Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
File: ehJ9Y84cnzVXOQryH8BhBypSX04.mft (raw, json)
Hash identifier: KCA3kZftExtbrzt6B6Fxrlz00+iB650BF/FBNv+LB8g=
Subject key identifier: 5D:A8:3C:C7:3F:93:79:67:98:4A:39:0B:2D:51:A6:8E:3D:49:4E:4D
Authority key identifier: 7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
Certificate issuer: /CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Certificate serial: 019FAC08311055F1014C4214A9983568B611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
Manifest number: 052B
Signing time: Wed 29 Jul 2026 04:00:45 +0000
Manifest this update: Wed 29 Jul 2026 04:00:45 +0000
Manifest next update: Thu 30 Jul 2026 04:00:45 +0000
Files and hashes: 1: ehJ9Y84cnzVXOQryH8BhBypSX04.crl (hash: O6H8DMFmDkbxEanMW+wXBpiiZOWio8M4kZGnxCyLtfQ=)
2: mryfSMsiVc0yv4FSUpt7qiqcwh4.roa (hash: 0IMb7oddMwh/zy5T4EnTss9mtPc9VXAUaEOcmqL1xfU=)
3: o_rtVjzkw0KDuX61bKwdi27cJvI.roa (hash: /gFVliPW+JCCvNfNfgkacSugBlyQGtqR4HbJDxkhEjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:31:10:55:f1:01:4c:42:14:a9:98:35:68:b6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Validity
Not Before: Jul 29 04:00:45 2026 GMT
Not After : Jul 30 04:00:45 2026 GMT
Subject: CN=5da83cc73f937967984a390b2d51a68e3d494e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f2:b4:a4:fa:e4:d0:11:a4:79:8f:11:c4:84:
4e:69:45:62:ae:ad:51:0b:af:4c:27:dc:ee:a7:93:
58:aa:97:41:f3:26:1d:97:09:8c:0e:19:5f:f5:0f:
3a:b8:11:95:15:b9:63:c8:2d:c9:59:45:ca:e4:3b:
ec:ca:cd:c3:02:44:73:b2:58:be:e4:7c:7a:f8:87:
f0:d4:db:5c:10:77:6f:d4:75:58:ce:c7:5c:32:f5:
9f:1f:d3:5c:b3:78:93:5b:8a:ae:30:4c:7e:4a:30:
d1:9a:e3:07:5f:ec:2b:9b:d4:ac:11:c7:48:ff:0f:
52:3f:7d:7f:46:d4:f7:34:a7:12:36:60:0c:f2:9d:
06:30:62:f1:c5:fd:4c:58:16:44:96:4b:ef:64:b4:
2a:2e:78:81:bd:ac:7b:ca:81:d3:fd:3d:0d:5c:77:
f9:06:67:25:83:b1:17:d2:b2:66:92:41:32:df:a2:
54:88:1c:fd:04:af:be:9e:8f:4f:f1:84:cf:de:bd:
21:a6:e4:81:4e:f3:2a:89:ec:b2:43:d5:ab:b2:77:
c2:2a:83:96:1d:7b:b1:a6:57:43:5b:0e:e9:aa:d1:
4b:df:88:e4:b8:3c:db:1d:d4:5b:fe:3a:79:59:fd:
61:bc:e4:cb:fd:2e:93:97:fe:3a:b3:91:81:43:57:
f4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A8:3C:C7:3F:93:79:67:98:4A:39:0B:2D:51:A6:8E:3D:49:4E:4D
X509v3 Authority Key Identifier:
keyid:7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9c:79:58:dd:5c:f7:c6:11:a6:1d:bd:2f:38:9a:54:af:40:
86:f6:44:2c:7b:b4:d1:74:c2:f6:7c:2a:dd:f2:96:db:b8:63:
b0:79:a6:37:28:6c:e4:8c:c6:f8:7e:66:bb:ef:a0:49:cf:fb:
8a:64:ee:66:9f:ed:5a:8c:0a:47:7a:1a:0a:9c:b2:ad:81:22:
95:89:d5:9f:df:ca:7c:ac:96:9b:79:17:2d:3a:64:53:0d:a2:
2f:a5:2d:ad:43:f8:c0:e9:23:88:3b:9b:e2:8e:76:e1:5f:71:
8c:52:8a:d9:11:d3:af:8c:7f:08:2e:f6:ba:1f:51:35:81:1d:
86:28:f2:33:6f:c8:eb:be:99:68:34:25:69:74:78:5f:d7:81:
5e:19:d9:e5:f2:f6:f0:21:8d:e8:ca:70:a1:b3:8d:24:25:e4:
7d:db:20:cb:b1:52:07:32:d3:d0:d8:22:57:8f:17:5d:03:78:
a0:cd:6d:f8:4f:11:a5:3b:91:2b:bf:00:71:f6:72:8c:e0:ec:
1d:c3:9c:0d:86:cf:d0:05:79:57:e8:46:ff:c4:50:be:3c:e6:
13:f9:cb:1e:07:c3:a2:15:2a:b6:22:1f:a4:f4:90:b0:24:23:
7e:d7:b7:84:7e:7c:c1:27:97:f8:c6:40:b3:10:ab:56:35:a5:
58:8c:24:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:54:34 2026 by rpki-client