Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
File: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft (raw, json)
Hash identifier: CQzoWciYVZnkJwL9p/MHKS4c87Quw1vUZzRtH9MfavM=
Subject key identifier: 29:21:F4:A8:E6:35:FA:BC:D6:54:0F:D5:3F:4D:E7:C8:F7:A9:39:70
Authority key identifier: 7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
Certificate issuer: /CN=7a17259a863c3d637d457e119b750df95e003fd6
Certificate serial: 01A0DCBBEE32FEC1570896CF7D603D370785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
Manifest number: 1A71
Signing time: Sat 26 Sep 2026 08:01:38 +0000
Manifest this update: Sat 26 Sep 2026 08:01:38 +0000
Manifest next update: Sun 27 Sep 2026 08:01:38 +0000
Files and hashes: 1: 5tBrp55-EAXMGlNBrWNqj744wk4.roa (hash: rV+tN1f8sl1mzbaoUz6eUbNwGQ89OtRS1uDIueamB+M=)
2: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl (hash: SKbBSRQVyHuCoqzkMGsqcS6+3HHd5eBPk/7ui3icEGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:ee:32:fe:c1:57:08:96:cf:7d:60:3d:37:07:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a17259a863c3d637d457e119b750df95e003fd6
Validity
Not Before: Sep 26 08:01:38 2026 GMT
Not After : Sep 27 08:01:38 2026 GMT
Subject: CN=2921f4a8e635fabcd6540fd53f4de7c8f7a93970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2a:7b:3b:5a:f9:5a:85:98:f8:f7:33:e6:30:
b6:0d:9a:f4:26:ef:e3:1e:1c:45:83:96:0f:96:c2:
49:3f:26:62:94:82:d9:94:21:da:4d:d7:5f:f4:68:
82:70:7f:5c:ef:c9:e1:b1:c0:3f:15:d9:63:d5:12:
a2:64:c8:03:1c:a4:d6:72:32:55:ee:f0:04:cf:e2:
0b:c7:f1:b8:43:3e:65:07:75:b8:80:7f:72:6f:9e:
50:f0:99:2b:af:d4:6b:c6:b5:4b:b4:c9:b6:93:0b:
c9:5a:9d:22:93:bc:38:7b:db:da:17:b3:89:f6:82:
3d:1b:69:e6:01:5f:54:9b:f6:f0:b1:1c:cd:34:6e:
ab:fe:44:b8:0e:18:f1:cf:3b:23:be:df:c7:41:14:
56:c9:de:14:df:dc:3c:c5:35:1f:ac:98:d4:8a:6a:
18:be:54:43:21:96:ac:c8:7c:2f:b1:71:50:5a:97:
36:e3:6e:46:90:f1:e1:31:10:d9:62:dd:2f:e6:f3:
cd:e7:52:ec:1c:c1:f4:34:48:fa:e2:24:39:c7:fc:
3d:9f:fa:40:92:92:97:68:84:de:51:ac:27:a5:59:
2d:16:33:28:29:21:43:9d:e3:06:07:3c:28:3c:3a:
fa:e0:f0:43:57:39:13:f0:32:8b:4d:ce:c5:4c:4d:
ed:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:21:F4:A8:E6:35:FA:BC:D6:54:0F:D5:3F:4D:E7:C8:F7:A9:39:70
X509v3 Authority Key Identifier:
keyid:7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b4:ba:6b:e8:c4:4d:3b:84:35:b5:c6:07:0e:cf:85:74:ee:
e3:c0:91:16:fe:55:e2:a5:e1:fd:79:1d:3a:53:69:8b:56:dd:
52:2d:81:ad:29:37:2d:d1:b5:47:d6:95:b5:b3:87:f5:ca:e2:
6f:47:a9:1d:02:f9:68:8e:77:9a:79:34:8e:2c:5a:44:d1:01:
98:a1:5c:b7:e0:c8:7c:15:c1:c8:9a:88:08:4e:27:87:ff:12:
c1:e7:c1:37:a1:55:1a:82:93:f2:cb:8a:c7:4c:54:77:55:f3:
a5:e2:5c:ab:95:32:ea:a3:5d:92:11:b9:b9:f1:eb:c9:d2:f3:
54:9b:40:ec:6c:83:4d:3a:c1:e3:b5:95:c4:0d:36:62:6f:a1:
7c:63:15:eb:8f:76:bf:9a:ca:49:61:d8:38:3d:d8:a6:ca:5c:
72:f8:4e:16:44:09:44:a6:84:77:51:4d:94:7f:88:17:b1:44:
7b:5e:5a:9f:be:17:a6:8c:be:73:19:3a:96:8d:dd:e9:55:68:
9e:73:87:1f:50:1f:de:d7:0e:e1:12:1b:1d:41:95:bb:59:e5:
81:8e:3f:ac:b5:ea:86:c8:5a:db:ae:b6:96:b8:28:43:7b:0b:
5f:e2:1f:3e:d3:25:4e:68:02:6f:07:d5:0a:17:51:2e:06:70:
f7:e8:f4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:30:13 2026 by rpki-client