6:ef:94:66:34:
8e:c7:df:e0:1f:28:9a:65:6e:fe:aa:24:11:db:66:1b:4f:fa:
0f:5f:50:13:78:73:6c:0f:f1:52:0c:e9:a3:88:ae:97:d0:96:
25:af:92:00:df:20:f3:83:39:f6:73:4d:29:db:f2:a1:e7:a5:
4b:51:e1:85:eb:c1:14:29:a5:22:c5:41:00:34:c8:29:c5:48:
02:d0:b3:31:7e:30:83:53:8a:a8:a7:b4:23:28:d7:54:0b:a2:
8d:fa:fd:a3:bf:19:22:94:8b:39:7e:bc:ec:bf:3e:ee:36:ab:
d0:07:f2:7e:31:3e:8c:6f:71:e3:2b:2a:9a:95:e9:0e:29:24:
4c:14:e6:77:a4:8b:d5:03:75:36:c8:59:1f:cd:0e:5c:af:bb:
42:39:b6:d0:61:6d:82:4c:ef:bd:8f:f8:03:68:e8:3f:af:e0:
6e:d9:2f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:39:41 2026 by rpki-client