Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
File: EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json)
Hash identifier: HBSl2rmjEXgsfZ0TQb78jOTd+bACnwTNuWuDdeYtbgk=
Subject key identifier: B5:43:CF:3C:6E:D8:D3:02:03:16:48:A9:85:A0:C1:C4:BE:FA:23:93
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 01A1DC4B27D19A651D01585DD698EC67513F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
Manifest number: 1B00
Signing time: Sat 14 Nov 2026 23:01:15 +0000
Manifest this update: Sat 14 Nov 2026 23:01:15 +0000
Manifest next update: Sun 15 Nov 2026 23:01:15 +0000
Files and hashes: 1: 2UJnYkLlrBrsr-FiuY1t_mTWT4k.roa (hash: Xa61lzBRtSApWj6goAfzYPWzx5tHlOIe0rD8n3ZeiWM=)
2: 6SSFg2yTmoKjF6zDnreMbjMeibE.roa (hash: AXKKKuWwPyZUnqIrE5CjvILYke6ea5omdcN+j9qzetQ=)
3: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: 1leJYHSXLHhB2jlktPIV0/nu2KFaPdD9C4jH8IO1Qvs=)
4: IL8deFD8PSOp3NWJSt_iFRSnHrw.roa (hash: q/v7MQox/nq9r/rZ534FmTQXSTW9buaaFYPj+WtYk78=)
5: Q5hESTZfbwdELtpLu27GaP7-Lno.roa (hash: ObHNDf8xA8n0C2IML/LhP97ggga61XCUWT978woHwn0=)
6: ZKLNMt3VfAzRkdvHr5Xd6gL_UHI.roa (hash: MwQzyqB63sngmzcWgEGwpFF72y7jC9kNOl+3Zg+6fcs=)
7: fKYfVT1YDQ8JUaTATaBTlPz4QNw.roa (hash: oYpajimnxUNbsLq6vnCVkRjpUdwX5aoikIaxhzhw2Vw=)
8: qK_PP9-atac9mTKlNBkq0IeVJSc.roa (hash: 7XIhv4ZG0yNjDke4N6v5k/ztyTTS+fsvn2uOI243g1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:4b:27:d1:9a:65:1d:01:58:5d:d6:98:ec:67:51:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Nov 14 23:01:15 2026 GMT
Not After : Nov 15 23:01:15 2026 GMT
Subject: CN=b543cf3c6ed8d302031648a985a0c1c4befa2393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e9:d0:c6:52:ae:c6:00:27:ae:ea:db:1b:85:
48:46:1d:b8:ae:dc:2e:32:9a:00:eb:c9:e3:9b:d8:
03:4f:e0:03:98:db:ad:c6:91:78:ed:fc:d6:56:48:
94:d8:af:59:7f:32:58:9d:38:18:88:24:5d:22:2f:
d7:11:95:06:0b:d5:f9:9b:6d:2b:38:2a:27:e0:83:
3d:0a:70:80:d2:86:87:45:32:d4:ba:b9:b7:47:f2:
ee:fa:ef:50:8d:7f:b6:4d:b8:cc:7b:b7:d2:89:2d:
ed:c6:38:10:4c:bf:ad:d2:80:01:26:25:fb:34:b7:
e5:67:87:f4:56:9a:d0:97:cf:06:41:f3:51:72:89:
12:4a:54:c2:a9:7d:d1:c3:e1:fb:28:f7:28:47:a7:
9a:2c:e8:34:9d:12:2e:74:2f:a6:11:ef:dc:aa:9d:
c2:47:6d:c1:f3:70:78:28:2f:54:37:d5:2b:21:7f:
ae:6c:9d:d2:c9:48:c7:80:02:c3:0e:fc:22:f9:84:
5f:7a:00:9f:37:ae:0c:03:01:93:ec:c4:5a:46:53:
da:e5:a8:3d:78:ce:ca:e6:2a:6d:a9:24:6d:70:74:
84:c3:29:22:78:c9:bd:fc:ff:41:91:03:6d:0b:68:
ab:a1:12:83:ad:bc:ec:15:a0:6b:a1:80:f8:b2:2d:
2b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:43:CF:3C:6E:D8:D3:02:03:16:48:A9:85:A0:C1:C4:BE:FA:23:93
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b9:d0:27:ab:05:c1:c5:89:3a:74:7e:f1:81:85:5a:98:bb:
56:42:96:28:37:e7:b6:4f:7f:ef:7d:9e:1a:d2:4f:7e:79:ac:
a7:dc:db:1f:60:c5:d5:99:fd:e2:b8:ec:c8:6a:a9:48:78:ef:
f2:9e:e5:3d:61:d8:72:69:66:c3:59:49:04:b4:d9:35:f9:b3:
6b:5d:94:91:33:b7:3a:d4:59:81:25:57:54:1d:e8:98:c7:0f:
d9:10:69:ab:d2:ee:63:17:ff:70:97:ba:10:97:56:9f:54:96:
16:23:a4:50:6e:b9:ea:0b:95:c5:ae:b8:c4:ac:38:32:25:ec:
c4:16:f5:91:8b:12:5d:63:f9:cd:1f:59:5b:d0:df:39:5f:e3:
86:21:60:e4:44:93:f8:19:19:a7:28:14:8b:fc:8c:28:06:c1:
a1:df:b7:6f:ab:1e:c7:f4:33:59:cd:5a:9a:0b:3d:68:84:8d:
a2:93:48:3c:48:6c:0b:5d:e6:c8:22:10:aa:ae:8b:59:1c:af:
0e:12:ba:35:58:49:c2:48:d3:70:4d:62:a7:bf:c0:a0:73:33:
c0:b6:97:fa:2b:7e:e5:de:a8:88:f7:33:98:f4:8c:10:52:74:
1e:97:ad:c0:48:16:db:bf:5b:c1:b7:e0:53:b2:a9:6e:e0:7c:
46:7d:f9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:15:57 2026 by rpki-client