Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
File: ehuwNttA15nYYRmKUkOzwD1Wwgo.mft (raw, json)
Hash identifier: RAtsdHldNisdtZX5ORk2g99NDLO++FX+ADPUAuI9LWU=
Subject key identifier: 06:EE:64:FE:29:C1:D0:92:FC:74:E2:A7:CC:5B:5D:36:D6:13:A8:8B
Authority key identifier: 7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A
Certificate issuer: /CN=7a1bb036db40d799d861198a5243b3c03d56c20a
Certificate serial: 019CAEA39A3C81EAD60EB0D511DAE0B8FE29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
Manifest number: 038F
Signing time: Mon 02 Mar 2026 13:01:23 +0000
Manifest this update: Mon 02 Mar 2026 13:01:23 +0000
Manifest next update: Tue 03 Mar 2026 13:01:23 +0000
Files and hashes: 1: 2xwSBwS6RDNnNKRZKOi0MbfjwVc.roa (hash: RMcEguGLwOa0BQU2j27En5sOEwzBOElDccZLVB4NNcw=)
2: MRM-CoQOpNzOiMlv-SoepHZ_vkg.roa (hash: XmXaFQhLTQFHGNBv8hvjwKW9TmIBhDQDOsRTHRNNRp8=)
3: ehuwNttA15nYYRmKUkOzwD1Wwgo.crl (hash: R5xQ+ZuwjedMcs5zwpitbOALJVZRbSTPZLt41Hs5rTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:9a:3c:81:ea:d6:0e:b0:d5:11:da:e0:b8:fe:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a1bb036db40d799d861198a5243b3c03d56c20a
Validity
Not Before: Mar 2 13:01:23 2026 GMT
Not After : Mar 3 13:01:23 2026 GMT
Subject: CN=06ee64fe29c1d092fc74e2a7cc5b5d36d613a88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8f:a5:2c:27:60:ea:f8:64:d2:ed:de:68:23:
b6:74:8d:51:4c:39:51:e5:a9:19:2a:4a:00:7e:47:
11:62:7a:a9:e8:0f:63:b5:df:b0:61:e7:e1:a0:8f:
48:6a:ee:b6:01:6c:30:a5:40:08:d3:a0:fd:dc:00:
96:0d:88:13:c3:b4:fb:d5:72:50:60:4e:b9:b1:9a:
65:69:b1:ee:d9:4f:c6:e2:8a:7e:4a:8f:25:25:ad:
19:af:71:b2:5a:d5:79:97:56:26:95:8c:7c:0f:fb:
20:5e:c9:9e:16:e4:e0:f6:b5:11:57:30:41:e6:67:
89:aa:ea:81:12:87:64:7b:65:c8:cd:33:92:da:b8:
9e:ec:9b:aa:c9:10:c9:96:14:19:b6:d1:2a:5e:51:
1d:28:7b:3e:fe:30:d6:56:ee:5b:4d:3e:c3:25:cb:
4e:85:7e:b0:71:86:d7:4f:0f:95:a2:98:d4:82:70:
fd:e4:38:28:33:8f:ce:bd:cf:3e:ae:f0:7e:cc:1b:
33:ed:de:a0:f6:0d:81:e4:d0:18:83:0f:fa:c0:6c:
b2:53:b6:e5:4f:47:21:7b:e5:1e:58:3b:32:c1:6c:
63:15:9d:61:08:d2:0a:4f:87:58:ec:b7:3f:e9:3b:
7d:58:e9:e4:d2:1c:70:fd:63:61:15:36:3a:5b:3c:
bd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:EE:64:FE:29:C1:D0:92:FC:74:E2:A7:CC:5B:5D:36:D6:13:A8:8B
X509v3 Authority Key Identifier:
keyid:7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d3:16:54:82:e7:a9:dc:2b:3b:ef:9c:ea:1d:ba:85:7a:b6:
