Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
File: ehJ9Y84cnzVXOQryH8BhBypSX04.mft (raw, json)
Hash identifier: PjdN7eJgvTywERgIGFkJIzQhtRDxR14BT8pPGM3Wcbo=
Subject key identifier: 4B:6C:B3:6B:91:6E:13:DF:1F:60:73:F7:DC:77:C9:F9:63:AF:E1:1E
Authority key identifier: 7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
Certificate issuer: /CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Certificate serial: 019EC25B92C8BA9A5B377337C3B84BD88463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
Manifest number: 04B2
Signing time: Sat 13 Jun 2026 19:00:41 +0000
Manifest this update: Sat 13 Jun 2026 19:00:41 +0000
Manifest next update: Sun 14 Jun 2026 19:00:41 +0000
Files and hashes: 1: ehJ9Y84cnzVXOQryH8BhBypSX04.crl (hash: qL1DutbdDVd69ZV36b3AG06kyRL6belmspkIXnqhEpM=)
2: mryfSMsiVc0yv4FSUpt7qiqcwh4.roa (hash: 0IMb7oddMwh/zy5T4EnTss9mtPc9VXAUaEOcmqL1xfU=)
3: o_rtVjzkw0KDuX61bKwdi27cJvI.roa (hash: /gFVliPW+JCCvNfNfgkacSugBlyQGtqR4HbJDxkhEjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5b:92:c8:ba:9a:5b:37:73:37:c3:b8:4b:d8:84:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Validity
Not Before: Jun 13 19:00:41 2026 GMT
Not After : Jun 14 19:00:41 2026 GMT
Subject: CN=4b6cb36b916e13df1f6073f7dc77c9f963afe11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:1b:8a:25:e3:e4:a0:e2:92:a2:61:2d:af:
ef:b8:d9:df:c4:f8:07:09:60:71:a5:b8:39:9e:cd:
d0:53:48:19:81:8d:55:c1:05:da:6b:09:22:4e:a4:
1b:d2:c1:cc:48:c1:f0:63:71:c4:cd:c2:c9:d9:bc:
c6:36:dd:19:d4:27:5d:79:cf:79:9a:0b:35:8a:22:
df:64:05:9f:d1:39:a1:d2:cc:ba:65:6c:69:25:d3:
cc:9c:b4:97:d4:35:92:5d:1b:2c:57:dd:ca:e8:e9:
68:e5:56:db:66:94:01:68:38:13:2a:83:af:74:e2:
80:79:6f:32:9d:a4:46:b3:db:a2:35:58:1f:42:03:
d1:14:73:1c:c9:36:88:12:de:05:3a:99:5c:c5:4e:
2f:ba:5c:1d:f1:c7:60:3d:ef:8b:c0:e8:f3:8c:46:
dc:17:ae:3f:97:68:52:96:69:9f:02:aa:46:74:c6:
4d:05:0d:73:01:ba:97:0c:ba:13:d9:35:ce:52:42:
f8:ed:a9:fe:9b:48:e0:4a:15:f1:5c:e4:c9:7d:5a:
e4:ce:2b:19:de:41:46:d0:1f:36:ab:32:65:46:9f:
4b:5a:d3:98:02:bf:fe:40:d0:36:7a:5e:85:55:22:
10:2c:9c:8b:92:bc:f5:b5:61:62:6a:0f:c2:f0:c7:
70:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6C:B3:6B:91:6E:13:DF:1F:60:73:F7:DC:77:C9:F9:63:AF:E1:1E
X509v3 Authority Key Identifier:
keyid:7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:0c:7c:22:00:2c:77:42:a7:ed:61:39:70:34:aa:48:fa:44:
98:a9:d6:71:69:0e:7a:87:64:53:bb:6d:c3:90:21:54:1c:ff:
84:cd:9a:d1:ef:77:b6:c4:02:ea:26:27:fe:54:7c:80:ca:cb:
0a:bb:67:09:2d:db:ef:7b:1c:56:c9:bd:6f:f0:d1:79:e6:b8:
58:cf:70:d1:bb:ad:01:35:c7:26:45:6e:e5:e0:78:55:91:19:
eb:a1:1d:79:a5:9f:57:17:9e:4d:18:7e:fa:ce:a8:c8:d1:92:
34:5f:e3:00:83:90:d4:e8:e1:90:a0:18:78:9d:c3:5b:1f:dd:
94:01:3e:99:a7:69:1d:ef:cd:5a:52:b0:0c:a2:c7:27:fd:f4:
65:0d:8a:cd:32:1e:e2:63:58:15:19:e2:a0:15:7b:e8:6a:f4:
c0:eb:41:80:dc:42:b2:31:4b:9d:82:ca:f0:b0:c6:5c:98:d6:
db:f9:b7:58:6c:c9:2f:5d:61:63:39:36:e2:ab:32:9d:c8:6b:
86:0b:a0:ff:54:e2:ae:d9:bf:10:a7:58:6d:65:1c:5d:a2:f5:
e6:c7:ea:27:e1:32:32:bc:c4:ff:ac:b7:7a:4d:65:a4:3a:0e:
f5:b0:8a:c6:66:84:15:68:21:c5:57:42:bc:05:f5:cd:5d:b7:
c0:d6:79:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:44:54 2026 by rpki-client