Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
File: EHMSpQFqPNzAt-Ydx59V09Xss34.mft (raw, json)
Hash identifier: Nm2mWqW8Hf/hAMgK9FPkSJmHWUN7Ox8d70MIcRQvZjM=
Subject key identifier: 93:19:84:C8:2E:DF:7A:FF:07:4A:23:28:CF:5F:E7:C2:D9:50:D1:CE
Authority key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
Certificate issuer: /CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Certificate serial: 019D26CD6924E9FDBE141C0388B542236604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
Manifest number: 158F
Signing time: Wed 25 Mar 2026 21:01:29 +0000
Manifest this update: Wed 25 Mar 2026 21:01:29 +0000
Manifest next update: Thu 26 Mar 2026 21:01:29 +0000
Files and hashes: 1: 9EbWOWRofqpIjBa4vozEsoLxjYM.roa (hash: x7SOGLYmI9OiM+ggvSbmLAxdesreHqxj6Es4xw9IiFM=)
2: EHMSpQFqPNzAt-Ydx59V09Xss34.crl (hash: 8BwIGDvwWtWC7vPX4y7En/PASsPmMCx0J1H9bD96DyY=)
3: uNs7lPFNPshEKIeKrT9kYzvj6PU.roa (hash: 1d4TVLPu2hGqSAh+/9a4WZpxJbG8fGNAEg4csKG4Azw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:69:24:e9:fd:be:14:1c:03:88:b5:42:23:66:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Validity
Not Before: Mar 25 21:01:29 2026 GMT
Not After : Mar 26 21:01:29 2026 GMT
Subject: CN=931984c82edf7aff074a2328cf5fe7c2d950d1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:ba:6d:97:37:1a:03:f1:5e:27:05:61:a0:
49:d8:4f:48:4c:30:9d:9e:8a:f1:72:f7:45:68:db:
cd:9e:28:63:b0:5d:f3:4b:97:20:c2:1e:c3:0a:e0:
e9:da:b3:b1:69:53:17:3f:68:34:ba:5a:93:c7:2e:
4b:14:a5:ab:7c:66:0f:51:a4:d3:6a:3f:04:c3:1e:
cc:39:6d:0e:6b:7e:20:05:0c:9a:87:0e:be:2c:66:
47:0a:fd:86:74:bd:41:ef:6b:86:c5:de:d5:72:06:
08:4c:00:1d:79:c4:1b:56:1a:7b:40:0d:7c:8c:1a:
cd:b0:49:63:34:f4:27:da:d6:33:35:25:50:52:aa:
4a:8b:3a:34:c0:7f:ad:fd:98:d0:b1:9d:16:7a:cd:
b6:c0:69:75:05:34:f1:0f:c2:f8:27:ca:81:4c:54:
54:bf:85:0a:70:15:c6:64:f8:59:37:ac:52:67:c8:
27:57:bc:f7:31:41:3c:da:27:96:9e:eb:f7:cc:04:
ba:72:d8:4d:75:e8:54:0e:9d:02:39:fb:78:7e:83:
b0:71:33:0c:ff:45:ed:8d:b7:d9:30:65:ce:3e:dd:
0a:c1:2f:df:f4:53:b3:1d:aa:3c:88:5d:6a:f4:f7:
fc:44:ea:9e:7b:24:f0:00:13:19:8f:bb:f3:cf:59:
22:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:19:84:C8:2E:DF:7A:FF:07:4A:23:28:CF:5F:E7:C2:D9:50:D1:CE
X509v3 Authority Key Identifier:
keyid:10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c8:f4:3c:bc:7b:9c:19:9c:a7:f2:40:98:97:5e:b8:9a:03:
79:04:ca:b6:2e:43:ab:fb:de:c2:25:c7:85:97:d2:c3:b6:cc:
84:ae:cf:74:8a:1b:0f:dc:a5:40:95:60:d0:92:16:4f:fd:3a:
e4:16:23:4b:18:22:1b:80:46:45:6b:72:a0:8a:7a:c0:cc:76:
15:9d:44:58:9b:a7:59:d9:5a:3d:d5:19:23:e3:a8:ba:f6:7c:
7d:ef:f8:02:99:b7:5e:4f:18:68:32:3c:f0:0a:02:bf:c4:4f:
c6:0b:4b:11:52:99:09:78:bd:51:58:be:e6:af:9a:e8:4b:1e:
64:ce:e7:1c:e9:ac:78:ee:74:f3:01:da:b9:b3:8a:81:29:0a:
9b:3a:41:8f:d3:23:a2:f8:99:cb:8b:9e:67:2b:36:97:95:da:
47:bd:93:6f:69:f0:e0:ec:6c:c7:97:29:40:55:e0:c0:ba:0a:
bf:02:e8:5e:ab:98:72:5b:c3:80:68:f5:72:44:fa:80:c2:f4:
df:05:00:d0:79:60:7d:cb:33:a8:9a:61:a3:0c:ba:30:d5:d7:
18:05:3d:cf:d4:fc:65:a1:24:7a:17:ef:49:e5:c1:f8:dc:d5:
c0:b2:b1:74:38:37:c1:1e:60:e2:4b:48:e4:eb:19:41:d0:7e:
02:68:ab:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:05 2026 by rpki-client