4c:a9:7d:d0:91:b6:42:3a:e9:70:df:5c:c4:df:c1:30:69:1c:
f1:fd:4b:f8:05:d2:21:9a:a4:49:e9:01:69:94:d3:84:de:56:
8a:45:86:96:63:e4:db:60:c0:64:8a:31:fc:6d:4d:23:ff:da:
27:ac:c5:15:05:66:0d:c8:a7:f1:77:e6:0c:25:19:e8:52:e5:
6e:c1:ef:d5:69:f4:cc:fd:73:71:b9:9e:01:a7:a0:43:b3:f8:
3b:f3:68:66:3a:da:a2:3c:4e:f6:17:11:e8:2a:09:44:23:f0:
06:0c:0a:7a:d5:18:f1:66:b8:2c:8d:64:44:da:47:13:05:4a:
13:3f:1d:e1:32:3e:d5:70:46:91:ee:21:1d:27:13:f5:4b:39:
c5:9a:f9:0d:f1:8d:36:d0:79:e2:c2:b0:d7:5c:e6:00:d1:33:
9e:11:75:45:01:72:d8:13:dc:91:df:59:1d:bb:6f:5c:c0:12:
55:dd:21:77:99:a7:66:7d:16:16:5e:36:18:59:20:52:07:da:
88:c1:00:0c:ea:15:48:23:09:a6:b0:e8:02:90:eb:1f:34:e3:
8e:02:e4:bd:a9:7d:e5:ed:c5:62:ff:41:20:f4:fe:93:ed:f2:
08:8f:51:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuo5o8gerWDrDVEdrguP4pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMWJiMDM2ZGI0MGQ3OTlkODYxMTk4YTUyNDNiM2MwM2Q1
NmMyMGEwHhcNMjYwMzAyMTMwMTIzWhcNMjYwMzAzMTMwMTIzWjAzMTEwLwYDVQQD
EygwNmVlNjRmZTI5YzFkMDkyZmM3NGUyYTdjYzViNWQzNmQ2MTNhODhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY+lLCdg6vhk0u3eaCO2dI1RTDlR
5akZKkoAfkcRYnqp6A9jtd+wYefhoI9Iau62AWwwpUAI06D93ACWDYgTw7T71XJQ
YE65sZplabHu2U/G4op+So8lJa0Zr3GyWtV5l1YmlYx8D/sgXsmeFuTg9rURVzBB
5meJquqBEodke2XIzTOS2rie7JuqyRDJlhQZttEqXlEdKHs+/jDWVu5bTT7DJctO
hX6wcYbXTw+VopjUgnD95DgoM4/Ovc8+rvB+zBsz7d6g9g2B5NAYgw/6wGyyU7bl
T0che+UeWDsywWxjFZ1hCNIKT4dY7Lc/6Tt9WOnk0hxw/WNhFTY6Wzy9HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbuZP4pwdCS/HTip8xbXTbWE6iLMB8GA1UdIwQY
MBaAFHobsDbbQNeZ2GEZilJDs8A9VsIKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWh1d050dEExNW5ZWVJtS1VrT3p3RDFXd2dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ZGE1YjMtMjRjNy00ZWU1LTk1ZGMt
YjA4ZGIzYzM2ZmJiLzEvZWh1d050dEExNW5ZWVJtS1VrT3p3RDFXd2dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ZGE1YjMtMjRjNy00ZWU1LTk1ZGMtYjA4ZGIzYzM2ZmJi
LzEvZWh1d050dEExNW5ZWVJtS1VrT3p3RDFXd2dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcdMWVILn
qdwrO++c6h26hXq2TKl90JG2QjrpcN9cxN/BMGkc8f1L+AXSIZqkSekBaZTThN5W
ikWGlmPk22DAZIox/G1NI//aJ6zFFQVmDcin8XfmDCUZ6FLlbsHv1Wn0zP1zcbme
AaegQ7P4O/NoZjraojxO9hcR6CoJRCPwBgwKetUY8Wa4LI1kRNpHEwVKEz8d4TI+
1XBGke4hHScT9Us5xZr5DfGNNtB54sKw11zmANEznhF1RQFy2BPckd9ZHbtvXMAS
Vd0hd5mnZn0WFl42GFkgUgfaiMEADOoVSCMJprDoApDrHzTjjgLkval95e3FYv9B
IPT+k+3yCI9RUg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:46:44 2026 by rpki-client