Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
File: EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json)
Hash identifier: 8ajRGlKmO3RN+2Ac5C1TmZFzQVvKkdV0qCXHYJggda0=
Subject key identifier: EB:08:12:FA:D2:48:92:60:3D:3E:01:6A:24:60:AF:1C:0D:8B:12:41
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 01A0CDEC4AA284721A487AD114833FF9B59E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
Manifest number: 1A74
Signing time: Wed 23 Sep 2026 11:00:09 +0000
Manifest this update: Wed 23 Sep 2026 11:00:09 +0000
Manifest next update: Thu 24 Sep 2026 11:00:09 +0000
Files and hashes: 1: 2UJnYkLlrBrsr-FiuY1t_mTWT4k.roa (hash: Xa61lzBRtSApWj6goAfzYPWzx5tHlOIe0rD8n3ZeiWM=)
2: 6SSFg2yTmoKjF6zDnreMbjMeibE.roa (hash: AXKKKuWwPyZUnqIrE5CjvILYke6ea5omdcN+j9qzetQ=)
3: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: e/3AtCnH4V8QYoksUrLslJYW1UJ227iuK6sa15c+MUU=)
4: IL8deFD8PSOp3NWJSt_iFRSnHrw.roa (hash: q/v7MQox/nq9r/rZ534FmTQXSTW9buaaFYPj+WtYk78=)
5: Q5hESTZfbwdELtpLu27GaP7-Lno.roa (hash: ObHNDf8xA8n0C2IML/LhP97ggga61XCUWT978woHwn0=)
6: ZKLNMt3VfAzRkdvHr5Xd6gL_UHI.roa (hash: MwQzyqB63sngmzcWgEGwpFF72y7jC9kNOl+3Zg+6fcs=)
7: fKYfVT1YDQ8JUaTATaBTlPz4QNw.roa (hash: oYpajimnxUNbsLq6vnCVkRjpUdwX5aoikIaxhzhw2Vw=)
8: qK_PP9-atac9mTKlNBkq0IeVJSc.roa (hash: 7XIhv4ZG0yNjDke4N6v5k/ztyTTS+fsvn2uOI243g1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:4a:a2:84:72:1a:48:7a:d1:14:83:3f:f9:b5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Sep 23 11:00:09 2026 GMT
Not After : Sep 24 11:00:09 2026 GMT
Subject: CN=eb0812fad24892603d3e016a2460af1c0d8b1241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:39:e0:e6:29:ac:dc:95:11:34:18:63:d9:43:
2e:34:59:12:08:44:bf:38:ca:83:28:21:55:c2:51:
b5:87:03:c9:95:56:e3:04:53:56:4c:9a:b8:17:3d:
44:e1:01:90:f9:35:ee:a4:1a:5b:80:c1:df:6c:35:
28:3a:cc:49:6e:9d:dc:2c:81:cd:32:1b:7c:58:55:
1c:38:ba:a0:e2:89:8d:3c:4b:78:e7:91:a0:22:0d:
dc:1f:92:9d:0f:96:9a:8d:98:48:d4:92:0d:e0:e2:
65:98:ca:55:e9:e8:5b:ae:09:0e:59:3c:ee:2c:79:
34:f9:3d:3f:81:06:db:10:d1:c4:85:7e:d4:7d:8c:
df:ba:ad:db:3c:c7:7a:b4:92:f1:32:4d:f0:51:0f:
f4:42:25:e5:c2:7f:91:90:15:34:91:f0:a2:d3:94:
06:37:f1:62:d4:be:ac:e4:b9:90:95:61:f0:7f:13:
f0:1c:f0:a5:42:2b:4b:df:7e:20:fa:22:69:60:4c:
3f:6d:66:da:fc:41:df:83:bb:72:22:1c:2f:30:ce:
14:76:88:e7:53:ca:45:98:2e:0e:2c:20:8d:d4:21:
be:73:e5:96:28:cb:11:ea:cb:35:04:43:0f:92:37:
5a:9c:23:21:57:54:e1:60:e9:53:95:15:43:1c:4f:
59:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:08:12:FA:D2:48:92:60:3D:3E:01:6A:24:60:AF:1C:0D:8B:12:41
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:19:44:ca:67:20:d8:66:60:98:1a:56:07:70:07:3e:e1:8b:
02:ad:59:88:fa:7b:df:4f:12:05:d0:4a:71:8e:6b:92:25:36:
fc:24:90:31:c4:95:f9:39:9e:98:05:07:ee:ac:c4:4d:d8:be:
61:d0:ad:6b:39:02:d7:3b:82:80:38:ad:5d:62:e1:9f:df:2c:
37:74:03:d8:45:ea:70:90:76:30:d3:80:e6:28:8d:4d:66:48:
61:0c:84:6f:21:ae:be:8a:d3:47:fc:08:a6:35:c7:c7:e6:f1:
39:90:55:1a:bc:2f:89:e6:79:7c:ff:3c:37:39:bd:2b:4d:91:
f9:34:8a:c7:d4:50:16:3c:e1:3f:d7:3a:b7:6c:e4:46:d6:80:
ec:a2:49:c0:99:03:50:7f:3e:c7:ce:bb:17:cf:8d:94:7e:44:
82:5e:60:b2:51:0e:ac:f7:87:6c:2a:f4:30:d1:cb:be:c2:ae:
5a:79:64:da:a4:c6:f4:30:b4:c6:5e:b3:a4:90:0a:74:d1:d3:
d7:f1:3e:2e:4f:21:ca:69:6a:20:7e:32:1f:f2:0f:8d:5b:67:
a3:9a:d6:3f:b4:0d:3f:d8:b0:55:e5:88:c7:e4:88:a4:97:43:
ec:ce:75:63:15:53:2f:fe:11:26:aa:14:38:c1:2c:68:46:f9:
75:46:7d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:14:42 2026 by rpki-client