Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
File: EH6W-USd78RwvMWpH5IXxigawbI.mft (raw, json)
Hash identifier: zuuUcy4JK9POd654WL71lVu1Z+nMC/oh+RTIRrs832k=
Subject key identifier: 76:D6:A4:26:C5:20:18:2B:C9:98:22:D2:53:D5:19:47:15:10:BD:C0
Authority key identifier: 10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2
Certificate issuer: /CN=107e96f9449defc470bcc5a91f9217c6281ac1b2
Certificate serial: 019D9A06D1B777DF894C43702DF645DFB13E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 06:00:31 +0000
Manifest this update: Fri 17 Apr 2026 06:00:31 +0000
Manifest next update: Sat 18 Apr 2026 06:00:31 +0000
Files and hashes: 1: EH6W-USd78RwvMWpH5IXxigawbI.crl (hash: 5Nlk5raVDo5RQ0nvftJjRPcknEXfNmarKxSAgj1DP7c=)
2: gv1GGCci0GYDu_oCzbbduhxzrWw.roa (hash: YOl1u3KuTTS65SS09VBRfvkXVdLfXku57oCCyc5onLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:d1:b7:77:df:89:4c:43:70:2d:f6:45:df:b1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107e96f9449defc470bcc5a91f9217c6281ac1b2
Validity
Not Before: Apr 17 06:00:31 2026 GMT
Not After : Apr 18 06:00:31 2026 GMT
Subject: CN=76d6a426c520182bc99822d253d519471510bdc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e5:59:98:d8:13:9c:b6:3e:93:a1:31:6b:70:
71:bd:1f:07:4d:48:b0:d4:45:eb:1b:c8:45:9d:3a:
e3:ca:e4:b5:11:3b:df:d1:a2:34:f9:ea:e3:19:8a:
46:ac:92:ab:f0:c2:42:63:53:91:cc:1a:6b:d1:38:
7a:d3:67:b5:04:3c:be:fe:16:d0:69:b7:c0:a2:10:
cc:6c:0f:bc:10:35:3a:cf:db:c7:95:76:62:f1:f7:
fa:ce:5c:b9:06:e8:80:f6:e4:78:99:37:7b:83:b3:
15:ee:db:70:3a:d6:fd:50:cf:56:d6:70:b0:f2:4a:
58:d3:04:b1:b5:4c:e8:ba:3e:d4:37:eb:c8:e3:1d:
84:50:5d:df:05:4e:06:6c:b2:ab:87:90:50:82:92:
a1:e1:4e:80:04:15:cc:d2:22:7b:3a:28:c2:92:c2:
2b:74:76:9a:4e:0d:52:a5:5c:fe:78:6f:d7:f8:b0:
4f:02:41:1f:12:eb:f4:18:8c:af:48:ab:58:60:77:
71:cc:27:26:c5:f9:1e:09:c8:f0:eb:e0:cf:3f:2c:
e9:8c:7d:2d:5d:6d:a4:76:82:1d:63:03:64:0b:fa:
98:18:4c:5b:af:91:c2:cb:83:f1:e8:31:bc:71:8e:
ab:57:00:b3:7f:f2:9f:d6:26:1b:1b:27:ea:b1:8a:
9e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D6:A4:26:C5:20:18:2B:C9:98:22:D2:53:D5:19:47:15:10:BD:C0
X509v3 Authority Key Identifier:
keyid:10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:26:35:ac:c9:5c:f5:a7:2f:be:13:06:c0:76:a7:91:47:09:
55:40:4c:a2:5c:f3:fe:4a:17:cc:66:b4:42:fe:69:5f:87:62:
17:07:6a:c9:2f:ad:8d:87:10:2f:e0:40:da:4e:66:5e:97:cd:
1b:dc:b8:04:16:d0:d6:7e:90:e6:c9:fc:7b:b6:a2:36:c5:ca:
51:40:70:ff:76:d0:69:8c:c7:4d:65:ce:0d:b0:18:fa:2d:a6:
ae:e1:0c:f1:75:db:e9:6b:e2:1b:79:4b:c3:48:5e:7d:1e:58:
bc:25:1f:62:ea:0a:24:79:89:8c:41:c7:24:a9:d6:77:f0:74:
f8:9d:cd:0b:b9:69:15:d0:41:48:02:20:32:6a:67:52:25:31:
a0:de:8f:62:5c:4f:1e:3b:48:e8:8f:25:81:bb:17:ab:cd:81:
81:2e:a1:c5:0f:75:aa:b8:0c:8f:28:fd:b9:1b:cf:b2:f0:ae:
49:bf:a8:32:87:1f:4f:5c:37:c3:ba:dc:95:05:73:0b:d6:3c:
20:47:5c:3c:ca:23:61:55:51:ab:bf:d2:f0:97:7f:23:f7:9f:
d4:9d:44:cf:05:6c:af:82:2a:19:17:0d:90:b1:9c:eb:8d:f2:
d9:bb:2a:61:f2:e9:cc:22:62:40:e9:cb:bf:dc:af:2e:c6:80:
67:4e:8c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:16:47 2026 by rpki-client