Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
File: EHTblkAv9c8YdWRWDqjxPu61_-s.mft (raw, json)
Hash identifier: gMOqlVfcHJ5nEb9RWgf3Kg/bAUhUpFDCGGrFFAFX1Oo=
Subject key identifier: 12:F1:65:C5:38:33:51:FB:3B:6C:E6:0E:FE:1C:6C:D9:08:6D:DE:2A
Authority key identifier: 10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
Certificate issuer: /CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Certificate serial: 019F954A8112AFB4877CA3FB3FDFA622E9C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
Manifest number: 1A0A
Signing time: Fri 24 Jul 2026 18:01:55 +0000
Manifest this update: Fri 24 Jul 2026 18:01:55 +0000
Manifest next update: Sat 25 Jul 2026 18:01:55 +0000
Files and hashes: 1: EHTblkAv9c8YdWRWDqjxPu61_-s.crl (hash: f4S/cU8WO9NtlzBan4PnuW+1IEjeCH8Aessf5Rh17d4=)
2: oGSX6Be2A4gMsymfO3IeIELxVGc.roa (hash: 9nynO0eaDCEM38Kekr3tOs/yAPJlXITpxT9ftUpbs/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:81:12:af:b4:87:7c:a3:fb:3f:df:a6:22:e9:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Validity
Not Before: Jul 24 18:01:55 2026 GMT
Not After : Jul 25 18:01:55 2026 GMT
Subject: CN=12f165c5383351fb3b6ce60efe1c6cd9086dde2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:22:18:7c:b4:d7:26:64:ae:b8:77:df:2c:fc:
50:0a:be:5d:f2:27:f8:d6:79:5e:d5:f6:c2:1d:6e:
f3:e7:1f:81:57:f7:1e:e2:62:e6:e1:93:b2:e5:4f:
db:d0:29:d0:46:c4:86:4e:7a:7b:c0:57:ea:04:38:
45:d1:83:d7:6c:7c:af:ed:ff:db:23:47:b4:98:f3:
f4:9d:a9:2f:b9:98:be:a5:76:8f:d2:6e:35:a3:ac:
1a:f7:18:53:22:df:a8:6d:44:20:fc:ff:34:d4:37:
84:7e:49:e0:c2:8c:55:61:4a:5e:be:06:89:fb:fb:
5f:5e:ea:bb:cd:73:3b:93:31:78:12:6d:a2:f7:1d:
62:27:b9:50:21:3d:a2:9a:5c:47:38:23:5d:f3:98:
04:a0:85:70:63:7f:b7:c6:1d:8d:a0:f8:e1:c7:83:
f1:a2:44:c4:64:32:dc:3c:55:d4:42:95:8e:fa:89:
bf:8c:e9:00:41:d8:ea:cb:f2:4d:c2:c7:c6:26:87:
f1:c4:44:76:f3:43:0e:89:24:7d:ae:21:07:53:00:
11:9f:8d:74:49:ec:c6:c8:81:31:af:9e:2d:07:f2:
c9:b3:84:02:30:07:44:04:9b:65:83:13:15:86:8d:
98:5d:d2:c5:2b:73:96:25:92:b9:fd:b6:61:2a:d0:
c7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F1:65:C5:38:33:51:FB:3B:6C:E6:0E:FE:1C:6C:D9:08:6D:DE:2A
X509v3 Authority Key Identifier:
keyid:10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:2a:80:ca:99:6d:ec:87:1e:fd:df:5b:73:ab:c7:ad:0f:25:
23:f1:52:f0:d2:d9:d9:d1:7b:b0:a7:fa:a4:89:c1:d7:a5:ba:
