Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
File: EHIerWpFdWQ8twMGLAlodV6Cges.mft (raw, json)
Hash identifier: U/S7pxgL7rFYMaV7ay0IADH56pc+5Shuvg4Fk2eV35U=
Subject key identifier: 0D:C6:B2:97:48:EF:90:E8:C5:37:95:C4:DA:CE:75:B3:45:42:D8:10
Authority key identifier: 10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
Certificate issuer: /CN=10721ead6a4575643cb703062c0968755e8281eb
Certificate serial: 019D9850B1D4A8B508D875C4D33A0D2E9775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
Manifest number: 1137
Signing time: Thu 16 Apr 2026 22:01:58 +0000
Manifest this update: Thu 16 Apr 2026 22:01:58 +0000
Manifest next update: Fri 17 Apr 2026 22:01:58 +0000
Files and hashes: 1: 1-rET-TrbL0N0PmSCeeqaK3f307A.roa (hash: 3mf7fKWr4vRI4ELzbIBegjtJk+mkQEPMj+4jcV/D7Z4=)
2: EHIerWpFdWQ8twMGLAlodV6Cges.crl (hash: wbYjyPWRHdSmVNQqljZqbiRGJjZtuCy3LA3FBDk9h6Y=)
3: OYfq_lWnAQ_tUxH83Vafk3m1hAU.roa (hash: jPa4kfq6v0aw3m5eHQ43ps6ZzHtlfC/2MPYqiPwryT8=)
4: OklpCWAYtSxGFSO6LoyURgrDbcQ.roa (hash: 1mSZtPwrR8rsCOpqJ4xfUkwL5UPo6V6cd8N6AZWROk0=)
5: adft9gClh_5cLRsjg_tIKsse5c8.roa (hash: mOJk0iIwfTDt5ixEea0GhZ9TZ+LmcfXcF0RkG7cTHPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:b1:d4:a8:b5:08:d8:75:c4:d3:3a:0d:2e:97:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10721ead6a4575643cb703062c0968755e8281eb
Validity
Not Before: Apr 16 22:01:58 2026 GMT
Not After : Apr 17 22:01:58 2026 GMT
Subject: CN=0dc6b29748ef90e8c53795c4dace75b34542d810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:e7:28:6e:a4:69:91:40:c8:f2:7c:3c:37:
54:5d:e9:76:4a:21:7c:c8:03:1d:c8:5a:45:d5:52:
7e:b0:ee:b2:e2:78:b6:71:01:20:57:9f:af:63:6a:
e6:0d:b0:52:54:a8:0c:d9:19:8d:81:98:8a:0f:35:
9e:1b:f7:1b:c9:8c:8f:50:23:44:b8:b0:41:36:48:
c6:2d:54:ee:60:fe:b0:df:56:ed:fc:c1:5a:77:61:
e4:8a:17:38:13:44:24:e9:d0:2a:14:37:eb:13:b9:
c5:01:93:8f:8e:f4:b9:a7:51:27:37:e5:38:d8:41:
65:a8:f6:13:1a:9c:49:9b:b0:59:97:80:1a:f5:6a:
9e:7d:90:e7:9e:3a:70:07:57:67:ba:7c:c9:07:1e:
7c:c5:46:94:24:93:0f:09:02:15:2b:21:a2:55:ab:
33:19:cf:a1:ea:06:f5:4f:d0:82:5f:8d:0b:88:8b:
21:47:23:e9:b4:da:d5:0a:23:bd:c9:93:d8:d5:58:
b9:14:2a:e0:2e:8d:be:ac:e5:d3:ae:da:04:7e:89:
cd:c3:a8:7c:e0:33:f0:5d:c1:c3:4c:6d:09:db:87:
be:bd:e9:0b:7d:5b:4c:30:9d:94:8c:23:8c:f6:3f:
44:e6:3f:d1:3b:8a:37:1d:19:b3:22:54:85:2c:f8:
85:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C6:B2:97:48:EF:90:E8:C5:37:95:C4:DA:CE:75:B3:45:42:D8:10
X509v3 Authority Key Identifier:
keyid:10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:20:7d:95:12:32:ee:ed:c9:d1:d3:ea:56:62:8a:08:b8:5c:
6b:ff:41:96:6c:2d:0b:c0:ea:e4:86:64:cc:66:aa:b9:78:e1:
72:58:c9:3e:10:5d:e5:c3:89:ad:84:13:58:01:4d:46:22:47:
6a:7c:82:3f:c3:f3:fd:05:70:19:24:46:13:80:71:49:d2:00:
15:8f:20:2f:a3:1f:52:3e:4d:f7:f4:85:61:a4:5e:c9:da:f6:
54:7c:9b:34:b4:05:f4:be:39:fd:7b:cb:e4:69:0c:e7:92:53:
2e:75:f8:83:7c:06:ab:23:59:9a:7a:ed:ac:3f:af:a5:1c:57:
28:07:69:07:5f:0d:0f:dd:47:5a:c5:5a:25:4f:30:32:fc:95:
df:54:78:34:53:7b:94:ea:e8:8e:0f:af:7e:65:6f:5c:2b:0a:
4f:8d:2f:f4:2f:c8:2c:02:0c:1a:2c:15:7c:7d:cc:b1:4e:c7:
24:40:28:cb:32:72:ad:0f:f1:f7:55:63:ea:6a:48:7f:b2:73:
fc:25:3e:21:e0:3e:cb:f4:60:41:83:09:21:48:fd:5b:4e:b6:
eb:ac:60:c9:de:b2:05:7a:d7:24:55:c8:e4:ce:a2:8d:72:4b:
57:30:c5:91:c2:f9:94:09:a5:0e:09:4f:a2:3c:b9:f8:9f:c3:
4c:ef:82:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:58:54 2026 by rpki-client