Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
File: ehuwNttA15nYYRmKUkOzwD1Wwgo.mft (raw, json)
Hash identifier: c/9dcNBR7UnC6J8ss+MLkBFx1HdtT88f1PMbYreoAgY=
Subject key identifier: 7C:A2:16:70:A4:BD:7F:11:ED:42:F7:99:96:AC:C7:A5:FD:53:C3:FF
Authority key identifier: 7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A
Certificate issuer: /CN=7a1bb036db40d799d861198a5243b3c03d56c20a
Certificate serial: 019DA3E6B75541BFB47A8D55409CD6A054E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
Manifest number: 040E
Signing time: Sun 19 Apr 2026 04:01:39 +0000
Manifest this update: Sun 19 Apr 2026 04:01:39 +0000
Manifest next update: Mon 20 Apr 2026 04:01:39 +0000
Files and hashes: 1: 2xwSBwS6RDNnNKRZKOi0MbfjwVc.roa (hash: RMcEguGLwOa0BQU2j27En5sOEwzBOElDccZLVB4NNcw=)
2: MRM-CoQOpNzOiMlv-SoepHZ_vkg.roa (hash: XmXaFQhLTQFHGNBv8hvjwKW9TmIBhDQDOsRTHRNNRp8=)
3: ehuwNttA15nYYRmKUkOzwD1Wwgo.crl (hash: L9XfKkNHDGxcC7l7WIYCRr88jeJdnMRxG6pukZPgBRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:b7:55:41:bf:b4:7a:8d:55:40:9c:d6:a0:54:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a1bb036db40d799d861198a5243b3c03d56c20a
Validity
Not Before: Apr 19 04:01:39 2026 GMT
Not After : Apr 20 04:01:39 2026 GMT
Subject: CN=7ca21670a4bd7f11ed42f79996acc7a5fd53c3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f5:5c:47:b9:1b:05:9b:c2:ed:f4:78:25:c4:
84:f0:c0:95:23:4b:a9:2b:90:74:6e:42:36:f5:36:
6b:5e:da:f7:63:c6:51:45:d2:c0:b1:c8:b8:44:8e:
c3:4a:76:05:a5:67:ef:79:89:31:3b:d6:54:af:d7:
2f:e5:89:7a:39:15:51:f4:a8:a4:b4:1d:9e:aa:d8:
a6:e2:c5:83:1b:0d:41:15:6e:81:fb:35:ef:a9:3a:
27:b4:5a:b3:15:0e:f2:d8:e3:a0:1c:50:d3:be:9c:
48:88:0f:27:fc:07:c2:22:81:e6:20:0d:ca:78:56:
3c:08:b1:1c:74:cb:4c:08:19:d1:fa:67:9e:95:a5:
55:78:d9:9f:93:62:bc:ce:21:31:55:ea:d4:71:4c:
25:de:b1:9c:04:92:bb:a4:7c:ce:ef:92:e9:32:b1:
b3:c1:ed:b3:ef:81:1b:b7:94:c7:42:44:e0:2a:cc:
85:fa:06:d9:55:47:65:64:b7:38:55:4e:27:35:83:
a5:82:46:28:d1:90:a1:5e:f3:38:01:87:cc:0a:a2:
e8:da:ef:44:a0:16:b2:40:64:fc:62:25:c1:ff:59:
6d:3e:43:9a:87:bd:d7:68:37:63:1e:81:dd:c7:a9:
30:9c:16:02:24:21:4a:7b:25:30:d2:d1:7b:1a:e3:
a9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A2:16:70:A4:BD:7F:11:ED:42:F7:99:96:AC:C7:A5:FD:53:C3:FF
X509v3 Authority Key Identifier:
keyid:7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:5a:16:2b:5b:4f:f1:96:ef:6a:b8:17:18:83:6f:12:fb:f0:
15:6c:bb:87:ce:ed:04:00:4f:07:55:30:17:d5:40:50:fc:9c:
55:9a:60:11:fd:22:67:d5:3b:74:4d:eb:c4:bd:22:8f:4d:da:
eb:61:54:7e:3f:98:55:97:3b:44:27:79:f4:3a:c4:90:7d:b4:
72:51:fa:3f:43:92:4f:58:30:94:b2:31:56:cb:0b:03:fd:c2:
d2:2d:ef:f3:c3:43:d8:8f:af:97:e3:45:44:87:4a:29:10:84:
82:4b:e8:fa:db:7b:a3:34:0a:e3:41:7a:e7:6c:23:f5:aa:ea:
db:5b:42:0c:47:5d:af:ec:64:29:7a:e5:78:df:49:38:13:63:
ef:4b:88:b5:2b:4d:97:42:f3:e8:88:72:99:18:35:aa:ad:a3:
12:c9:14:3b:19:9d:f3:fb:c7:79:c8:ac:f9:8f:3c:5a:31:55:
1f:d5:f8:d6:b0:0c:c1:69:7f:da:db:91:a0:20:63:44:d3:cd:
7b:e2:3a:37:85:78:fb:bc:a3:f8:5b:7c:b4:fd:7d:b7:8f:5b:
4b:0d:cf:0c:6e:da:83:e2:81:05:50:e2:db:c9:d1:71:c4:b6:
c5:47:dc:62:dc:2b:4c:ec:38:65:14:89:fa:72:41:f3:d3:19:
78:c6:7c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:01:34 2026 by rpki-client