Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
File: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft (raw, json)
Hash identifier: 8A/Rz2dvVACqJleRuXX0Gljo62KY9OyZR8jng/ZkBVw=
Subject key identifier: 5B:64:B8:3D:96:D8:DD:31:E9:C7:D7:21:8C:B9:77:2E:D5:4C:D0:9E
Authority key identifier: 7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
Certificate issuer: /CN=7a17259a863c3d637d457e119b750df95e003fd6
Certificate serial: 019CAAFD82D235928F68CCC40CB77401734B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 20:01:06 +0000
Manifest this update: Sun 01 Mar 2026 20:01:06 +0000
Manifest next update: Mon 02 Mar 2026 20:01:06 +0000
Files and hashes: 1: 5tBrp55-EAXMGlNBrWNqj744wk4.roa (hash: rV+tN1f8sl1mzbaoUz6eUbNwGQ89OtRS1uDIueamB+M=)
2: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl (hash: vcWmXYPGzp4+uJL9oKjArlnio7sh9+m5r5Jpr9Y2ruI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:82:d2:35:92:8f:68:cc:c4:0c:b7:74:01:73:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a17259a863c3d637d457e119b750df95e003fd6
Validity
Not Before: Mar 1 20:01:06 2026 GMT
Not After : Mar 2 20:01:06 2026 GMT
Subject: CN=5b64b83d96d8dd31e9c7d7218cb9772ed54cd09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0f:21:98:7a:83:18:5a:5a:96:a1:41:ef:cc:
4b:24:c9:ec:fe:43:39:0d:55:4c:69:64:fd:50:3c:
1a:98:8a:b5:a8:47:1b:68:87:1a:2f:62:9a:21:4e:
2c:3c:99:ea:5b:ee:ba:2e:d6:51:5a:54:5d:0a:71:
78:aa:06:50:1c:43:e1:62:e1:00:f9:50:1a:0c:ca:
c3:06:94:65:61:88:6a:84:33:5a:af:71:b6:4c:95:
63:28:3f:bc:c7:58:11:7f:a8:91:51:a5:69:f6:54:
d5:12:79:d3:01:94:96:0e:e7:20:61:1f:72:ad:0c:
9f:e5:ab:12:73:1a:87:d0:a3:03:6d:08:2f:f4:73:
8c:32:a5:60:d2:18:50:da:26:f7:53:ef:db:b2:f2:
a5:35:62:5c:e9:5a:2f:02:2e:c4:15:33:ac:1a:c4:
64:54:79:ee:68:49:dc:f0:ee:55:1d:83:c4:ab:f1:
23:92:d6:dd:ea:d1:3f:1a:fe:07:c7:04:f1:da:1e:
7d:47:a5:66:a5:05:57:0d:ac:b2:cd:95:17:6d:8e:
40:26:a6:e6:f0:07:1b:77:67:c7:0e:8f:5e:19:59:
9e:98:db:64:81:8d:11:08:31:56:f6:52:1b:36:d4:
8d:a1:ea:59:eb:2c:a9:dc:95:1e:0f:15:a4:01:d1:
e8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:64:B8:3D:96:D8:DD:31:E9:C7:D7:21:8C:B9:77:2E:D5:4C:D0:9E
X509v3 Authority Key Identifier:
keyid:7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:1c:85:d4:9e:85:8f:f0:50:fc:fd:f3:22:3c:9b:86:d7:81:
39:68:e3:01:7a:10:52:4e:43:cd:da:19:fe:4d:d4:6d:09:09:
d4:ea:fd:27:04:7a:14:9e:c1:d4:c8:85:22:11:0e:5b:ae:e6:
7d:43:cc:22:8b:99:2f:d0:8b:20:35:e0:27:55:ca:fb:01:83:
2a:09:27:56:ec:18:31:e1:74:b3:71:f8:07:3e:5e:00:e7:d9:
ae:c8:e6:8f:ed:ca:87:ac:b2:32:6d:c1:d0:ef:a3:cd:44:ff:
45:c9:45:14:28:75:08:08:50:ea:f9:14:ea:ac:43:cc:68:e6:
cd:36:11:b4:33:44:5a:21:90:0e:ee:7b:67:4e:b3:d6:3a:85:
38:1a:df:93:c8:41:ab:6c:5f:f8:cf:e9:46:e2:66:54:0f:9e:
3e:31:6d:42:9b:82:1d:83:d2:1f:94:27:ee:90:c9:c2:a8:96:
50:83:3a:30:87:48:91:ca:d5:2e:68:a7:d5:39:fd:18:d4:24:
ee:67:a0:ca:01:b6:ee:d3:47:8b:08:6a:b0:38:ae:69:31:6f:
53:f3:b6:b0:d2:5a:81:07:f5:72:49:8a:8e:e8:eb:a8:77:19:
e1:83:41:70:4e:f9:ab:9a:03:52:4b:25:b8:a9:e5:4b:41:b4:
ea:77:c9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:41:48 2026 by rpki-client