Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
File: EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft (raw, json)
Hash identifier: 32ba9Z5K0e35KisqSmksaeITHKhqnh0+CUZ6Tmbt9Dk=
Subject key identifier: 05:13:2D:BA:B5:34:A9:E4:CE:1D:8B:DB:E4:79:00:F0:5E:E8:FC:D3
Authority key identifier: 10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8
Certificate issuer: /CN=10768d39f932791007a097209b0983fe85560cb8
Certificate serial: 019D2AA9B4338ADDD25A410E1DBBC9397197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 15:00:57 +0000
Manifest this update: Thu 26 Mar 2026 15:00:57 +0000
Manifest next update: Fri 27 Mar 2026 15:00:57 +0000
Files and hashes: 1: EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl (hash: zT5v3CUQfXfX8yzI6kslGWoz3a18vZkfo35T9xZnNEs=)
2: sqH83fgWI2QXk67gXVqCFnY0PdM.roa (hash: Fkz5KCAQSTZpnaesgT+1Nr19dyLfyU9fM4+AXXInAiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:b4:33:8a:dd:d2:5a:41:0e:1d:bb:c9:39:71:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10768d39f932791007a097209b0983fe85560cb8
Validity
Not Before: Mar 26 15:00:57 2026 GMT
Not After : Mar 27 15:00:57 2026 GMT
Subject: CN=05132dbab534a9e4ce1d8bdbe47900f05ee8fcd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1a:8e:b0:8b:25:91:d3:82:44:05:ed:01:bc:
2b:75:87:13:d2:00:a5:5f:18:b2:cf:36:d2:8d:bd:
78:d0:9a:f1:32:3f:f2:e2:17:58:a8:e4:0d:01:fb:
cf:11:a8:6d:eb:91:f6:b6:cf:b9:cd:7d:87:72:80:
29:5e:12:07:ed:21:a8:50:e5:c8:6a:ec:fb:19:17:
0c:30:da:d9:5e:ad:d3:81:d3:f2:8a:7c:1e:98:31:
86:1b:9c:e5:bf:09:cd:f0:ae:01:a1:5d:a1:40:b1:
08:67:dd:8c:67:89:07:28:13:bc:c2:5c:10:d1:dd:
3c:e3:5f:84:a0:95:88:4a:59:f0:25:d6:ed:ee:54:
0c:34:39:6b:ca:d5:77:b4:a8:ee:28:09:16:12:a1:
22:82:84:1e:e2:7c:e6:a2:d6:f9:02:a8:d7:a8:bc:
be:ca:1d:a8:bf:2e:00:0a:86:9a:35:1c:47:71:fd:
65:7a:99:11:74:61:e3:2d:ce:57:b6:4f:a3:64:17:
27:95:ad:0f:8a:53:6f:57:4a:da:f1:7e:6e:b6:f6:
68:3b:b3:b1:6a:84:de:67:32:ad:40:45:76:b3:f9:
6d:3a:ce:f8:a6:1e:40:72:a1:37:53:b2:de:57:c4:
d8:da:18:01:bd:93:5b:3b:5b:35:5a:14:a9:d0:82:
0c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:13:2D:BA:B5:34:A9:E4:CE:1D:8B:DB:E4:79:00:F0:5E:E8:FC:D3
X509v3 Authority Key Identifier:
keyid:10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f5:34:0a:fa:21:f6:04:c1:67:44:23:ce:61:3e:5f:fc:fd:
7b:fe:25:0c:43:1b:16:4f:7e:1a:e7:c3:c2:6a:a7:86:05:30:
