Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
File: EHTblkAv9c8YdWRWDqjxPu61_-s.mft (raw, json)
Hash identifier: 9rU5T+qwc7kzpnIQRl9ddPoS+oV8ZrHR3CbsYrUiL1Q=
Subject key identifier: 90:EC:69:BA:DF:6E:84:40:59:93:1B:81:4D:A3:0B:4F:D0:CA:CF:7F
Authority key identifier: 10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
Certificate issuer: /CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Certificate serial: 019D2772D4A00166A15F196CD5E4FF84C91D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
Manifest number: 18C8
Signing time: Thu 26 Mar 2026 00:02:09 +0000
Manifest this update: Thu 26 Mar 2026 00:02:09 +0000
Manifest next update: Fri 27 Mar 2026 00:02:09 +0000
Files and hashes: 1: EHTblkAv9c8YdWRWDqjxPu61_-s.crl (hash: f9KaRCQ0gSBcMhdp1LWes9lq7yHOufzmufbaMMS9cxM=)
2: oGSX6Be2A4gMsymfO3IeIELxVGc.roa (hash: 9nynO0eaDCEM38Kekr3tOs/yAPJlXITpxT9ftUpbs/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:d4:a0:01:66:a1:5f:19:6c:d5:e4:ff:84:c9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Validity
Not Before: Mar 26 00:02:09 2026 GMT
Not After : Mar 27 00:02:09 2026 GMT
Subject: CN=90ec69badf6e844059931b814da30b4fd0cacf7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:be:e0:76:d2:84:1b:d6:74:cf:fc:f7:6b:e7:
5a:39:a2:17:ae:45:c3:6e:9c:2d:22:a6:32:2b:1c:
82:44:99:1f:e5:d3:55:a3:06:be:48:79:02:17:fb:
d6:b1:99:ba:fb:a9:10:df:12:05:34:79:15:31:2b:
2b:65:0a:16:e3:0f:31:57:88:3d:26:4a:4c:6e:cd:
bd:de:0a:6d:85:a4:f3:3e:e6:70:44:f1:14:5c:7d:
04:d1:a4:3d:9f:14:2a:05:e9:37:24:71:08:6e:37:
7e:6d:fd:f5:41:f4:54:0c:3f:49:31:0c:30:c0:fc:
69:66:06:64:74:b1:ad:2c:5a:80:a0:f0:70:67:7c:
6c:80:bd:5a:59:54:8a:52:90:35:75:63:23:f9:80:
bf:f0:bb:9c:32:83:3a:69:88:c6:ad:64:f0:0a:e9:
6a:e9:0d:ca:35:31:6b:8b:ac:41:5a:67:10:b6:38:
8f:b2:7d:81:73:f3:86:68:65:d3:f7:73:94:5c:0e:
41:83:5f:12:00:35:f1:9d:aa:e8:2d:f9:4c:5a:f8:
de:65:21:65:ef:a3:4d:e1:81:24:5e:2e:ce:2a:b2:
68:6e:38:ce:b1:b5:01:76:89:ee:83:30:76:69:06:
a2:6a:7d:b3:b0:40:db:3f:f2:cd:9d:e4:33:7e:5c:
d3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EC:69:BA:DF:6E:84:40:59:93:1B:81:4D:A3:0B:4F:D0:CA:CF:7F
X509v3 Authority Key Identifier:
keyid:10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:11:49:fd:ec:10:0b:1a:f1:d4:39:5e:b7:12:69:a2:4c:4c:
b0:50:14:6f:7f:7c:fa:4e:15:9e:fd:d0:21:66:11:bd:1a:1d:
d3:71:25:eb:84:80:98:2d:4c:1e:7a:ba:1a:f6:81:19:e3:18:
31:f4:93:96:2f:57:71:52:0f:bc:48:b8:39:f3:4d:7f:d3:7a:
74:18:c2:c6:63:bf:c5:5c:68:0a:4e:a2:5a:d2:41:e3:bb:de:
31:ab:78:37:5d:26:a5:e7:17:5b:9e:0d:f4:73:9c:58:00:a0:
cb:3c:16:e6:6e:32:39:a5:1f:87:20:d3:e7:e5:af:60:4f:2a:
fd:7e:c7:ef:0a:4e:1e:c2:fe:1d:e0:87:bb:15:c3:33:27:34:
4b:26:d6:f5:f5:e9:04:15:46:c1:bc:c6:d1:e5:81:92:e2:cd:
29:1f:c2:ee:4a:0c:92:ff:7b:88:65:a7:97:c9:38:dc:22:8e:
6b:83:4d:af:9d:19:d7:9b:02:01:0f:55:19:ac:20:03:89:0f:
63:4c:12:1e:6a:19:76:47:fe:8d:f4:17:de:3a:dc:1a:d7:6c:
74:7e:3a:81:3a:b8:56:23:b5:a9:d9:6d:48:97:87:f8:74:df:
26:cd:94:55:57:9e:1f:99:8a:15:bc:04:4a:96:3c:48:31:a7:
52:d5:b9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:40:01 2026 by rpki-client