Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
File: EHbBYnj8gh4e75Mv3qmz3WPKayE.mft (raw, json)
Hash identifier: NE2gLiG5TSfk4SVAWJH/inJ9Mbp3ZtTcjNr+vanwPyg=
Subject key identifier: 91:BD:2B:25:DF:0F:73:F5:06:CC:CE:99:A0:77:7B:EE:51:B5:58:D2
Authority key identifier: 10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
Certificate issuer: /CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Certificate serial: 01A0C77CA802DC2250D512C7118835C49B7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
Manifest number: 0AA0
Signing time: Tue 22 Sep 2026 05:00:30 +0000
Manifest this update: Tue 22 Sep 2026 05:00:30 +0000
Manifest next update: Wed 23 Sep 2026 05:00:30 +0000
Files and hashes: 1: EHbBYnj8gh4e75Mv3qmz3WPKayE.crl (hash: eCASqnzUyXWl4nbnJbTBle7FXiX04Cxha/nS388g4vI=)
2: q7k3Jgi45VhxVB2FaU-fxYdycok.roa (hash: aUl7kjDi6eCHksQ88LJAOR22rf6+FmaVUEOAmzpORAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:a8:02:dc:22:50:d5:12:c7:11:88:35:c4:9b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Validity
Not Before: Sep 22 05:00:30 2026 GMT
Not After : Sep 23 05:00:30 2026 GMT
Subject: CN=91bd2b25df0f73f506ccce99a0777bee51b558d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3c:72:9a:8a:12:9d:7a:31:51:92:84:e0:a6:
14:c1:b4:57:d9:e2:a7:78:1a:72:1f:c1:b1:14:f9:
2e:65:93:fc:04:43:bd:2c:e9:53:5c:5e:f4:84:b5:
98:ca:27:32:eb:28:ee:4a:22:4c:75:ca:06:5a:50:
08:02:08:39:77:ac:13:d6:bb:f8:ae:6d:ad:f1:95:
ca:54:2b:65:06:37:96:1d:96:28:82:c3:97:84:5c:
ae:db:2e:57:b6:77:0a:d3:a2:18:3c:f4:79:a9:e0:
46:c7:d4:5b:9d:2e:6d:de:13:ef:06:82:87:29:aa:
09:22:65:4f:6d:f0:14:53:e3:0f:b5:13:54:06:1d:
14:71:e0:d1:ee:f2:4d:51:9f:5a:28:d6:a3:8b:26:
07:d2:76:2e:10:2a:9c:93:55:24:d4:72:0a:84:d8:
2a:00:4d:6c:fc:31:64:9d:9d:49:ff:1d:1d:79:66:
39:46:b1:cd:82:1a:32:e0:65:dd:07:d3:5f:02:3c:
b2:3c:9b:bd:04:dd:e4:4f:6b:97:c3:dd:76:43:ae:
5e:e5:88:e4:2f:8d:c9:89:bd:e7:e3:ec:2f:aa:28:
51:b2:a1:8e:58:82:d3:1b:06:fe:e8:8c:16:03:e3:
2f:b8:5c:99:e3:9f:1b:47:9c:6a:75:f6:1e:ef:5b:
a3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BD:2B:25:DF:0F:73:F5:06:CC:CE:99:A0:77:7B:EE:51:B5:58:D2
X509v3 Authority Key Identifier:
keyid:10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ad:fb:1d:f7:62:2c:87:0e:c1:62:9c:22:4a:cb:c7:91:90:
53:bb:64:b2:ce:2b:40:4a:ec:1e:63:22:42:a4:a0:c0:89:3c:
25:6c:90:3c:6e:1f:55:5e:7a:b1:80:e0:c4:94:bf:4e:63:9f:
ee:78:c1:24:e1:7f:91:78:26:7d:49:c9:d6:fc:1f:14:d8:81:
cb:b8:db:e7:87:5b:bb:4b:bc:e5:b2:1a:8a:0c:f6:b8:9c:bf:
42:00:bf:17:49:99:7a:95:df:04:e5:7f:5b:9e:e5:47:28:83:
ea:4a:64:6f:ff:b0:00:0a:3f:2e:4c:75:18:68:4d:11:2c:21:
98:6c:d5:b0:f7:64:10:f8:eb:15:29:3c:48:f7:d5:ed:00:6b:
0f:c1:77:46:8c:ba:de:91:36:b6:e7:94:89:f2:f1:5c:dc:de:
ed:d0:60:34:2f:84:f5:c4:84:20:76:77:8f:09:d7:02:fd:ea:
e7:04:5b:b1:a4:32:7e:f9:b2:a1:e9:45:dc:ad:41:95:c4:bd:
2c:57:18:78:42:82:42:73:d4:df:ec:98:88:72:23:fc:b3:1a:
b7:91:3f:60:54:6e:e1:3b:56:5d:ac:f0:ab:7c:6c:77:f4:ea:
2e:05:6d:d5:ca:cf:e6:bf:b4:1c:75:67:6d:37:3b:bf:f2:22:
8e:6a:76:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:54:48 2026 by rpki-client