Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
File: ehJ9Y84cnzVXOQryH8BhBypSX04.mft (raw, json)
Hash identifier: igHjoq4mBFLcVJaxTLBxbEHDaKGGCRMB1jW+967uiAE=
Subject key identifier: 04:06:E8:7F:B1:EC:FC:6A:65:AE:05:26:F0:E0:4A:FD:88:9D:57:8B
Authority key identifier: 7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
Certificate issuer: /CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Certificate serial: 019D9AE2893A587A8FEBC8C598074AE49F75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
Manifest number: 0419
Signing time: Fri 17 Apr 2026 10:00:30 +0000
Manifest this update: Fri 17 Apr 2026 10:00:30 +0000
Manifest next update: Sat 18 Apr 2026 10:00:30 +0000
Files and hashes: 1: ehJ9Y84cnzVXOQryH8BhBypSX04.crl (hash: TYPX28Zk8p+iXdxxSlzqCFeQUS6Na/fNkTxZa2K4Wz0=)
2: mryfSMsiVc0yv4FSUpt7qiqcwh4.roa (hash: 0IMb7oddMwh/zy5T4EnTss9mtPc9VXAUaEOcmqL1xfU=)
3: o_rtVjzkw0KDuX61bKwdi27cJvI.roa (hash: /gFVliPW+JCCvNfNfgkacSugBlyQGtqR4HbJDxkhEjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:89:3a:58:7a:8f:eb:c8:c5:98:07:4a:e4:9f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Validity
Not Before: Apr 17 10:00:30 2026 GMT
Not After : Apr 18 10:00:30 2026 GMT
Subject: CN=0406e87fb1ecfc6a65ae0526f0e04afd889d578b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f1:e4:3a:8a:34:dc:3a:56:43:d9:89:24:24:
46:c7:87:9f:7b:2b:b2:2d:d5:cc:09:7f:59:a1:ef:
a3:0c:f2:02:68:57:72:60:aa:a1:26:d9:7b:11:16:
57:11:f1:c5:d5:44:ef:f1:de:38:1f:08:b3:c5:95:
36:33:01:05:ea:25:2b:9c:6a:15:aa:2e:06:af:39:
f4:1f:7b:21:e2:0e:96:c6:8c:b5:b3:c7:ee:6a:31:
3e:a6:95:f1:7b:f3:dd:a6:4c:52:a3:07:68:8e:d6:
05:37:9a:b1:ae:d3:fa:76:58:41:5e:b4:cb:4d:79:
71:c9:17:15:3f:d0:d6:1e:7b:9d:d5:c6:89:c4:f5:
12:21:70:73:7a:87:78:9a:67:fd:1a:36:74:11:8c:
22:bb:e9:87:ea:65:ee:07:e4:9a:43:30:ea:b7:2b:
f1:54:3f:e0:10:b9:10:5b:31:8c:f8:30:13:cc:be:
34:4a:e7:0d:54:af:6d:1a:7a:dd:9a:d7:65:78:e1:
af:7d:42:44:32:16:e4:ad:1b:d9:54:76:65:c2:e4:
cb:6f:ba:81:71:2e:2b:d3:43:35:51:da:5b:c3:7f:
89:c0:fa:7c:c3:17:22:28:f6:ca:b6:99:5b:c1:31:
70:9c:0b:6b:9a:0a:15:b2:7b:29:2d:c6:12:64:2a:
10:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:06:E8:7F:B1:EC:FC:6A:65:AE:05:26:F0:E0:4A:FD:88:9D:57:8B
X509v3 Authority Key Identifier:
keyid:7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b8:f5:30:7b:f7:d2:a3:f8:1c:21:9b:d9:6c:59:66:eb:b4:
0c:e2:cf:c0:c1:50:06:1f:6c:b9:5f:d0:a3:6b:b1:5a:f0:c6:
5e:8d:28:2d:67:c3:7a:4e:b3:cf:ab:0b:5f:ea:09:48:3a:38:
2e:2b:d9:86:b7:ef:2b:75:21:fc:7f:e3:f0:c6:bc:fa:58:f1:
2a:07:59:54:12:83:22:63:cb:55:a0:65:7f:44:10:17:b8:f5:
96:bd:ff:46:7d:bd:b7:f5:0e:77:c4:71:be:6d:c9:71:cb:be:
82:17:d8:06:ef:6a:4e:46:06:59:b4:7f:92:38:3f:6e:33:fb:
89:5e:5a:05:6f:af:57:c4:3d:6b:de:c7:7b:05:6f:d8:28:8b:
6e:39:5c:02:c8:34:ca:64:52:b7:b4:f1:ed:3f:65:a4:4b:7d:
9a:6d:a3:95:32:26:07:b4:d6:56:e7:67:86:75:9c:c0:2b:e8:
0a:1e:8b:af:28:db:9a:cb:7c:09:c3:a2:56:cb:c1:de:cc:40:
40:73:5a:1b:03:4a:da:64:fe:11:51:6f:a4:40:71:37:6f:97:
5f:f8:5e:02:28:85:51:ac:87:7b:21:54:2c:fe:9a:6a:1c:70:
45:44:6a:46:2b:fe:07:3c:0b:4b:86:f8:58:95:fd:f4:b6:aa:
70:51:6a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:33:44 2026 by rpki-client