Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
File: EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json)
Hash identifier: zVJbqz5CdXnFReDxWCw53MSrF2LNw6SpmpAxwapKw+0=
Subject key identifier: E1:2E:CB:14:35:BC:6F:13:67:64:09:DE:15:09:EF:F2:0F:D6:F6:7F
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 019E1D90A92F3F039E4136D9482663D5A5F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
Manifest number: 190F
Signing time: Tue 12 May 2026 19:01:20 +0000
Manifest this update: Tue 12 May 2026 19:01:20 +0000
Manifest next update: Wed 13 May 2026 19:01:20 +0000
Files and hashes: 1: 2UJnYkLlrBrsr-FiuY1t_mTWT4k.roa (hash: Xa61lzBRtSApWj6goAfzYPWzx5tHlOIe0rD8n3ZeiWM=)
2: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: l5ymSLJJglgeuug/XR/cyDk4I2pC6Te4RuO10GO2Pfk=)
3: IL8deFD8PSOp3NWJSt_iFRSnHrw.roa (hash: q/v7MQox/nq9r/rZ534FmTQXSTW9buaaFYPj+WtYk78=)
4: Q5hESTZfbwdELtpLu27GaP7-Lno.roa (hash: ObHNDf8xA8n0C2IML/LhP97ggga61XCUWT978woHwn0=)
5: ZKLNMt3VfAzRkdvHr5Xd6gL_UHI.roa (hash: MwQzyqB63sngmzcWgEGwpFF72y7jC9kNOl+3Zg+6fcs=)
6: fKYfVT1YDQ8JUaTATaBTlPz4QNw.roa (hash: oYpajimnxUNbsLq6vnCVkRjpUdwX5aoikIaxhzhw2Vw=)
7: qK_PP9-atac9mTKlNBkq0IeVJSc.roa (hash: 7XIhv4ZG0yNjDke4N6v5k/ztyTTS+fsvn2uOI243g1w=)
8: xd5IZiz1YB2PdB-q-VKoWUqlfWg.roa (hash: s14zG8n95cnLanJ2EGUmy/+O9/gNhrX1fm7XyiLB6RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:a9:2f:3f:03:9e:41:36:d9:48:26:63:d5:a5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: May 12 19:01:20 2026 GMT
Not After : May 13 19:01:20 2026 GMT
Subject: CN=e12ecb1435bc6f13676409de1509eff20fd6f67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b1:1a:d9:a8:bb:a6:01:a0:f9:4d:df:c6:65:
3e:10:2f:3e:6a:c7:b7:a9:11:48:42:eb:e2:a0:5f:
e6:8b:a8:9c:90:7f:32:53:c5:f1:cd:50:9a:3f:25:
1d:ef:8b:3f:b8:9c:3c:cd:91:fa:8c:d9:1b:08:3d:
77:a6:e9:c3:38:6c:ce:ad:a1:9a:1b:a5:26:a8:71:
1b:fa:94:9f:bc:8e:f0:90:aa:b4:36:4f:79:9c:68:
73:68:53:bb:05:85:87:f4:5f:fa:50:81:2f:a3:e3:
ee:09:e4:2a:a2:75:ae:e7:60:bc:7a:ef:fc:df:6e:
d5:fc:6a:25:5a:11:95:11:6e:c0:f1:7f:42:a8:0d:
71:e1:5e:2b:e8:6d:e9:bd:8d:96:ab:dd:2a:b0:21:
cb:81:81:26:28:aa:f2:b3:e0:97:60:7e:1e:62:64:
85:11:36:9b:2a:0d:19:37:eb:ab:c1:59:16:29:88:
14:19:97:14:6e:f4:81:cb:43:39:b8:06:c7:51:19:
5f:26:1b:54:03:b4:53:00:be:bd:1b:eb:6a:ea:d3:
02:b8:d4:e4:37:83:07:2d:af:38:9a:8f:2b:86:e1:
b2:06:e4:73:59:33:6c:ca:4c:3e:ec:ae:93:86:b3:
49:3d:5c:cf:4a:32:e8:33:19:c3:af:28:7f:c2:89:
2f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2E:CB:14:35:BC:6F:13:67:64:09:DE:15:09:EF:F2:0F:D6:F6:7F
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:1c:73:fb:62:48:59:a4:58:6e:4c:c5:99:cf:db:42:ea:88:
2b:28:fd:0d:98:4d:b5:b2:70:2a:be:bc:76:a0:35:89:a7:e8:
5e:b4:da:f1:fa:5c:ae:63:70:5e:43:76:2a:56:fd:37:dd:16:
1c:e6:b5:d1:92:c1:50:d8:ea:8c:45:51:be:8b:75:dc:51:0a:
26:af:d9:da:1e:8a:32:fd:d8:87:15:02:df:cc:5b:2d:19:20:
42:e8:23:04:3e:ac:06:95:e6:26:e8:94:6f:de:8c:a0:cf:e7:
04:d5:06:6f:48:63:07:37:00:34:e8:e8:05:23:63:ad:aa:19:
d7:94:85:cc:dc:1b:31:d1:ee:6e:f0:dd:90:28:f6:ab:f0:ef:
0e:bb:be:39:16:ec:c7:bd:1e:c2:f8:d9:41:a7:f6:e2:f1:8c:
8d:99:c0:93:81:19:a4:bc:8d:1b:fc:f1:bb:ad:ea:f6:95:e9:
c4:d5:76:9b:fe:e9:8a:0f:62:11:1b:de:68:1c:a7:f6:e0:1b:
b7:2d:ea:a5:c3:63:a3:af:3a:f8:16:7c:6b:cd:e7:18:c0:67:
77:ac:71:07:ac:ad:fe:c4:07:04:d8:40:90:96:92:d2:05:a0:
ce:ab:62:09:2e:ab:f9:50:42:6d:9e:41:46:3b:eb:64:f3:6d:
86:86:2b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:26:49 2026 by rpki-client