Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft
File: EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft (raw, json)
Hash identifier: nQ8UuTvroFFEtaS1EIIfZTZzEaS+p6GAj6MpyDGGo8o=
Subject key identifier: 67:14:F5:C6:5B:E1:CF:49:1D:52:61:4A:51:69:4E:5C:6B:13:CC:CA
Authority key identifier: 10:79:7E:B5:F9:AA:9A:BE:52:00:8C:E7:F2:1A:B4:4A:FD:EE:A0:D0
Certificate issuer: /CN=10797eb5f9aa9abe52008ce7f21ab44afdeea0d0
Certificate serial: 019FAA883C3A4EFCAA102E9CEB9414EB20BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft
Manifest number: 19CF
Signing time: Tue 28 Jul 2026 21:01:22 +0000
Manifest this update: Tue 28 Jul 2026 21:01:22 +0000
Manifest next update: Wed 29 Jul 2026 21:01:22 +0000
Files and hashes: 1: EHl-tfmqmr5SAIzn8hq0Sv3uoNA.crl (hash: xlVg5U+ernevDuMfWBD7v/3Y8vXXchagXTB6HL5rvOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:3c:3a:4e:fc:aa:10:2e:9c:eb:94:14:eb:20:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10797eb5f9aa9abe52008ce7f21ab44afdeea0d0
Validity
Not Before: Jul 28 21:01:22 2026 GMT
Not After : Jul 29 21:01:22 2026 GMT
Subject: CN=6714f5c65be1cf491d52614a51694e5c6b13ccca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ac:3e:0b:42:a9:fe:2b:d0:a3:f8:69:93:fb:
4d:ca:5f:94:cc:d6:5a:59:a3:13:2c:56:bd:b5:8c:
92:52:6e:dd:12:08:6b:13:bb:fc:ba:9b:ab:ca:b5:
5d:6d:2a:9c:9a:40:99:18:73:f4:59:74:e7:b7:50:
9b:e9:eb:73:dc:c9:d0:0b:19:de:bf:ee:c9:9f:a6:
d0:7d:41:15:85:2d:94:92:4e:23:d6:45:99:3a:fa:
c5:4b:31:90:b8:b5:ee:7c:cc:7a:64:e2:24:1e:6f:
9b:41:d2:15:1b:66:82:73:4f:1a:b7:72:e7:6a:95:
f5:90:fa:30:ff:6a:ff:ad:7f:08:2d:e0:e4:70:20:
b9:28:c7:c4:c6:65:6d:16:ce:aa:89:a8:02:79:16:
c6:e1:10:6b:b4:76:7d:a5:9d:5b:f4:f6:04:1d:f7:
97:34:4d:12:ca:ff:87:52:99:e0:57:1b:53:57:4c:
3e:a2:61:f3:a8:03:44:a0:9a:ba:3a:0a:6c:ad:7a:
03:85:06:48:af:c5:33:b6:32:af:15:71:e0:65:84:
54:06:54:9e:98:01:7c:96:96:c4:61:77:fb:75:a7:
54:68:93:5f:89:b3:80:f6:a5:98:84:38:7a:63:03:
f3:ba:58:05:12:91:62:f0:14:91:b4:5b:27:d0:4c:
7d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:14:F5:C6:5B:E1:CF:49:1D:52:61:4A:51:69:4E:5C:6B:13:CC:CA
X509v3 Authority Key Identifier:
keyid:10:79:7E:B5:F9:AA:9A:BE:52:00:8C:E7:F2:1A:B4:4A:FD:EE:A0:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:48:3a:f2:e5:6e:3e:83:69:b3:30:1f:5f:1c:0f:36:04:ba:
f8:3c:53:df:eb:33:4e:d2:d8:44:54:67:12:1c:a2:1a:81:9e:
