
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft
File: EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft (raw, json)
Hash identifier: Bgb54r/WvQdip1Qc1b2E88u/vCiv8Tu+8ATqX6zteYQ=
Subject key identifier: 21:57:66:34:B3:3E:16:98:20:16:A9:68:8F:9F:B2:35:CD:25:BA:8A
Authority key identifier: 12:15:B5:AD:46:2B:C4:94:C4:32:49:31:CD:F4:30:1C:DA:01:F8:0C
Certificate issuer: /CN=1215b5ad462bc494c4324931cdf4301cda01f80c
Certificate serial: 01A0CE2397B7D2BD7D1D855145263379AC75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft
Manifest number: E4
Signing time: Wed 23 Sep 2026 12:00:33 +0000
Manifest this update: Wed 23 Sep 2026 12:00:33 +0000
Manifest next update: Thu 24 Sep 2026 12:00:33 +0000
Files and hashes: 1: EhW1rUYrxJTEMkkxzfQwHNoB-Aw.crl (hash: nlvoAqTU9bdKCURpo4hfyTF/IwRfBeqd9E3IDbGCbYA=)
2: QSDL9aVFEsgN1pmAwftAE68ZkLE.roa (hash: 9l+ETcbI4z1a4gUBvTyDHkfAhvOVwGBe6uOyh4bKOpA=)
3: SfPsnTAjEz7s0IJwXQXEqowgAgg.roa (hash: 2beiFCnRQDFsR7VsCIm5A7EYCFJ0xA+jfhamHFduadg=)
4: cB_m9up9hazlPAM7xwJmzGz_w9k.roa (hash: SLDL/2B9grLRt23aK3KXLfe0T0kdFf+HkoVMaYlOQZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:97:b7:d2:bd:7d:1d:85:51:45:26:33:79:ac:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1215b5ad462bc494c4324931cdf4301cda01f80c
Validity
Not Before: Sep 23 12:00:33 2026 GMT
Not After : Sep 24 12:00:33 2026 GMT
Subject: CN=21576634b33e16982016a9688f9fb235cd25ba8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:a7:26:90:c4:ec:76:22:48:0a:a5:9e:08:
31:47:ad:d2:07:41:37:25:6b:a9:57:28:84:0a:94:
e5:66:40:f9:4b:02:6f:53:57:3e:37:2c:3c:ec:19:
c5:95:5a:45:d0:68:79:29:fd:7a:ae:39:ba:85:37:
1a:71:d1:8f:18:ec:ea:a1:32:0d:3f:ca:ac:e4:59:
c1:fd:e8:9d:9d:0a:70:ac:1a:79:55:1e:c5:31:fc:
81:18:c1:e8:13:4b:31:3d:a0:9c:b6:97:7b:60:ac:
b3:11:df:b0:10:c7:08:d1:6e:d2:ae:0c:fe:e9:85:
63:94:52:14:9d:b9:c2:88:07:26:e7:ae:c7:b4:c0:
80:a0:53:c3:4f:74:48:46:6a:ef:25:e2:7b:2f:cf:
5a:9b:b4:3d:99:80:4f:a3:2c:d7:02:19:26:6e:61:
f8:ba:72:e1:3d:8a:56:34:67:1b:e0:b3:ab:05:e7:
a5:6d:a2:79:21:0a:3e:0a:84:c5:bd:29:e9:a4:53:
28:3b:e4:0d:24:37:1d:ad:b4:14:38:eb:ba:8e:10:
52:44:43:8f:9b:09:79:78:f1:d1:52:8b:56:f1:0b:
2f:94:4d:46:05:73:4b:14:23:bf:ba:34:f4:7f:24:
71:75:09:85:4c:3e:7b:07:40:ee:e2:77:fc:72:f2:
13:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:57:66:34:B3:3E:16:98:20:16:A9:68:8F:9F:B2:35:CD:25:BA:8A
X509v3 Authority Key Identifier:
keyid:12:15:B5:AD:46:2B:C4:94:C4:32:49:31:CD:F4:30:1C:DA:01:F8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:de:2f:67:da:25:e8:af:1e:76:e2:d0:7f:aa:46:16:0d:ea:
d3:a3:d6:12:d5:8e:af:c0:ba:52:0b:10:0b:6c:28:9b:73:e9:
92:f8:df:d9:9d:fa:ee:12:23:64:be:e8:85:96:3b:fc:3a:5e:
49:60:b7:d9:96:f3:fd:f9:db:19:f8:25:ad:d5:42:0b:66:ec:
54:e1:38:be:07:7e:6f:71:88:5a:6f:d0:0d:66:07:76:89:c3:
c2:bb:a9:3b:cc:b6:f8:84:3f:14:d2:71:0f:d6:65:c0:78:f1:
52:f1:4b:73:95:58:bc:b0:c1:2b:12:d5:38:8b:70:52:1b:4b:
d8:54:bf:7c:54:3d:cd:40:ff:80:fe:06:ce:72:82:a7:a8:ee:
f9:34:3d:2d:3b:ab:80:e7:33:93:89:37:b9:4d:92:a6:10:ce:
7f:fa:aa:31:49:a0:e4:2f:63:ea:1a:4b:7b:96:0a:5c:ce:82:
40:c3:18:2c:8f:a1:51:be:ea:67:f9:75:e4:03:7b:b9:72:8a:
e9:43:10:bc:4e:21:6a:31:d9:4f:f5:bf:e7:5e:fc:ee:e2:8f:
b8:04:e0:30:4e:d5:7c:e0:6c:a1:92:03:f7:07:7c:16:ea:12:
9c:36:32:88:41:ed:46:24:1b:61:b4:cb:51:bb:3b:04:77:22:
c5:75:f1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:02:27 2026 by rpki-client