Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
File: EHMSpQFqPNzAt-Ydx59V09Xss34.mft (raw, json)
Hash identifier: ThnkEUVY9E0Psl81wYuF24D035IPQdBKytfRz5ootOs=
Subject key identifier: BE:A9:CE:7E:7D:AA:83:8D:CF:AD:C4:5F:4C:BA:9A:A2:D1:7F:24:C5
Authority key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
Certificate issuer: /CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Certificate serial: 01A0E2BE2C974AC7CE8B8446613FEE7E1E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
Manifest number: 177F
Signing time: Sun 27 Sep 2026 12:01:49 +0000
Manifest this update: Sun 27 Sep 2026 12:01:49 +0000
Manifest next update: Mon 28 Sep 2026 12:01:49 +0000
Files and hashes: 1: 9EbWOWRofqpIjBa4vozEsoLxjYM.roa (hash: x7SOGLYmI9OiM+ggvSbmLAxdesreHqxj6Es4xw9IiFM=)
2: EHMSpQFqPNzAt-Ydx59V09Xss34.crl (hash: Cwqg+iQOs9XiGpl//bHUuEjgNR+BXIXGw6oJEUzPv/0=)
3: bzC7j0omLj_YNcYGEgPw6KsNGos.roa (hash: JbFBMLyqogdNayBZyhkASdXp//+KG+bIXMjX3s0pjGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:be:2c:97:4a:c7:ce:8b:84:46:61:3f:ee:7e:1e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Validity
Not Before: Sep 27 12:01:49 2026 GMT
Not After : Sep 28 12:01:49 2026 GMT
Subject: CN=bea9ce7e7daa838dcfadc45f4cba9aa2d17f24c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:38:1f:61:a3:4b:da:45:ec:2e:16:e7:e1:e5:
ec:43:21:d5:fb:18:f1:04:da:e6:66:73:11:f6:18:
de:47:8f:de:01:82:06:5e:e5:9e:29:cb:22:0a:da:
47:5b:4b:c6:ed:44:1c:9c:85:40:08:cf:54:e6:3b:
39:a7:06:2c:ab:34:bf:4f:2f:d7:d7:b4:24:e7:c9:
b4:8e:87:7c:1a:8c:c1:1b:d8:a3:e2:46:0d:c4:9f:
68:af:42:a4:9a:d6:e6:b2:d6:2b:cc:b9:14:df:98:
5b:07:48:61:3a:7e:cf:ca:01:fc:3e:e7:11:e0:97:
6b:84:e3:ef:30:12:e0:d3:f6:d4:94:1b:5f:8d:8e:
31:a4:75:e9:71:c0:db:0d:6a:0d:94:f3:0f:f5:0e:
5f:cc:83:35:cd:31:2f:55:3a:57:e0:e1:56:63:af:
12:55:27:e8:22:d4:31:b8:b8:d1:0d:4d:96:ff:4c:
7f:7a:0e:b3:5a:a8:41:84:a0:a0:73:f9:1e:46:21:
e2:2c:7f:31:b5:62:b7:b9:c0:7c:1e:ae:70:1f:a3:
46:5b:7b:ce:86:1e:b4:5a:c9:04:57:65:62:b1:d2:
f7:24:3b:95:8c:77:d9:a8:7f:44:e9:39:5a:0c:72:
53:8d:57:6e:cc:d8:ab:b7:a5:fe:80:47:5e:21:c9:
8d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A9:CE:7E:7D:AA:83:8D:CF:AD:C4:5F:4C:BA:9A:A2:D1:7F:24:C5
X509v3 Authority Key Identifier:
keyid:10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:da:bc:cd:c4:8a:df:66:d6:38:57:a1:78:6f:12:94:da:c5:
f0:cd:70:88:1f:0e:ac:f6:30:d6:f5:58:ab:2f:85:16:bb:98:
d8:7a:30:08:ea:59:85:f8:34:1e:ce:2c:02:ef:a6:6a:37:6d:
5a:a0:9a:c1:b2:0f:b4:a4:87:5f:c5:8e:b0:42:67:a5:ef:c2:
e1:91:4f:6c:a9:1e:ce:f1:c6:b3:be:7d:8e:f1:f3:78:14:05:
9e:d7:c0:d1:45:bd:96:6c:7d:d2:e4:f9:39:1a:5e:ea:2e:f0:
e7:33:eb:35:f7:73:25:c9:e1:47:a6:7d:de:51:5c:7c:74:25:
7e:ec:5b:06:a2:8f:a6:47:78:fc:29:88:d7:ad:79:35:dd:ab:
ab:79:d7:fb:1e:20:38:4c:27:bf:5c:f0:5d:85:07:75:d4:32:
c9:93:da:b0:9c:c1:68:1e:02:a5:ac:9b:37:a5:87:f8:67:45:
e2:78:60:85:2e:c7:68:2e:d7:63:ba:6c:f5:21:0f:fa:08:30:
7c:5d:73:3f:a3:c0:62:74:13:8d:81:1e:16:7e:3d:35:ef:0c:
e7:07:3d:8f:79:c3:6c:6d:f2:70:aa:6d:b1:f0:fc:37:1a:5a:
aa:50:f4:78:85:90:5a:bb:8a:49:68:09:e9:c7:16:a1:dc:22:
9f:4e:8b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:45:32 2026 by rpki-client