Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
File: EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json)
Hash identifier: jpX7Anjb/2W8MRD/+YPVT1BdIqrqpRUQswwTn/ksD5k=
Subject key identifier: 72:DD:B7:50:94:ED:90:F4:8B:F8:F7:AE:49:49:9C:F9:45:A3:7C:C8
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 019F8F4724C46AB09DE6A73CEC4D2CB05537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
Manifest number: 19CF
Signing time: Thu 23 Jul 2026 14:00:32 +0000
Manifest this update: Thu 23 Jul 2026 14:00:32 +0000
Manifest next update: Fri 24 Jul 2026 14:00:32 +0000
Files and hashes: 1: 2UJnYkLlrBrsr-FiuY1t_mTWT4k.roa (hash: Xa61lzBRtSApWj6goAfzYPWzx5tHlOIe0rD8n3ZeiWM=)
2: 6SSFg2yTmoKjF6zDnreMbjMeibE.roa (hash: AXKKKuWwPyZUnqIrE5CjvILYke6ea5omdcN+j9qzetQ=)
3: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: bYk/2dcqoP5VxhuDOf25NXeS+5NhRxped8D82kX7mko=)
4: IL8deFD8PSOp3NWJSt_iFRSnHrw.roa (hash: q/v7MQox/nq9r/rZ534FmTQXSTW9buaaFYPj+WtYk78=)
5: Q5hESTZfbwdELtpLu27GaP7-Lno.roa (hash: ObHNDf8xA8n0C2IML/LhP97ggga61XCUWT978woHwn0=)
6: ZKLNMt3VfAzRkdvHr5Xd6gL_UHI.roa (hash: MwQzyqB63sngmzcWgEGwpFF72y7jC9kNOl+3Zg+6fcs=)
7: fKYfVT1YDQ8JUaTATaBTlPz4QNw.roa (hash: oYpajimnxUNbsLq6vnCVkRjpUdwX5aoikIaxhzhw2Vw=)
8: qK_PP9-atac9mTKlNBkq0IeVJSc.roa (hash: 7XIhv4ZG0yNjDke4N6v5k/ztyTTS+fsvn2uOI243g1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:24:c4:6a:b0:9d:e6:a7:3c:ec:4d:2c:b0:55:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Jul 23 14:00:32 2026 GMT
Not After : Jul 24 14:00:32 2026 GMT
Subject: CN=72ddb75094ed90f48bf8f7ae49499cf945a37cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4e:8e:c0:1e:69:a0:1c:a7:91:71:8c:96:10:
71:c0:3f:d8:9e:d8:d6:b9:a1:d5:ee:63:73:07:94:
84:9a:e1:f5:a1:e6:ca:ca:46:9a:3a:2b:75:88:35:
79:a3:4a:66:04:0e:ed:c2:b7:c9:63:e1:f1:81:fd:
54:fc:43:42:d9:35:90:e4:fe:db:ca:6d:b2:57:9d:
0d:be:e1:34:30:40:dd:06:79:e7:f1:cb:84:ad:a8:
e8:b5:6f:6d:9f:b9:77:c8:f9:08:8e:c4:b7:69:2b:
a6:36:93:64:24:98:a2:71:35:f0:61:3e:9c:40:5f:
ba:bb:5d:ce:45:c7:87:42:f3:6a:bc:22:ca:55:d0:
68:9e:fc:7a:14:44:fc:d3:00:20:81:96:83:a1:25:
1b:0e:da:e1:c7:7f:fd:9d:3d:60:85:69:3a:a9:40:
0d:c8:8b:e7:fc:7c:e9:59:a6:70:29:e8:b2:2c:7b:
53:e6:ef:8d:7c:e7:8d:be:7e:18:3e:8f:dd:4c:82:
e2:d4:d1:51:d9:4d:5d:00:2a:fc:73:4c:b9:21:24:
b4:8b:91:06:bc:a0:84:d7:ea:5d:78:06:1c:1a:32:
3d:b0:43:29:a0:b4:e5:82:31:b9:95:53:c1:c1:87:
b4:5d:35:bd:7d:41:2d:67:36:d2:37:84:5f:ff:f0:
26:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DD:B7:50:94:ED:90:F4:8B:F8:F7:AE:49:49:9C:F9:45:A3:7C:C8
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:5d:97:05:4a:e7:54:54:2a:d5:1b:5e:68:a1:21:52:8d:18:
62:19:ae:57:f8:0e:66:0e:15:ce:53:f6:5a:3e:12:56:b2:cd:
e8:33:5d:dc:f2:87:80:a8:a0:43:ac:52:41:70:fc:fa:14:55:
82:e3:ae:1d:15:59:0f:68:ba:43:4e:31:6f:da:50:d4:57:14:
37:66:c7:cc:20:89:9a:f2:06:d7:20:1c:b9:e3:2b:38:de:79:
3f:6d:e1:33:ad:f1:a7:de:ec:ee:89:09:54:1a:98:b8:68:5f:
07:91:4f:1c:23:27:c7:45:d3:bb:c6:41:43:6c:4d:4e:d4:76:
b8:f5:d5:f4:94:b6:0a:dc:ba:5b:aa:88:1c:c4:c8:49:45:1f:
25:f4:03:da:78:a1:e3:aa:40:3b:73:f8:ce:02:1a:49:1e:59:
a2:e0:10:52:6c:91:f0:30:99:3c:a0:0a:fa:a1:b2:55:03:19:
a5:e3:81:79:65:c4:97:1d:58:3a:0f:ed:c0:61:ee:23:d1:d4:
01:f6:e7:92:c7:ca:fd:ee:3d:b3:9f:dd:38:af:dd:7c:89:48:
0e:a1:a3:8e:d3:5d:b8:34:8b:a0:03:41:a5:5e:14:fa:1b:a3:
c1:8d:d9:9f:46:94:74:6a:76:e1:7c:ce:18:b7:76:51:7e:bc:
05:55:b3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:01:08 2026 by rpki-client