Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
File: EharzETJqVVAzfWx3FQux9Ef4Ho.mft (raw, json)
Hash identifier: 36H32U5a2m7wwEH+3Ur+lt4K9z+DZS2gkg+L6Sqd/Bk=
Subject key identifier: 39:D7:62:20:D4:D8:AC:DB:1E:29:9D:53:24:11:44:55:FE:D8:C7:FC
Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
Certificate issuer: /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Certificate serial: 019CA8D88337C6F822FD49D3D08396286BAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
Manifest number: 0361
Signing time: Sun 01 Mar 2026 10:01:27 +0000
Manifest this update: Sun 01 Mar 2026 10:01:27 +0000
Manifest next update: Mon 02 Mar 2026 10:01:27 +0000
Files and hashes: 1: 9V3S7FKC66AOlqD78_S81truyog.roa (hash: zjtnM6n3Uet2Hry92cMihIwePJR9odotoqz4FTgtQpQ=)
2: EharzETJqVVAzfWx3FQux9Ef4Ho.crl (hash: eU9JCMhMM2uLxuDhMZE7YvvznkONIaWZb62/n57mSO0=)
3: Q89cC5EdEYVsTAR7wEMR5rmM-FA.roa (hash: IpAEUAQrDRw1Avy4gtoYvc+jdCy+th+rhrs9OezDlo8=)
4: R6vEKMp8XV0nRsp07cf4y7I04qo.roa (hash: nWBD/KxL+ZqMUbvdWaWo1r7/2jynLrCSHLN52H6UCwM=)
5: XGUIHnWF_LunuxvNcMmR57_WKzo.roa (hash: Gg+yICFewOrJllU9keGQjZ8+O9tNzguLLKLqMVLJpjs=)
6: b1NnfX82WWUKnDzO-T_p9BDnjPM.roa (hash: uuhxZnIOVP3yGkI2POwoZpysQSXnT6B0qJNkc7bJXFw=)
7: fYJN56gNpyjk6FeN9g2u8kda_Ck.roa (hash: 0Bz6iRQD5arZ6ysTUfpQvVjP86yHCsoWY8uCR19q2k4=)
8: iTrKyBgs_fihjw2gMNeMi35dTSA.roa (hash: zNTMLDdPTDqmLO0jhMMrsQBD6z1cOUxn49L1ph7eXpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d8:83:37:c6:f8:22:fd:49:d3:d0:83:96:28:6b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Validity
Not Before: Mar 1 10:01:27 2026 GMT
Not After : Mar 2 10:01:27 2026 GMT
Subject: CN=39d76220d4d8acdb1e299d5324114455fed8c7fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d3:1c:67:af:47:a6:d2:8c:34:6b:28:1f:f7:
ad:23:0b:61:92:35:d5:47:f9:8c:c7:d1:bd:4e:40:
36:6b:4b:e3:64:15:cb:1f:6b:cf:46:5f:aa:2f:7f:
fd:fa:0c:16:50:2c:ec:31:a4:9b:30:42:65:3d:37:
5d:e2:b3:3f:77:4d:b8:72:ca:9b:ec:29:66:1a:98:
1f:23:93:8c:3e:b7:56:13:09:72:fd:dc:ca:e2:12:
00:a1:4a:42:af:11:3a:29:05:5e:dc:2a:a5:eb:4f:
f9:96:05:47:9a:f6:96:e9:af:e5:67:28:ca:d7:de:
61:12:03:b5:b5:1e:28:ad:65:6e:86:c0:1e:5c:72:
bc:2c:83:77:f8:4c:be:82:c7:66:aa:ec:91:b2:08:
4d:3a:b0:30:dc:bb:64:0d:a7:31:ca:7d:22:fc:db:
0e:67:d7:ea:95:1d:72:8c:82:69:6e:db:85:98:9f:
85:c1:4d:89:77:de:bc:ec:97:8d:13:c7:3e:0f:2b:
5c:2a:bf:7d:36:81:c3:6c:30:27:91:2f:d6:d1:e0:
74:c7:40:00:34:e7:fb:64:69:e2:7c:74:8f:9e:56:
e6:28:3c:16:ea:ea:4d:8e:52:c3:be:2c:3b:25:cb:
d5:a2:6e:e5:f2:fe:12:e7:57:33:1c:fc:db:e5:44:
cd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D7:62:20:D4:D8:AC:DB:1E:29:9D:53:24:11:44:55:FE:D8:C7:FC
X509v3 Authority Key Identifier:
keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:10:6a:08:ee:95:8f:f3:2e:69:16:5d:9a:87:ec:d5:3a:98:
cb:df:67:d7:91:ae:5c:02:ec:a1:d6:5f:1f:f0:89:39:4c:1e:
6b:64:9d:24:11:26:11:1d:f3:7b:fc:f6:d8:17:32:1d:bc:b8:
34:dc:27:73:f0:a4:e4:a7:11:be:89:14:10:f9:42:34:83:a1:
12:b5:86:9f:8f:c0:8d:e2:78:cb:0e:22:d1:b3:28:f8:f7:76:
a5:6b:7a:a4:4f:1d:36:47:a0:c4:ba:b3:77:24:e2:5c:37:8c:
59:8c:55:7a:07:4f:ba:10:b9:db:f7:e7:49:ff:78:d4:35:70:
c8:ec:4e:14:23:57:da:2c:60:60:7f:94:07:29:59:58:8d:fc:
f5:37:f0:93:30:62:e1:42:5a:e9:9d:59:aa:ff:3a:10:4e:62:
cb:5e:95:53:85:a6:db:2f:5b:d5:84:df:97:b8:6f:50:36:ff:
3f:a5:1b:2e:03:c2:11:5e:4e:6b:b0:fe:b3:92:cf:43:bc:66:
92:af:06:1c:bc:6d:c5:15:f7:57:29:b1:bd:14:da:ef:21:42:
4c:eb:8d:b4:bc:bd:41:7c:be:ad:5b:f7:0a:2a:59:85:10:2e:
62:be:d2:da:97:eb:84:43:29:92:fc:46:d0:d0:e7:c9:68:9b:
8a:8e:d0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:02:13 2026 by rpki-client