Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
File: EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft (raw, json)
Hash identifier: Nl5mpoZ+I0sWiSTYnZira4FaHlDP6s0sLOC+BXeiWA8=
Subject key identifier: 13:6D:6E:9C:75:5A:CE:DF:CC:76:22:2D:BD:F9:70:12:94:C5:22:C7
Authority key identifier: 10:7A:5A:F1:96:B8:A0:EA:96:0C:28:F6:B3:E7:52:91:C7:E8:61:CD
Certificate issuer: /CN=107a5af196b8a0ea960c28f6b3e75291c7e861cd
Certificate serial: 019D29CE4B9A556E27725643A576CFCE9695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 11:01:18 +0000
Manifest this update: Thu 26 Mar 2026 11:01:18 +0000
Manifest next update: Fri 27 Mar 2026 11:01:18 +0000
Files and hashes: 1: B_eufKACcye9RNL9zWFuL3O0F2Q.roa (hash: u51nAFunJxaWbsLgaW5TM9elEVLvvbw93zNAlf1WyzQ=)
2: EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl (hash: cFqVmzjOdS5GdAIjSDyYSPT2dzUVCQJHqizvyCsfA/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:4b:9a:55:6e:27:72:56:43:a5:76:cf:ce:96:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107a5af196b8a0ea960c28f6b3e75291c7e861cd
Validity
Not Before: Mar 26 11:01:18 2026 GMT
Not After : Mar 27 11:01:18 2026 GMT
Subject: CN=136d6e9c755acedfcc76222dbdf9701294c522c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9b:9b:77:32:a1:11:29:91:30:21:e7:c4:73:
54:3e:73:fe:ee:f8:b9:da:cf:ed:eb:ef:3d:31:57:
07:a1:c4:2f:a6:ec:76:3f:a8:55:01:24:1f:49:97:
76:70:70:08:e3:5d:71:79:45:2d:b0:6e:3f:2f:78:
24:37:bc:a0:f9:8a:ba:71:c3:81:a4:28:b2:e5:0a:
68:18:6b:30:b8:63:69:4e:82:b3:36:c7:74:86:5e:
73:82:7f:1d:ab:ff:f1:27:b9:49:56:d4:93:53:4f:
53:96:19:48:77:cd:8d:27:c9:42:1e:04:6f:6f:d8:
8b:61:1a:1c:e8:15:cb:ed:a6:d0:45:c5:ca:c8:eb:
45:8b:2c:97:1b:6c:b7:8f:59:69:35:b5:91:61:29:
32:d9:76:a7:53:4e:b2:3f:e9:8c:03:58:2b:0c:42:
87:65:11:48:02:ba:1d:87:db:d5:47:23:d0:05:22:
f7:8f:5d:ef:da:51:df:8a:26:39:a8:54:79:6a:bf:
ac:b9:7a:33:15:7d:1d:7f:89:b3:2e:a9:ad:5a:ae:
7d:49:87:ed:62:a0:77:30:03:23:34:d4:1a:80:dd:
2c:21:55:12:72:b8:44:98:d6:87:5f:85:24:6a:9f:
5a:93:d1:af:62:a8:8e:8f:62:22:3c:de:cb:b6:8b:
c2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6D:6E:9C:75:5A:CE:DF:CC:76:22:2D:BD:F9:70:12:94:C5:22:C7
X509v3 Authority Key Identifier:
keyid:10:7A:5A:F1:96:B8:A0:EA:96:0C:28:F6:B3:E7:52:91:C7:E8:61:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9e:65:77:d1:42:46:02:b2:0d:e9:5a:c0:5f:c9:41:fe:e4:
a8:92:13:70:67:79:9e:2e:6f:18:45:d0:9a:58:07:96:c1:22:
ea:25:67:28:6d:03:77:1e:00:af:91:de:97:86:88:1b:04:65:
41:e7:1e:03:5c:b0:6e:41:ea:b7:dc:6e:13:b8:c7:22:94:97:
7f:23:97:e9:a7:21:66:57:eb:e6:3f:c5:b7:00:75:c4:e2:bb:
1c:57:e0:c6:73:1f:77:7a:ec:d0:2a:85:8e:d2:fa:44:f1:5a:
da:91:09:d0:24:e5:f7:e4:aa:46:43:ac:a3:01:28:68:29:c4:
56:49:9c:ac:dc:79:05:e7:bf:a2:f5:d2:7f:b7:1d:55:14:c7:
45:88:0a:b5:f0:6c:ea:0d:fe:ea:8f:38:ac:3d:b0:ba:af:56:
86:98:57:89:67:90:79:2d:4d:ba:76:6a:ec:96:e1:c8:af:c9:
62:d4:1a:ad:8b:50:64:9e:40:32:55:25:75:ab:35:35:7d:5c:
b4:e4:ba:07:02:8e:ce:09:61:de:5c:4e:18:03:06:4d:c0:10:
8b:71:7e:98:3f:4e:31:33:c4:3a:ea:e9:00:0d:ed:5c:96:a4:
1c:85:58:c6:41:d2:7a:d9:f1:83:c5:e2:71:22:b2:91:39:c8:
ef:73:60:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:27:07 2026 by rpki-client