59:4a:4f:78:95:eb:ee:ff:14:3c:7f:5c:50:d4:f6:cb:23:2f:
1c:f8:ac:f5:29:bf:90:49:cc:26:bf:e1:85:2c:a5:aa:1e:8e:
bf:64:ef:e7:ba:ca:21:9e:53:f1:10:e8:70:f6:f7:0f:bd:f8:
76:5f:27:63:0f:6c:b3:59:91:7f:c0:c3:70:0d:ae:91:ef:54:
f6:da:57:83:41:b2:b8:2b:1d:b3:28:0c:ad:a4:9f:6e:45:7d:
f2:aa:bb:8c:50:8a:c4:15:e4:3d:35:37:48:32:cc:4c:e1:47:
54:19:6c:1c:02:6a:98:34:71:0a:18:f6:63:b8:15:c1:ff:87:
7d:8f:a4:dd:95:a2:54:11:ea:04:57:c2:02:e8:f7:7a:f7:a4:
10:f3:50:91:15:8b:3f:af:e2:51:e1:66:eb:e2:80:d4:d3:b9:
bf:d8:76:3b:0b:21:54:68:81:2b:44:09:6e:5c:21:cf:b3:f3:
d4:5d:e3:2f:d4:b9:2d:00:16:67:73:48:3a:46:73:9d:18:c0:
b5:1c:e0:5e:4c:68:ad:d6:51:46:63:ba:0d:18:b8:51:59:42:
f9:6c:e5:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qqbQzit3SWkEOHbvJOXGXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzY4ZDM5ZjkzMjc5MTAwN2EwOTcyMDliMDk4M2ZlODU1
NjBjYjgwHhcNMjYwMzI2MTUwMDU3WhcNMjYwMzI3MTUwMDU3WjAzMTEwLwYDVQQD
EygwNTEzMmRiYWI1MzRhOWU0Y2UxZDhiZGJlNDc5MDBmMDVlZThmY2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhqOsIslkdOCRAXtAbwrdYcT0gCl
XxiyzzbSjb140JrxMj/y4hdYqOQNAfvPEaht65H2ts+5zX2HcoApXhIH7SGoUOXI
auz7GRcMMNrZXq3TgdPyinwemDGGG5zlvwnN8K4BoV2hQLEIZ92MZ4kHKBO8wlwQ
0d0841+EoJWISlnwJdbt7lQMNDlrytV3tKjuKAkWEqEigoQe4nzmotb5AqjXqLy+
yh2ovy4ACoaaNRxHcf1lepkRdGHjLc5Xtk+jZBcnla0PilNvV0ra8X5utvZoO7Ox
aoTeZzKtQEV2s/ltOs74ph5AcqE3U7LeV8TY2hgBvZNbO1s1WhSp0IIMQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAUTLbq1NKnkzh2L2+R5APBe6PzTMB8GA1UdIwQY
MBaAFBB2jTn5MnkQB6CXIJsJg/6FVgy4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhhTk9ma3llUkFIb0pjZ213bURfb1ZXRExnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85M2MxN2UtODQ5MC00ZTkxLTk4MTUt
NzJjMzNkYWYzMTU2LzEvRUhhTk9ma3llUkFIb0pjZ213bURfb1ZXRExnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy85M2MxN2UtODQ5MC00ZTkxLTk4MTUtNzJjMzNkYWYzMTU2
LzEvRUhhTk9ma3llUkFIb0pjZ213bURfb1ZXRExnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEvU0Cvoh
9gTBZ0QjzmE+X/z9e/4lDEMbFk9+GufDwmqnhgUwWUpPeJXr7v8UPH9cUNT2yyMv
HPis9Sm/kEnMJr/hhSylqh6Ov2Tv57rKIZ5T8RDocPb3D734dl8nYw9ss1mRf8DD
cA2uke9U9tpXg0GyuCsdsygMraSfbkV98qq7jFCKxBXkPTU3SDLMTOFHVBlsHAJq
mDRxChj2Y7gVwf+HfY+k3ZWiVBHqBFfCAuj3evekEPNQkRWLP6/iUeFm6+KA1NO5
v9h2OwshVGiBK0QJblwhz7Pz1F3jL9S5LQAWZ3NIOkZznRjAtRzgXkxordZRRmO6
DRi4UVlC+Wzlnw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:38 2026 by rpki-client