
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
File: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft (raw, json)
Hash identifier: UsJeOF+YcyA/SCyJihpO0N5rad7cechx15v2UwVSQgI=
Subject key identifier: 3A:22:86:45:3D:2F:86:F4:F9:65:C0:72:B9:38:79:2E:CE:AF:C9:7E
Authority key identifier: 7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
Certificate issuer: /CN=7a17259a863c3d637d457e119b750df95e003fd6
Certificate serial: 019FA9AB822EDD470BB2F4CF0F746E33FDCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 17:00:17 +0000
Manifest this update: Tue 28 Jul 2026 17:00:17 +0000
Manifest next update: Wed 29 Jul 2026 17:00:17 +0000
Files and hashes: 1: 5tBrp55-EAXMGlNBrWNqj744wk4.roa (hash: rV+tN1f8sl1mzbaoUz6eUbNwGQ89OtRS1uDIueamB+M=)
2: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl (hash: GDFL78F8mhiLlGbL/yPCKqG823LMU6HhO57xlssC3qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:82:2e:dd:47:0b:b2:f4:cf:0f:74:6e:33:fd:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a17259a863c3d637d457e119b750df95e003fd6
Validity
Not Before: Jul 28 17:00:17 2026 GMT
Not After : Jul 29 17:00:17 2026 GMT
Subject: CN=3a2286453d2f86f4f965c072b938792eceafc97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:96:6a:e8:05:2d:1e:73:5a:76:d7:fd:84:bf:
c8:b8:7b:a2:6b:c8:7d:cb:6d:18:50:70:93:f3:5c:
d4:ed:4e:1b:93:71:33:70:23:8d:60:60:c5:af:75:
5a:aa:16:1e:52:6b:10:f1:2d:8c:d1:a6:7c:7b:88:
fe:8a:59:14:d5:92:bd:e6:c9:00:39:9d:5f:55:98:
a9:23:18:2e:3d:df:a6:b8:77:e3:4d:54:cf:ee:48:
a9:91:89:24:b1:f5:eb:c5:00:82:29:f0:5d:21:4b:
56:f2:6b:26:b2:c0:ed:1a:18:a1:8e:ea:57:71:ca:
0e:65:d8:36:71:f0:51:8f:77:14:1a:84:aa:63:7a:
43:fb:55:d4:ab:ad:b6:55:c5:9a:05:3e:2c:9e:38:
2a:a7:d3:4f:78:d0:b7:f9:0c:f8:82:3c:88:7c:6c:
04:18:63:dc:7b:b2:7c:3b:6a:ef:5d:b6:06:f6:5d:
e9:3d:4f:cb:9d:b4:7e:5e:c1:a5:3a:1d:ac:22:01:
bf:29:f7:50:fd:fe:46:82:37:9b:da:c2:73:e4:79:
54:97:5b:b7:8b:b0:27:a2:ce:bc:7d:a4:25:cb:f1:
ca:82:8b:db:8c:57:f7:63:66:d1:14:c7:8d:ec:3d:
cc:fb:85:5e:40:21:0d:6d:b8:4f:9a:07:64:46:08:
11:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:22:86:45:3D:2F:86:F4:F9:65:C0:72:B9:38:79:2E:CE:AF:C9:7E
X509v3 Authority Key Identifier:
keyid:7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9b:99:3b:6f:37:dc:fb:8e:af:54:29:90:0d:ca:40:07:4a:
8d:b2:d2:34:5f:2f:8b:7b:48:6d:cf:2e:00:7e:28:4e:15:78:
78:e6:67:9f:4c:c1:b6:70:03:83:7d:de:c6:6f:fa:ad:b4:30:
ba:ce:e2:63:72:aa:ec:06:41:00:4e:86:df:01:3c:13:bd:e7:
7c:af:7f:17:7c:1c:0d:d3:73:10:1e:af:6a:c0:dc:f2:6c:21:
d4:9d:f5:ae:f1:b5:0e:2d:32:27:b8:32:3e:e3:d7:fe:15:a5:
54:4a:47:4e:5d:a8:b7:be:24:53:93:86:64:ec:16:43:6c:a7:
81:8b:79:2f:65:63:9a:bd:0e:a5:3f:3e:fd:62:ae:b7:13:52:
00:57:fa:d3:85:97:58:f0:82:bb:9c:32:e2:a3:ad:05:4a:e4:
1a:2a:ab:37:86:fe:cf:7e:66:04:7c:33:57:0d:49:43:5e:d9:
4d:7b:7f:17:f8:ad:2b:51:69:b7:a7:87:6d:74:92:18:55:b9:
c0:e7:3a:e3:f0:a0:ea:a3:c3:19:40:f1:9d:c9:e5:c5:76:d2:
69:be:94:2e:9b:72:1b:6b:fe:69:2d:f7:9d:28:03:8b:c4:1c:
5f:56:64:f5:84:ca:8d:06:69:f8:24:c4:68:65:b6:07:ad:28:
b1:e7:c0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:00:46 2026 by rpki-client