Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
File: EH6W-USd78RwvMWpH5IXxigawbI.mft (raw, json)
Hash identifier: 4qQL35osLxddgQptszOhHWqTPrkD+12iY+siayXQEsM=
Subject key identifier: D4:08:8D:29:0B:3E:DC:AD:93:5A:FA:57:A9:85:9C:83:BC:B0:FA:22
Authority key identifier: 10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2
Certificate issuer: /CN=107e96f9449defc470bcc5a91f9217c6281ac1b2
Certificate serial: 019CAC7E55BDCFFB99A3D4C28A5DEFD127B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 03:01:26 +0000
Manifest this update: Mon 02 Mar 2026 03:01:26 +0000
Manifest next update: Tue 03 Mar 2026 03:01:26 +0000
Files and hashes: 1: EH6W-USd78RwvMWpH5IXxigawbI.crl (hash: hpmfcjIXUnlEZItWm9DE46BO4vIm4p7Q1cBJQH3gImA=)
2: gv1GGCci0GYDu_oCzbbduhxzrWw.roa (hash: YOl1u3KuTTS65SS09VBRfvkXVdLfXku57oCCyc5onLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:55:bd:cf:fb:99:a3:d4:c2:8a:5d:ef:d1:27:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107e96f9449defc470bcc5a91f9217c6281ac1b2
Validity
Not Before: Mar 2 03:01:26 2026 GMT
Not After : Mar 3 03:01:26 2026 GMT
Subject: CN=d4088d290b3edcad935afa57a9859c83bcb0fa22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fd:0e:06:1f:6f:85:75:8d:6b:cc:78:70:17:
fc:d7:30:30:c9:89:8b:51:ba:2e:14:71:71:3f:f0:
9a:59:81:28:c8:6c:6d:9c:94:90:82:45:fa:0b:fa:
b3:37:5a:d0:c0:48:8b:d9:60:76:45:3f:ab:bd:ab:
be:2b:b1:3f:9c:08:6e:e9:15:48:81:09:af:81:56:
8d:22:07:b1:50:76:28:3e:4a:1c:be:7d:47:d1:d7:
42:3a:c6:d8:6e:83:b3:c2:a8:dc:a0:f8:f1:da:61:
a0:b5:d7:24:68:fb:4f:24:25:14:3b:28:16:63:c4:
f3:7f:92:1b:7e:19:d7:31:27:a4:cb:91:51:62:77:
68:c3:f9:f4:68:9c:7f:ee:16:7b:c8:94:c4:59:5c:
34:cf:56:80:4c:ea:2b:e2:61:25:06:02:46:ef:5d:
58:36:54:1d:8b:22:70:38:6f:19:ab:68:c0:20:1b:
7c:bf:8a:03:31:a2:0e:63:f7:0b:e2:33:53:e6:0b:
cc:37:24:b5:e0:66:3b:97:71:7c:92:a8:e7:f9:7e:
d2:25:e1:d6:3e:62:80:b6:95:2c:ae:ca:5c:68:9c:
f5:c5:d7:3a:39:97:f3:6f:e6:d8:ff:a5:b8:49:83:
45:ff:a7:38:d8:2c:b0:7e:80:cd:fc:fa:19:69:dc:
79:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:08:8D:29:0B:3E:DC:AD:93:5A:FA:57:A9:85:9C:83:BC:B0:FA:22
X509v3 Authority Key Identifier:
keyid:10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:87:70:10:65:45:2e:d0:7d:35:4a:8e:a9:00:e2:ef:8a:9d:
5e:76:08:55:ef:50:d5:c4:4b:1d:7b:90:fe:85:c6:a3:3d:ec:
4b:60:0e:47:8f:60:06:8c:19:cc:d3:e7:81:a4:ce:5c:87:a1:
70:2b:0d:38:ad:b5:5e:60:f2:d2:0e:a9:34:63:b6:fd:53:4e:
d4:2b:69:9f:cf:db:63:be:91:1a:b7:74:2c:2f:4a:39:d7:1b:
53:83:28:83:46:5b:4d:76:af:68:3b:06:c4:6a:25:ef:b3:39:
a3:57:01:81:e2:40:48:d3:84:5a:e6:02:62:30:90:52:1f:c5:
dd:6c:5e:11:5e:47:16:2d:bd:e3:85:58:b8:00:b1:f6:f5:78:
ff:cb:e6:ac:50:f0:c8:54:74:c7:0e:b0:10:a3:7a:30:af:0c:
50:12:a9:c6:83:39:56:3a:07:84:97:c6:a6:eb:2d:eb:96:80:
b8:70:a0:f0:10:b5:8f:ab:35:6a:01:4b:ed:5b:6a:4e:11:c6:
6f:7d:f7:8b:f1:a1:7c:6d:fc:f4:42:42:ed:ee:78:fb:2b:50:
6e:c6:8b:a9:e3:bd:5a:d8:26:71:8c:e5:da:19:e9:fc:b6:00:
8b:61:b6:de:9d:c4:ba:c5:0d:b2:ac:b2:6e:79:95:92:7b:be:
7b:31:c2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:57 2026 by rpki-client