5b:e9:33:06:3a:e6:47:4a:7f:d2:8a:bc:58:f3:37:b4:04:d5:
c2:79:39:ed:a0:f0:be:83:8f:6a:13:db:b5:e7:3f:a1:52:45:
51:44:04:93:a1:c1:24:33:de:4a:34:bf:32:0a:7f:45:1f:ea:
21:8a:43:47:88:3e:8e:78:6d:5b:9e:71:26:f3:1d:48:2d:60:
8d:17:a7:e7:93:f5:06:50:72:be:59:9f:94:72:20:9b:36:9c:
f9:e7:a6:1f:bc:c1:9b:4f:e9:e1:92:52:be:df:0e:e8:f0:2d:
ac:f2:b0:6b:3f:ab:3d:ec:f0:3d:f3:78:3c:a1:a1:87:07:fd:
bb:62:3c:f5:43:49:74:ac:6f:a0:80:e4:dd:23:48:42:ce:ae:
ab:82:ba:10:ba:4f:fb:6c:fe:bf:29:d6:85:ca:fd:75:72:90:
22:f5:d5:f2:75:07:ca:88:f1:c3:ca:5f:1b:52:1d:dc:fe:81:
fa:11:f4:58:39:71:7f:75:61:4e:2e:c9:a1:a7:31:39:14:fa:
b6:89:d9:c2:60:76:0e:16:62:c4:e1:d9:32:cf:b2:e6:ad:f6:
23:24:9e:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VSoESr7SHfKP7P9+mIunDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzRkYjk2NDAyZmY1Y2YxODc1NjQ1NjBlYThmMTNlZWVi
NWZmZWIwHhcNMjYwNzI0MTgwMTU1WhcNMjYwNzI1MTgwMTU1WjAzMTEwLwYDVQQD
EygxMmYxNjVjNTM4MzM1MWZiM2I2Y2U2MGVmZTFjNmNkOTA4NmRkZTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCIYfLTXJmSuuHffLPxQCr5d8if4
1nle1fbCHW7z5x+BV/ce4mLm4ZOy5U/b0CnQRsSGTnp7wFfqBDhF0YPXbHyv7f/b
I0e0mPP0nakvuZi+pXaP0m41o6wa9xhTIt+obUQg/P801DeEfkngwoxVYUpevgaJ
+/tfXuq7zXM7kzF4Em2i9x1iJ7lQIT2imlxHOCNd85gEoIVwY3+3xh2NoPjhx4Px
okTEZDLcPFXUQpWO+om/jOkAQdjqy/JNwsfGJofxxER280MOiSR9riEHUwARn410
SezGyIExr54tB/LJs4QCMAdEBJtlgxMVho2YXdLFK3OWJZK5/bZhKtDHswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLxZcU4M1H7O2zmDv4cbNkIbd4qMB8GA1UdIwQY
MBaAFBB025ZAL/XPGHVkVg6o8T7utf/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhUYmxrQXY5YzhZZFdSV0RxanhQdTYxXy1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8xZTFkNjktMGJmZC00MGFmLTg4YjEt
YWI0MGI1OGEyODkyLzEvRUhUYmxrQXY5YzhZZFdSV0RxanhQdTYxXy1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8xZTFkNjktMGJmZC00MGFmLTg4YjEtYWI0MGI1OGEyODky
LzEvRUhUYmxrQXY5YzhZZFdSV0RxanhQdTYxXy1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaSqAyplt
7Ice/d9bc6vHrQ8lI/FS8NLZ2dF7sKf6pInB16W6W+kzBjrmR0p/0oq8WPM3tATV
wnk57aDwvoOPahPbtec/oVJFUUQEk6HBJDPeSjS/Mgp/RR/qIYpDR4g+jnhtW55x
JvMdSC1gjRen55P1BlByvlmflHIgmzac+eemH7zBm0/p4ZJSvt8O6PAtrPKwaz+r
PezwPfN4PKGhhwf9u2I89UNJdKxvoIDk3SNIQs6uq4K6ELpP+2z+vynWhcr9dXKQ
IvXV8nUHyojxw8pfG1Id3P6B+hH0WDlxf3VhTi7JoacxORT6tonZwmB2DhZixOHZ
Ms+y5q32IySedg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:03:13 2026 by rpki-client