Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
File: EHTblkAv9c8YdWRWDqjxPu61_-s.mft (raw, json)
Hash identifier: Ua5HlzHGP8MAkfj3vrpN9oy9QmH0+RXSXgyDHbW201g=
Subject key identifier: 90:03:76:52:F1:3D:D1:DD:D1:D5:D0:58:C3:7F:A6:0C:83:00:FC:C4
Authority key identifier: 10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
Certificate issuer: /CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Certificate serial: 019E2091F3D3CC204D78102B820995A7A6C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
Manifest number: 1949
Signing time: Wed 13 May 2026 09:01:36 +0000
Manifest this update: Wed 13 May 2026 09:01:36 +0000
Manifest next update: Thu 14 May 2026 09:01:36 +0000
Files and hashes: 1: EHTblkAv9c8YdWRWDqjxPu61_-s.crl (hash: tl/APw+GSFpY3niuk1P+cwKOYeAsQWmz1GAwBiLbHjQ=)
2: oGSX6Be2A4gMsymfO3IeIELxVGc.roa (hash: 9nynO0eaDCEM38Kekr3tOs/yAPJlXITpxT9ftUpbs/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:f3:d3:cc:20:4d:78:10:2b:82:09:95:a7:a6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Validity
Not Before: May 13 09:01:36 2026 GMT
Not After : May 14 09:01:36 2026 GMT
Subject: CN=90037652f13dd1ddd1d5d058c37fa60c8300fcc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a6:b3:0a:08:cc:18:07:d2:85:8d:b3:18:6b:
02:04:c1:93:1a:87:4b:51:37:0c:d3:d3:31:db:98:
19:fa:84:b1:9a:94:32:47:81:19:58:f6:c6:04:89:
8e:22:ef:37:e1:77:7d:62:c5:27:d4:bc:13:0a:85:
4c:b7:a1:d2:16:39:85:83:c0:60:09:93:2e:9f:c2:
f8:37:2d:a4:a5:2a:fa:38:1e:38:89:6a:9a:1f:d0:
49:b2:97:40:0f:97:7c:d7:24:72:63:dc:97:01:2a:
2f:3c:22:04:82:41:7e:9a:a2:e9:de:a8:14:b6:a4:
8d:84:53:2d:a9:d3:00:c2:4b:34:fe:51:5b:d1:6b:
95:5f:6e:8a:fd:dc:01:61:c0:4e:ed:71:03:50:f0:
00:49:c1:39:7f:4c:55:f4:04:4f:dc:b3:d6:ec:22:
af:23:6c:41:54:9a:da:58:8e:50:40:f8:8a:8a:70:
35:af:f3:b5:c7:56:e4:7b:bb:47:f2:b5:e7:6b:c1:
09:0e:cc:c2:14:f1:f7:af:2a:9a:b3:ff:7c:d1:e1:
58:ed:e8:61:bb:52:99:e6:12:a2:1e:fa:36:e3:b5:
7e:39:d3:bf:d4:4e:50:74:bb:52:e3:ac:90:a4:dc:
76:3a:c0:48:17:93:fa:b4:af:99:ce:ad:21:40:7e:
9c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:03:76:52:F1:3D:D1:DD:D1:D5:D0:58:C3:7F:A6:0C:83:00:FC:C4
X509v3 Authority Key Identifier:
keyid:10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d8:09:93:02:de:c9:d6:18:13:21:6d:c2:d8:07:6f:07:fa:
0e:f8:7e:dc:b9:a9:fc:fc:75:d2:1e:2b:2a:c8:bf:f2:d6:81:
bb:85:00:11:7d:55:3c:79:79:d0:0d:76:b9:bd:03:3f:55:4d:
3f:dd:5c:3a:a5:3b:15:92:1f:99:1c:38:91:c2:25:60:b3:2d:
03:09:2c:3b:8f:2a:b5:ea:11:a5:f2:c6:96:e3:fe:bc:c9:e1:
21:94:be:65:f7:de:25:21:14:05:72:b6:ca:0b:6a:36:3c:a2:
67:2b:48:f4:02:1e:77:b3:96:02:27:21:29:1f:2c:73:d5:fe:
74:32:da:66:6f:45:71:9d:56:46:a4:18:f0:49:4e:8f:c5:a5:
20:a3:9e:b6:4f:8a:f1:77:70:84:00:36:09:ea:68:48:3c:a6:
0a:d6:83:1a:23:70:88:77:6a:ce:c6:ae:68:55:f9:5f:45:e5:
8e:2f:24:3c:25:8a:7d:96:1b:43:aa:15:3b:f9:0e:b9:e1:71:
cf:77:3c:5e:e4:66:c5:15:97:12:81:c9:35:7f:96:eb:df:a2:
d4:b3:f4:9a:cc:0c:0f:84:f3:a5:30:db:0a:b6:c0:d6:39:f9:
4c:a7:54:05:37:c8:f0:ec:96:91:1e:e3:cb:6f:0f:3b:db:d1:
5a:af:e1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:52:32 2026 by rpki-client