Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
File: EHIerWpFdWQ8twMGLAlodV6Cges.mft (raw, json)
Hash identifier: kN5ZmhtpR2APUE5zr3v9YoGMe9X2N3eSd5df0a6Ktok=
Subject key identifier: EB:13:6B:5A:5A:70:77:11:8D:1D:97:22:68:A6:5A:9C:38:11:F5:21
Authority key identifier: 10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
Certificate issuer: /CN=10721ead6a4575643cb703062c0968755e8281eb
Certificate serial: 019CACB4E0E404D1786C6C1A0ECBFFE15248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
Manifest number: 10BB
Signing time: Mon 02 Mar 2026 04:01:00 +0000
Manifest this update: Mon 02 Mar 2026 04:01:00 +0000
Manifest next update: Tue 03 Mar 2026 04:01:00 +0000
Files and hashes: 1: EHIerWpFdWQ8twMGLAlodV6Cges.crl (hash: bQlK4z1hiKR0/D74M3afY5ewTAP0TMSgsC5MjgEwSWE=)
2: Im1hsaO2oTHkZ-z1x6BH4qOQeiA.roa (hash: rtKkHZhMW9ixPsD8Afo3cijSYyrzXMxXcNv91q8fepc=)
3: OYfq_lWnAQ_tUxH83Vafk3m1hAU.roa (hash: jPa4kfq6v0aw3m5eHQ43ps6ZzHtlfC/2MPYqiPwryT8=)
4: vagFAaYfljHxMPpkImKk4VgM7mg.roa (hash: o/ZL69Lrvnp/cw7d7SgMOOLc6Sh9EHk3r9mS1R5QVsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:e0:e4:04:d1:78:6c:6c:1a:0e:cb:ff:e1:52:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10721ead6a4575643cb703062c0968755e8281eb
Validity
Not Before: Mar 2 04:01:00 2026 GMT
Not After : Mar 3 04:01:00 2026 GMT
Subject: CN=eb136b5a5a7077118d1d972268a65a9c3811f521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2e:c1:74:8b:99:e6:75:c2:a0:53:c4:95:9a:
5d:18:80:68:a4:0c:c1:7a:29:04:15:c5:aa:be:4d:
11:5d:4d:e8:68:f6:56:18:68:7d:cf:8e:25:5d:b2:
48:0d:0a:ba:92:36:e8:3a:64:2d:88:8b:a9:56:ee:
37:d4:c3:ae:7a:16:6d:64:8c:3b:73:fe:23:d1:d8:
0a:5c:4a:72:7b:11:8a:76:51:a3:7c:bc:06:18:ac:
23:4a:98:dc:e7:2e:c4:93:5b:b5:f4:6f:b2:30:54:
27:97:4b:42:87:be:70:66:02:16:e8:b2:c0:09:0d:
8a:ac:8e:97:29:38:3e:82:b2:df:ec:08:49:21:0e:
21:38:6c:96:17:32:fc:7e:2c:77:57:34:41:64:07:
22:71:28:29:eb:39:d9:b8:e3:90:48:0c:4c:ea:51:
ec:26:ab:37:18:91:03:7d:8d:dc:2d:da:52:a3:1c:
92:bf:ea:2e:e6:98:00:81:d6:ee:3d:d3:22:61:27:
c2:7d:6b:0a:d9:c9:95:98:91:56:91:dc:1c:a0:92:
fc:26:07:47:23:57:d2:bd:72:24:a8:f6:9c:cc:c7:
92:e6:02:b7:77:c1:d7:df:52:79:5d:50:ae:97:d3:
34:b8:a5:15:ce:24:37:57:a5:6e:45:b6:e2:f0:ef:
08:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:13:6B:5A:5A:70:77:11:8D:1D:97:22:68:A6:5A:9C:38:11:F5:21
X509v3 Authority Key Identifier:
keyid:10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f4:5e:fa:ac:04:54:1c:ec:2f:eb:bd:db:77:4e:e3:95:13:
aa:93:b1:16:e6:e5:41:1e:8b:02:d7:31:21:0b:d1:ee:7a:2a:
81:b4:2d:78:2c:9b:8c:48:e7:c6:de:18:c2:3c:fb:c7:b7:76:
4e:ae:b6:c5:72:c3:4e:27:61:00:b8:70:05:2b:d5:ac:25:4d:
bb:82:fb:49:23:d8:f3:25:40:ff:68:23:a9:d8:e3:a9:34:46:
c2:ec:81:1d:c9:75:54:4b:28:c9:5d:45:a3:37:89:cf:14:2b:
d6:5d:27:44:df:31:ff:bd:28:d9:59:17:d3:5c:18:8f:66:14:
d5:c1:02:32:98:58:8b:24:43:93:7c:a0:23:ca:b5:79:c9:75:
bc:1b:3d:11:2e:ce:e1:47:46:d8:df:95:14:d8:58:29:4a:e6:
e5:02:b6:2b:6d:b0:f3:5d:5b:03:6c:ea:9e:f8:61:f9:4f:c8:
0e:3b:47:b6:c7:d8:88:5f:6d:23:79:9e:ed:df:58:89:b8:c6:
6f:68:b1:33:fa:a1:09:8c:1f:c3:59:9e:c8:2d:a8:62:a8:10:
62:2b:74:0a:d2:30:7b:93:0d:72:99:64:45:58:06:35:94:ff:
a1:45:f2:fa:8f:b7:d8:67:80:29:da:2c:b9:cc:ff:b2:e4:8d:
73:59:57:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:36:04 2026 by rpki-client