Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
File: EharzETJqVVAzfWx3FQux9Ef4Ho.mft (raw, json)
Hash identifier: 1t+4WOSd6y8tN/CARFRgGvBUpU5fltmv20ODlUlGD6g=
Subject key identifier: DB:A7:68:3D:81:19:65:60:EE:74:1A:08:F4:4D:B6:1F:B5:63:49:16
Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
Certificate issuer: /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Certificate serial: 019FAB63308CFF6E7F18C84BFF27003CC391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
Manifest number: 04F0
Signing time: Wed 29 Jul 2026 01:00:32 +0000
Manifest this update: Wed 29 Jul 2026 01:00:32 +0000
Manifest next update: Thu 30 Jul 2026 01:00:32 +0000
Files and hashes: 1: 9V3S7FKC66AOlqD78_S81truyog.roa (hash: zjtnM6n3Uet2Hry92cMihIwePJR9odotoqz4FTgtQpQ=)
2: EharzETJqVVAzfWx3FQux9Ef4Ho.crl (hash: b5ielSwv+LWWqZxVr9R7x+I9W+ZbiBL5gVMp/FcWl+Q=)
3: Q89cC5EdEYVsTAR7wEMR5rmM-FA.roa (hash: IpAEUAQrDRw1Avy4gtoYvc+jdCy+th+rhrs9OezDlo8=)
4: R6vEKMp8XV0nRsp07cf4y7I04qo.roa (hash: nWBD/KxL+ZqMUbvdWaWo1r7/2jynLrCSHLN52H6UCwM=)
5: XGUIHnWF_LunuxvNcMmR57_WKzo.roa (hash: Gg+yICFewOrJllU9keGQjZ8+O9tNzguLLKLqMVLJpjs=)
6: b1NnfX82WWUKnDzO-T_p9BDnjPM.roa (hash: uuhxZnIOVP3yGkI2POwoZpysQSXnT6B0qJNkc7bJXFw=)
7: fYJN56gNpyjk6FeN9g2u8kda_Ck.roa (hash: 0Bz6iRQD5arZ6ysTUfpQvVjP86yHCsoWY8uCR19q2k4=)
8: iTrKyBgs_fihjw2gMNeMi35dTSA.roa (hash: zNTMLDdPTDqmLO0jhMMrsQBD6z1cOUxn49L1ph7eXpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:30:8c:ff:6e:7f:18:c8:4b:ff:27:00:3c:c3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Validity
Not Before: Jul 29 01:00:32 2026 GMT
Not After : Jul 30 01:00:32 2026 GMT
Subject: CN=dba7683d81196560ee741a08f44db61fb5634916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:17:d4:62:bc:75:62:1c:6f:90:32:4d:0b:0a:
4a:41:ad:e3:f5:5a:d3:12:fe:9e:d6:93:d4:40:2b:
ab:fe:93:f2:b2:6f:8b:d6:2c:a8:f6:e2:cf:93:32:
bb:97:36:be:9a:a7:63:86:4e:b7:97:d1:d4:e4:60:
a6:b7:54:1a:1a:7b:3d:4a:82:60:23:c9:06:b1:b5:
9e:42:5f:6d:cf:8d:a2:06:9a:79:70:b9:07:af:53:
bb:a0:b8:36:17:0a:75:28:4c:68:a9:f0:5a:4a:b8:
f5:e6:41:79:61:0a:9f:ea:20:59:b1:e5:07:8d:c0:
8d:e5:19:8d:61:ac:ac:09:45:8a:c7:07:0b:3d:29:
51:8b:22:e0:34:c3:b8:cb:29:e2:41:73:26:60:8e:
c9:cb:30:d6:56:f4:91:d2:b4:87:20:35:6d:92:94:
d0:28:ae:1d:61:fd:1b:27:6b:6f:ab:8b:77:db:c7:
21:59:e4:2b:db:5e:47:89:b7:a1:c0:6e:b4:9e:bb:
1c:5f:0d:a0:e5:50:c5:4d:00:66:51:cf:e0:a3:ca:
3a:74:d7:28:3e:52:a4:fc:90:28:e8:8a:4c:a0:70:
83:82:57:0b:4f:e3:85:7d:e9:04:8e:c7:79:37:3f:
9f:07:5d:fb:6d:0b:2d:8e:ea:94:77:f6:38:80:bf:
92:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A7:68:3D:81:19:65:60:EE:74:1A:08:F4:4D:B6:1F:B5:63:49:16
X509v3 Authority Key Identifier:
keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:0b:7e:3b:d2:a2:7d:e7:d7:6a:4b:cb:5f:cd:88:ac:90:be:
3f:cb:71:0b:2e:02:41:51:1d:54:7d:9e:f4:47:b8:3b:6f:f0:
2c:50:5a:69:29:73:3c:91:9d:36:dd:2c:a7:d2:27:fc:8a:3b:
5c:20:df:61:36:13:08:17:a3:33:e5:da:12:37:06:fd:d5:40:
e3:33:3f:e1:95:40:d9:ab:bd:26:84:06:1e:10:12:2c:fc:2c:
09:da:0c:8e:0a:23:79:0e:6c:8d:31:77:38:0f:0d:21:eb:84:
17:6c:e3:11:3a:89:18:42:b5:a8:6d:a9:04:9d:d4:46:09:84:
31:22:e6:4e:dc:90:80:78:b1:4e:63:80:6d:4b:fa:28:dd:19:
9c:d4:4c:f8:80:8e:ed:d7:8c:81:23:d6:6b:1c:79:2c:9d:bd:
33:1d:f6:a0:b5:d3:12:d6:3e:e7:a1:7e:fb:07:b1:28:8f:42:
53:93:8b:c6:60:7f:60:b6:1d:29:06:e5:58:79:5a:76:31:a4:
20:5b:4b:22:a0:5b:ca:ee:f8:f8:43:a2:dd:d7:e8:71:03:82:
ae:e7:88:81:40:80:21:8b:71:3c:1d:23:d0:44:0f:8a:ef:f6:
be:af:0d:be:90:15:f2:48:0d:90:95:22:60:fc:a1:f0:04:6e:
2d:bd:6f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:32:46 2026 by rpki-client