
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
File: ehuwNttA15nYYRmKUkOzwD1Wwgo.mft (raw, json)
Hash identifier: vaH0JDVmTbGZHSXXe0KdPQoLWo1tRxs8Zv9W5B/8BPE=
Subject key identifier: 02:E0:06:FC:3F:58:2E:F6:B1:FD:71:14:0A:FE:48:B2:8E:0A:5D:C4
Authority key identifier: 7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A
Certificate issuer: /CN=7a1bb036db40d799d861198a5243b3c03d56c20a
Certificate serial: 019EC1B72F10D395F7505B00E9F3AD970EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
Manifest number: 04A2
Signing time: Sat 13 Jun 2026 16:01:08 +0000
Manifest this update: Sat 13 Jun 2026 16:01:08 +0000
Manifest next update: Sun 14 Jun 2026 16:01:08 +0000
Files and hashes: 1: 2xwSBwS6RDNnNKRZKOi0MbfjwVc.roa (hash: RMcEguGLwOa0BQU2j27En5sOEwzBOElDccZLVB4NNcw=)
2: MRM-CoQOpNzOiMlv-SoepHZ_vkg.roa (hash: XmXaFQhLTQFHGNBv8hvjwKW9TmIBhDQDOsRTHRNNRp8=)
3: ehuwNttA15nYYRmKUkOzwD1Wwgo.crl (hash: zI1vpQHMhe4Pq2EEm87xTzFb6rVJvU5px+L09CxjPnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b7:2f:10:d3:95:f7:50:5b:00:e9:f3:ad:97:0e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a1bb036db40d799d861198a5243b3c03d56c20a
Validity
Not Before: Jun 13 16:01:08 2026 GMT
Not After : Jun 14 16:01:08 2026 GMT
Subject: CN=02e006fc3f582ef6b1fd71140afe48b28e0a5dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:42:24:51:90:67:d0:f9:d7:c1:94:9b:34:e3:
47:1a:82:2b:63:54:7f:17:9b:35:c9:f4:cf:cb:13:
0e:f5:2a:63:91:dd:d7:21:8b:57:d9:f7:78:3a:12:
44:b9:82:5c:ed:8e:fa:7f:c7:5c:ee:59:4b:44:b0:
3b:a4:a3:06:66:24:9d:cc:c6:41:f6:8d:88:87:30:
b4:ad:39:6d:5c:7b:43:0d:2e:28:d2:5c:58:25:d8:
c1:22:1f:87:e8:9f:3f:89:b3:bc:89:34:a0:ec:71:
c5:6f:3d:29:71:8a:93:62:7e:b0:bb:f7:9f:f6:05:
3c:5b:0a:66:85:d9:a2:52:0e:d0:9a:f8:b1:9b:e2:
d2:df:83:70:00:26:9a:1b:f7:c6:f0:4a:0e:e3:54:
fe:77:52:64:63:e3:55:8a:de:02:17:33:59:ab:0f:
80:8c:6d:67:5c:ae:27:04:d5:14:ac:23:b1:dd:4c:
5d:86:75:30:d9:19:ca:14:31:d5:ae:0a:dc:9d:9f:
f2:64:2b:08:f9:6b:f7:f0:67:35:2f:e4:af:ba:21:
44:7d:9c:81:a2:60:c7:49:53:d2:05:94:83:58:a9:
7c:03:ff:8b:e0:67:62:44:83:2b:ff:19:9b:14:7d:
8b:fe:f0:fb:b1:5b:66:7d:b3:41:c5:d7:00:ab:03:
f8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E0:06:FC:3F:58:2E:F6:B1:FD:71:14:0A:FE:48:B2:8E:0A:5D:C4
X509v3 Authority Key Identifier:
keyid:7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:59:85:80:b3:2e:b8:59:52:bb:6e:10:bf:6c:b2:d4:03:28:
8d:8b:15:ed:29:00:e2:db:13:5d:14:1e:cc:0a:b0:8d:39:08:
7f:12:d3:3c:4d:e4:74:2c:b3:f4:b2:10:e7:a7:b2:df:5b:d4:
97:f3:30:15:4b:4f:41:c8:3c:7f:25:f3:98:c5:3f:d9:9a:97:
01:c4:da:f6:84:54:4b:0e:51:e7:52:2e:53:ae:1e:99:1b:e7:
37:cd:e0:81:e0:24:81:d1:4b:3e:33:77:b9:2f:02:89:5e:1a:
16:c3:b5:97:c5:12:d2:79:b7:8c:5b:31:2b:c6:72:ee:0f:27:
32:6a:46:9c:a8:a4:90:72:27:64:c5:73:1a:d3:dc:af:f6:70:
5d:7e:cd:e9:c8:95:07:91:2f:84:99:cf:f8:7d:ea:bf:2d:47:
86:07:7a:b8:0f:03:ed:bb:4a:1f:ad:ed:b6:36:49:fb:78:62:
d0:f9:0a:1e:2f:04:ad:1d:9a:4d:24:0d:aa:1c:ec:dd:b4:86:
7f:1d:4e:4c:c0:be:63:71:b0:05:68:77:e4:64:20:bb:50:59:
eb:29:66:b0:6d:13:db:11:b8:31:25:a2:e0:b5:a2:64:20:72:
ad:f9:b8:30:af:35:2a:48:6c:86:69:39:6b:01:04:ae:83:2d:
5c:a2:6a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:10:29 2026 by rpki-client