Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
File: EHIerWpFdWQ8twMGLAlodV6Cges.mft (raw, json)
Hash identifier: 7h3M0YUz1mgDonDdyk8rMLi1rpR9gGrBwH5jQOhDbBM=
Subject key identifier: EB:85:F0:6A:D8:03:11:35:02:D2:5A:C0:01:24:F5:A3:47:22:B5:46
Authority key identifier: 10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
Certificate issuer: /CN=10721ead6a4575643cb703062c0968755e8281eb
Certificate serial: 019FA975A85C5BD6B32070C38A0FCC3AB58F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
Manifest number: 1249
Signing time: Tue 28 Jul 2026 16:01:27 +0000
Manifest this update: Tue 28 Jul 2026 16:01:27 +0000
Manifest next update: Wed 29 Jul 2026 16:01:27 +0000
Files and hashes: 1: 1-rET-TrbL0N0PmSCeeqaK3f307A.roa (hash: 3mf7fKWr4vRI4ELzbIBegjtJk+mkQEPMj+4jcV/D7Z4=)
2: EHIerWpFdWQ8twMGLAlodV6Cges.crl (hash: VWIOy3YZ+wf5EC30hVYnO2HhuJ8/QUYA6dtp87VCWyQ=)
3: OYfq_lWnAQ_tUxH83Vafk3m1hAU.roa (hash: jPa4kfq6v0aw3m5eHQ43ps6ZzHtlfC/2MPYqiPwryT8=)
4: OklpCWAYtSxGFSO6LoyURgrDbcQ.roa (hash: 1mSZtPwrR8rsCOpqJ4xfUkwL5UPo6V6cd8N6AZWROk0=)
5: adft9gClh_5cLRsjg_tIKsse5c8.roa (hash: mOJk0iIwfTDt5ixEea0GhZ9TZ+LmcfXcF0RkG7cTHPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:a8:5c:5b:d6:b3:20:70:c3:8a:0f:cc:3a:b5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10721ead6a4575643cb703062c0968755e8281eb
Validity
Not Before: Jul 28 16:01:27 2026 GMT
Not After : Jul 29 16:01:27 2026 GMT
Subject: CN=eb85f06ad803113502d25ac00124f5a34722b546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:42:94:76:e0:56:b2:63:60:60:b3:c0:93:9e:
68:04:45:44:e7:07:dd:97:38:78:47:77:8e:21:0d:
c1:cb:5f:9e:d7:3a:48:b1:7e:82:c1:17:cf:d6:8d:
18:34:08:26:f2:42:67:b0:57:2f:ed:12:11:a4:5f:
2b:78:b0:b4:84:e0:b0:d5:4e:43:68:c1:9b:4b:12:
9e:99:18:41:bc:4a:e6:ad:70:b7:9f:eb:f2:6d:3c:
d3:fa:80:9a:77:93:ed:85:e4:99:ec:72:d2:e4:dd:
bc:95:b8:e2:d4:99:3f:05:8f:1d:19:c1:d9:91:78:
4f:06:76:26:2a:c5:0c:f0:fa:c0:4c:ce:0f:3d:44:
87:92:35:84:7c:ed:f9:27:80:52:ed:a3:9a:54:b3:
6c:5e:2c:d0:cf:56:2b:ea:6c:ce:2b:de:e8:1a:7b:
6e:7f:ff:46:50:f5:6f:80:72:fb:ac:75:c2:2e:a2:
dc:c2:d3:e6:16:0b:b2:bc:fa:99:cc:6f:8d:cb:2e:
ee:f2:a5:cd:d7:fc:00:68:bb:eb:11:34:66:a6:19:
51:24:ae:e0:4f:22:bb:56:30:cb:1d:36:b6:11:d1:
b1:ec:78:3e:f9:34:7d:dd:3f:cb:07:8a:ad:17:fe:
94:c9:91:99:7f:96:90:17:77:e5:06:30:21:3d:cf:
45:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:85:F0:6A:D8:03:11:35:02:D2:5A:C0:01:24:F5:A3:47:22:B5:46
X509v3 Authority Key Identifier:
keyid:10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:bc:cc:29:5c:ef:77:43:85:59:ba:6d:14:68:91:12:fb:ba:
eb:1a:3c:32:53:58:5c:58:82:90:6c:ff:36:0e:f4:38:b2:84:
7c:7e:64:db:21:fc:16:4e:c9:84:de:dd:00:d7:ee:42:60:ce:
0d:6c:80:ac:a8:4b:34:e0:98:d7:15:1c:bd:70:5c:ff:6d:75:
c1:5f:ad:54:76:3a:ed:16:c1:d1:c1:33:60:03:36:d4:4b:8c:
14:31:15:2b:5d:9a:99:79:6b:37:e7:56:26:87:01:86:6f:3f:
af:3c:3a:54:12:0a:57:48:f2:ff:f0:dd:64:ef:34:a6:1c:a4:
c7:7e:f7:55:31:ed:75:ee:e3:f5:86:22:4e:2d:62:dc:4d:a5:
bb:db:cc:48:db:15:5d:81:97:ff:09:02:ae:fb:78:89:cd:d0:
bb:c2:dd:b1:6a:95:8b:f5:3a:04:3e:53:3f:ca:69:f9:bc:b4:
97:39:a0:e1:0a:6b:24:25:3a:4d:ee:42:55:60:17:ba:64:b5:
0b:ea:c9:e4:a7:f9:28:0f:21:e5:c4:f0:13:2f:a4:84:48:d0:
41:d4:52:52:fd:16:58:c2:00:f3:55:86:81:35:82:83:7b:46:
79:4c:cf:cb:6f:a3:2f:1a:71:5b:2b:d3:0c:19:5c:c7:a3:2b:
08:ba:d2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:51:58 2026 by rpki-client