Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
File: EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json)
Hash identifier: FVjSWJ+tSH9Y1JE7dNFsxEfgpjhJARUj0mWEn1KNbzA=
Subject key identifier: 5D:80:EB:26:08:B4:44:5B:A6:B5:30:C4:0B:DF:0C:68:65:B8:3D:C2
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 019D28F239B8F9645EB495B10890D3308FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
Manifest number: 1890
Signing time: Thu 26 Mar 2026 07:00:56 +0000
Manifest this update: Thu 26 Mar 2026 07:00:56 +0000
Manifest next update: Fri 27 Mar 2026 07:00:56 +0000
Files and hashes: 1: 0dC4r-_GYoQ6ya9DJPoU2aoMd4k.roa (hash: 8JZ2nYpbU9wzayV2maNMxpbZwQJ8oUlvvk4sDKPfND4=)
2: 2UJnYkLlrBrsr-FiuY1t_mTWT4k.roa (hash: Xa61lzBRtSApWj6goAfzYPWzx5tHlOIe0rD8n3ZeiWM=)
3: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: wNzpI4dfFijxUfZaaLSdLh3MT2732jAZ4ggHz4m7BO8=)
4: IL8deFD8PSOp3NWJSt_iFRSnHrw.roa (hash: q/v7MQox/nq9r/rZ534FmTQXSTW9buaaFYPj+WtYk78=)
5: ZKLNMt3VfAzRkdvHr5Xd6gL_UHI.roa (hash: MwQzyqB63sngmzcWgEGwpFF72y7jC9kNOl+3Zg+6fcs=)
6: fKYfVT1YDQ8JUaTATaBTlPz4QNw.roa (hash: oYpajimnxUNbsLq6vnCVkRjpUdwX5aoikIaxhzhw2Vw=)
7: qK_PP9-atac9mTKlNBkq0IeVJSc.roa (hash: 7XIhv4ZG0yNjDke4N6v5k/ztyTTS+fsvn2uOI243g1w=)
8: xd5IZiz1YB2PdB-q-VKoWUqlfWg.roa (hash: s14zG8n95cnLanJ2EGUmy/+O9/gNhrX1fm7XyiLB6RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:39:b8:f9:64:5e:b4:95:b1:08:90:d3:30:8f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Mar 26 07:00:56 2026 GMT
Not After : Mar 27 07:00:56 2026 GMT
Subject: CN=5d80eb2608b4445ba6b530c40bdf0c6865b83dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:48:b6:9d:3a:09:ac:73:a5:d2:c7:70:97:c9:
66:71:04:c7:a6:20:5e:f6:16:b5:ea:4c:7b:c1:6c:
ce:99:23:37:bc:b3:82:60:53:19:16:ae:d4:8f:20:
8b:57:76:95:68:4c:c9:f5:bc:9b:f6:63:5b:cf:79:
e9:f3:f2:38:e1:5a:aa:65:fc:6e:38:86:d3:ab:78:
09:b5:d1:d7:b1:52:bf:1b:17:1f:a1:77:50:51:c5:
d8:30:24:d3:85:f5:31:82:32:df:f4:f8:6e:ee:5e:
a3:d9:a9:3e:11:0a:1d:5e:8a:47:07:72:99:72:a0:
e7:e8:04:20:31:e9:60:9c:cd:88:6f:21:6d:63:4e:
96:d9:32:89:0f:99:97:4a:a1:2e:b9:81:b0:4f:b7:
82:04:ce:40:fb:57:a4:c7:88:b7:1e:fb:4a:e0:ef:
a8:f2:7d:c3:df:e1:15:2d:15:68:84:0c:59:28:45:
50:d7:3d:86:5d:8f:ef:df:9d:b7:0a:12:fe:d4:aa:
6b:3a:f2:12:c5:a7:66:f3:cf:38:f7:5f:4f:5c:6f:
68:b9:e2:b6:14:96:52:dc:e3:a9:f0:43:84:56:09:
e0:4d:71:3a:0b:8e:6d:90:3d:45:df:4d:af:f7:95:
50:3d:7a:e1:69:95:a1:93:13:7d:a7:cf:0b:a4:54:
04:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:80:EB:26:08:B4:44:5B:A6:B5:30:C4:0B:DF:0C:68:65:B8:3D:C2
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:92:c1:a6:79:29:93:c6:b2:54:12:2c:58:8c:48:09:fe:7c:
ef:e0:aa:28:30:42:02:c7:52:cc:91:6a:68:0d:a2:3b:a6:ed:
ff:c1:6d:ef:f1:31:3c:72:38:f3:1b:cd:45:f0:7e:ab:67:20:
db:3f:06:08:41:8a:cf:61:26:8f:4e:0d:e7:60:99:9e:65:ce:
61:4f:be:9f:2c:2d:66:ab:52:a1:1f:27:2a:70:a7:ee:7b:97:
ab:de:e5:02:65:ed:a6:85:98:07:35:68:7d:00:09:89:1d:06:
4d:fe:c3:f4:bf:d5:61:90:0b:a0:f0:47:ff:a0:aa:2a:9e:bf:
87:e2:0f:13:18:ac:51:f1:26:df:73:d6:84:86:f2:32:23:ee:
51:50:d2:78:2a:e6:c3:34:b0:23:13:55:9d:f4:df:e6:9a:2d:
d6:58:c0:8f:f9:cd:d0:b4:e8:89:97:39:35:e8:c1:3a:b1:f0:
50:36:a3:89:c7:ad:b6:e8:e1:bd:7b:c1:bf:cd:18:c1:c3:b9:
6a:cd:84:38:ed:2f:0d:5f:65:9b:84:16:5a:66:54:07:58:11:
49:7a:21:c4:0c:d7:c4:a5:ca:95:d2:f6:89:28:51:86:49:b3:
73:30:36:4c:3f:da:74:40:a7:dd:44:a0:13:55:e1:64:8c:38:
0b:bd:d9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:48:43 2026 by rpki-client