b1:bc:f4:48:07:c0:54:5f:52:f3:2d:ea:8a:e5:4b:f7:d6:ad:
9c:8e:d7:02:22:0e:76:40:b1:fa:e5:18:35:3e:cb:07:b2:e6:
ce:9d:78:f1:48:7b:7f:76:48:32:ac:31:3c:1b:20:c5:03:47:
6b:20:67:59:46:f7:2f:e1:49:5e:c6:59:bf:fc:5c:81:09:cb:
b7:80:c1:a9:11:ec:a2:5d:cd:fb:ae:ea:93:4a:a9:0c:e6:6d:
8e:5b:b1:23:0f:cd:b8:23:83:ac:85:ae:2b:3f:71:28:09:17:
07:65:be:34:57:cd:e9:e2:be:4e:23:b0:49:7b:af:eb:d8:35:
e7:57:b7:d3:7d:42:51:6f:22:2c:e0:7b:7a:c2:47:4d:1b:41:
81:35:dc:69:56:5b:91:17:3c:70:63:ef:7f:b1:61:0f:b4:3c:
4f:a7:5b:5b:a3:6b:ca:87:f1:5c:e2:7a:b9:67:7e:9a:01:08:
62:bf:26:42:fa:24:5e:5c:57:89:a0:11:b3:61:37:76:cc:ca:
d8:8a:be:1e:ef:04:4a:db:b9:f9:08:68:17:08:c4:31:c7:6c:
3a:c7:90:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiDw6TvyqEC6c65QU6yC9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzk3ZWI1ZjlhYTlhYmU1MjAwOGNlN2YyMWFiNDRhZmRl
ZWEwZDAwHhcNMjYwNzI4MjEwMTIyWhcNMjYwNzI5MjEwMTIyWjAzMTEwLwYDVQQD
Eyg2NzE0ZjVjNjViZTFjZjQ5MWQ1MjYxNGE1MTY5NGU1YzZiMTNjY2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqw+C0Kp/ivQo/hpk/tNyl+UzNZa
WaMTLFa9tYySUm7dEghrE7v8upuryrVdbSqcmkCZGHP0WXTnt1Cb6etz3MnQCxne
v+7Jn6bQfUEVhS2Ukk4j1kWZOvrFSzGQuLXufMx6ZOIkHm+bQdIVG2aCc08at3Ln
apX1kPow/2r/rX8ILeDkcCC5KMfExmVtFs6qiagCeRbG4RBrtHZ9pZ1b9PYEHfeX
NE0Syv+HUpngVxtTV0w+omHzqANEoJq6OgpsrXoDhQZIr8UztjKvFXHgZYRUBlSe
mAF8lpbEYXf7dadUaJNfibOA9qWYhDh6YwPzulgFEpFi8BSRtFsn0Ex9KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcU9cZb4c9JHVJhSlFpTlxrE8zKMB8GA1UdIwQY
MBaAFBB5frX5qpq+UgCM5/IatEr97qDQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhsLXRmbXFtcjVTQUl6bjhocTBTdjN1b05BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mNWM4YTMtZTVjYS00MWFlLWFmOGEt
OGRiNzA4MzQ3NDM4LzEvRUhsLXRmbXFtcjVTQUl6bjhocTBTdjN1b05BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9mNWM4YTMtZTVjYS00MWFlLWFmOGEtOGRiNzA4MzQ3NDM4
LzEvRUhsLXRmbXFtcjVTQUl6bjhocTBTdjN1b05BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkkg68uVu
PoNpszAfXxwPNgS6+DxT3+szTtLYRFRnEhyiGoGesbz0SAfAVF9S8y3qiuVL99at
nI7XAiIOdkCx+uUYNT7LB7Lmzp148Uh7f3ZIMqwxPBsgxQNHayBnWUb3L+FJXsZZ
v/xcgQnLt4DBqRHsol3N+67qk0qpDOZtjluxIw/NuCODrIWuKz9xKAkXB2W+NFfN
6eK+TiOwSXuv69g151e3031CUW8iLOB7esJHTRtBgTXcaVZbkRc8cGPvf7FhD7Q8
T6dbW6NryofxXOJ6uWd+mgEIYr8mQvokXlxXiaARs2E3dszK2Iq+Hu8EStu5+Qho
FwjEMcdsOseQUQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:41:28 2026 by rpki-client