Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
File: EHMSpQFqPNzAt-Ydx59V09Xss34.mft (raw, json)
Hash identifier: hJtKJ5/H2A2TNMvmOLGPQ9b2X7WaZwpLwe+Bj1gSrAQ=
Subject key identifier: FC:4A:39:64:82:7C:24:E3:55:7F:8A:05:8E:1B:5D:B0:68:B6:03:29
Authority key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
Certificate issuer: /CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Certificate serial: 019E1FED0893B29241520C1F384C26033186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
Manifest number: 1611
Signing time: Wed 13 May 2026 06:01:28 +0000
Manifest this update: Wed 13 May 2026 06:01:28 +0000
Manifest next update: Thu 14 May 2026 06:01:28 +0000
Files and hashes: 1: 9EbWOWRofqpIjBa4vozEsoLxjYM.roa (hash: x7SOGLYmI9OiM+ggvSbmLAxdesreHqxj6Es4xw9IiFM=)
2: EHMSpQFqPNzAt-Ydx59V09Xss34.crl (hash: 1C3pSw7IuR8/dKpOgVrRV0lNlRDABsRIUTzUsTot2Ww=)
3: bzC7j0omLj_YNcYGEgPw6KsNGos.roa (hash: JbFBMLyqogdNayBZyhkASdXp//+KG+bIXMjX3s0pjGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ed:08:93:b2:92:41:52:0c:1f:38:4c:26:03:31:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Validity
Not Before: May 13 06:01:28 2026 GMT
Not After : May 14 06:01:28 2026 GMT
Subject: CN=fc4a3964827c24e3557f8a058e1b5db068b60329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:44:e8:40:db:71:5f:52:8f:dd:a3:c5:68:57:
08:62:aa:a3:22:df:7a:0a:1b:d6:b5:15:00:5f:7f:
de:6b:54:d8:a0:6a:f9:c9:c0:f4:33:90:dd:ac:26:
5f:e1:18:2a:02:17:49:d4:c2:8f:eb:52:99:9a:90:
f4:54:84:5d:55:ca:dc:44:e6:f4:ef:9f:0a:a3:4f:
aa:36:22:48:2a:f0:23:7e:f3:e0:04:dc:7c:69:4e:
52:62:ab:96:37:02:a0:11:7e:50:3a:aa:a5:13:15:
95:d3:fe:65:37:ed:a5:65:46:f6:f3:44:c0:5b:8c:
3e:b8:28:e8:f1:d7:6f:d1:81:b1:24:8c:f6:a0:b7:
65:33:16:08:c1:ab:d5:d0:cf:ea:06:5c:b6:af:63:
37:6a:fc:65:9d:90:95:b2:22:24:4f:c7:4d:cf:7e:
39:d6:55:d2:12:8f:8c:a2:d9:76:e4:01:1e:de:63:
a4:fb:90:85:45:65:bc:ab:08:72:dc:f4:dc:46:08:
61:5b:03:11:77:f9:58:1b:e6:e9:8c:57:d4:1a:10:
92:21:54:39:76:05:64:be:c8:8f:94:90:7a:c4:22:
21:17:69:ad:6f:15:e9:ad:d6:85:8f:73:d7:cb:77:
79:55:fc:dc:32:b2:58:6b:6e:2e:2a:2d:9b:f3:c7:
95:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4A:39:64:82:7C:24:E3:55:7F:8A:05:8E:1B:5D:B0:68:B6:03:29
X509v3 Authority Key Identifier:
keyid:10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7e:6b:ad:4c:8b:4e:6f:68:61:54:fb:2f:f6:ba:b5:ac:86:
8d:64:fd:51:5e:48:d8:be:39:4f:47:7e:64:e4:ef:ff:5a:4d:
ad:39:d7:0c:48:a6:e6:6e:6f:d8:d8:1e:1e:c4:7e:95:95:35:
66:03:1d:a0:cf:0d:62:57:e3:f9:c3:51:20:65:8c:9c:47:84:
e3:d6:a5:46:7c:c5:12:7f:42:39:4b:53:08:fe:72:15:46:90:
ef:9c:31:02:fb:73:83:03:ab:0a:ee:05:3b:81:89:15:98:70:
f1:3b:3d:13:eb:e5:4c:21:5c:a8:ee:79:09:e4:db:de:4d:7f:
60:02:1e:2b:9f:36:da:41:0a:a9:a2:f9:fa:f8:37:26:37:c0:
1e:cd:00:fd:72:04:39:b4:1f:70:0b:61:4a:68:6d:16:e7:fb:
48:fa:9b:74:f9:54:0a:b5:76:6e:40:40:b3:9a:15:30:d1:b9:
21:0f:aa:87:11:3e:ea:60:1b:29:c1:c8:22:a5:eb:bf:5c:77:
b2:55:ea:b3:29:0b:c3:99:4f:10:c1:03:1f:a9:29:79:25:8c:
30:ef:a7:48:de:e9:d0:f4:58:11:e7:5a:b0:5f:1b:49:8a:d5:
24:87:96:b2:04:d2:e1:3b:40:b3:ea:92:bd:e3:16:ab:8f:37:
9f:05:1d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:46:01 2026 by rpki-client