Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
File: EHIerWpFdWQ8twMGLAlodV6Cges.mft (raw, json)
Hash identifier: VmhqwA4fDbUoHQV70BuxO7tOEt9Scnl6KaQD1Oi7SLA=
Subject key identifier: 3E:9F:94:03:26:09:7A:D8:2A:10:87:E9:35:79:D6:9B:2C:DA:72:52
Authority key identifier: 10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
Certificate issuer: /CN=10721ead6a4575643cb703062c0968755e8281eb
Certificate serial: 01A0BF8C238DC1A9D6AE65E3F2F95F00D956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
Manifest number: 12D9
Signing time: Sun 20 Sep 2026 16:00:27 +0000
Manifest this update: Sun 20 Sep 2026 16:00:27 +0000
Manifest next update: Mon 21 Sep 2026 16:00:27 +0000
Files and hashes: 1: 1-rET-TrbL0N0PmSCeeqaK3f307A.roa (hash: 3mf7fKWr4vRI4ELzbIBegjtJk+mkQEPMj+4jcV/D7Z4=)
2: EHIerWpFdWQ8twMGLAlodV6Cges.crl (hash: /903BsFJbXhKSTIHBcLaIqBus/rRc0rObh696dWbWWA=)
3: OYfq_lWnAQ_tUxH83Vafk3m1hAU.roa (hash: jPa4kfq6v0aw3m5eHQ43ps6ZzHtlfC/2MPYqiPwryT8=)
4: OklpCWAYtSxGFSO6LoyURgrDbcQ.roa (hash: 1mSZtPwrR8rsCOpqJ4xfUkwL5UPo6V6cd8N6AZWROk0=)
5: adft9gClh_5cLRsjg_tIKsse5c8.roa (hash: mOJk0iIwfTDt5ixEea0GhZ9TZ+LmcfXcF0RkG7cTHPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:8c:23:8d:c1:a9:d6:ae:65:e3:f2:f9:5f:00:d9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10721ead6a4575643cb703062c0968755e8281eb
Validity
Not Before: Sep 20 16:00:27 2026 GMT
Not After : Sep 21 16:00:27 2026 GMT
Subject: CN=3e9f940326097ad82a1087e93579d69b2cda7252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bb:26:88:d4:e5:ab:bd:ae:58:38:a6:34:91:
97:42:24:9b:8a:6c:a1:55:78:63:c1:4b:89:5c:00:
eb:09:4d:3e:3e:e3:81:8d:f7:5a:58:57:ee:4f:87:
e1:f1:5a:7e:b1:2a:7e:8f:0f:fd:3b:16:9c:42:8a:
60:fa:98:ae:b6:43:62:c8:50:00:30:df:8c:ec:73:
1d:a8:8e:85:18:63:b2:b3:8c:06:7c:88:55:b3:cd:
6b:5d:58:e5:6d:1b:23:39:d3:c3:14:0a:74:3b:bf:
0f:3f:7d:e7:86:94:26:6d:2b:06:4e:83:20:be:ad:
7d:cc:c9:6f:2e:14:c3:80:8a:28:28:0c:8b:51:20:
09:d8:27:37:0a:14:44:99:d6:75:2b:3c:88:cb:8d:
af:83:80:ff:8a:0e:96:6b:d2:6d:a1:16:57:23:5e:
ee:7f:55:4a:c0:6d:55:67:bb:ab:29:77:d2:a7:87:
ba:f3:66:05:2a:35:d7:d2:3c:5c:2d:94:a9:0a:a8:
15:9d:a0:49:2c:69:64:ce:7b:58:0a:48:99:d7:0d:
9b:3c:37:46:c5:ed:a5:94:76:91:13:2d:d1:13:a1:
cd:4a:4a:bd:2b:f7:4a:06:a7:5f:4d:b0:ff:95:be:
f4:8a:1e:80:95:d4:44:c1:b9:19:71:a2:52:f3:15:
e0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9F:94:03:26:09:7A:D8:2A:10:87:E9:35:79:D6:9B:2C:DA:72:52
X509v3 Authority Key Identifier:
keyid:10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f9:5a:28:f3:3e:d2:5f:76:8e:ed:fa:3b:79:b1:f7:5d:74:
2e:17:cb:d8:e9:41:23:5e:30:9a:8f:cd:56:8d:64:15:01:19:
bf:dd:9f:17:01:5d:dc:41:c1:d7:38:d4:9f:ca:2b:7a:15:6a:
4c:26:13:02:45:ac:ba:b9:87:60:b3:04:07:39:49:0b:e6:61:
29:20:26:13:d8:28:3b:6d:c1:07:0e:df:fc:a4:85:e1:b5:18:
f0:3e:41:02:a0:34:93:01:78:ef:13:ee:ac:27:fd:47:e3:80:
34:b2:ad:90:10:d6:e8:7b:a5:63:05:a5:c6:de:80:6f:8f:9f:
35:eb:d5:5e:de:ce:8d:32:51:d6:f1:56:dc:50:f9:a8:af:20:
d9:9a:20:cb:28:b3:3d:4d:5b:16:1d:da:9d:35:58:8d:9c:7f:
69:61:9d:7a:04:aa:1f:e1:fa:3e:6f:80:64:65:b9:f8:ce:54:
0e:2c:20:52:bd:01:2c:9b:06:68:7a:9d:de:80:2b:ac:2b:c7:
28:6f:1c:fb:62:01:ad:1c:75:76:8d:8d:d8:9b:45:7d:bd:ba:
8e:cd:fc:93:5c:c9:db:13:87:45:12:27:81:cf:6f:a9:63:c3:
87:60:1b:b0:72:06:53:3d:ae:b1:85:88:b1:2c:f3:83:0d:c9:
59:d5:d3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:17:24 2026 by rpki-client