
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
File: EhUb9X9TFrLdXNij95hSfqwUt3Q.mft (raw, json)
Hash identifier: kkLCCKrdnFpRkUXloCP6y1QspZDdypYOkiQLMMeyPj8=
Subject key identifier: 77:30:7F:04:CA:5B:AA:EF:DA:22:E7:C7:5B:92:05:25:1E:9E:71:8D
Authority key identifier: 12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
Certificate issuer: /CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Certificate serial: 019F965BE4C99383396C1EF16729463A4832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
Manifest number: 195C
Signing time: Fri 24 Jul 2026 23:00:32 +0000
Manifest this update: Fri 24 Jul 2026 23:00:32 +0000
Manifest next update: Sat 25 Jul 2026 23:00:32 +0000
Files and hashes: 1: EhUb9X9TFrLdXNij95hSfqwUt3Q.crl (hash: ne/aBK7AMlfc/weffx/HMeM8bqJuZFABFn55LcyEEo0=)
2: cgx3Y5niHaURRA_j2XVnH5snZqE.roa (hash: wvI3PVCUphqU2rq2ZXh+5+5Blo4y6rgwv7y5x6vRtSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:5b:e4:c9:93:83:39:6c:1e:f1:67:29:46:3a:48:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Validity
Not Before: Jul 24 23:00:32 2026 GMT
Not After : Jul 25 23:00:32 2026 GMT
Subject: CN=77307f04ca5baaefda22e7c75b9205251e9e718d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:43:e5:f4:4b:d8:65:b3:b5:37:d9:76:73:a2:
a1:19:76:50:e2:b0:11:87:a1:91:92:7c:39:f0:e9:
e0:34:73:59:de:09:11:72:6c:42:79:1e:a5:a7:3e:
8a:3b:eb:01:d0:cc:8e:ce:aa:4b:b6:75:c7:e9:b6:
e2:06:17:2a:71:bd:4a:65:c9:6c:8d:42:21:26:b7:
53:0f:14:31:d9:ff:0e:6f:90:39:25:75:bc:d8:e8:
fe:c3:47:d9:c2:b8:a8:1e:32:7c:c7:f5:b3:36:2a:
c5:14:8b:3f:a2:ae:34:b8:a8:b7:97:ad:7e:f0:8f:
0c:ec:68:51:9e:41:56:b5:60:18:46:ce:09:2e:93:
70:9f:9f:c6:7b:75:bd:26:ac:27:0c:f3:26:da:12:
a8:54:e6:0e:8c:c1:ef:16:f2:5c:27:4e:4c:96:26:
e3:8e:c0:a0:35:a8:af:35:cf:64:cf:cb:2f:45:90:
f0:d0:d3:f6:9a:87:3a:f0:9f:bd:99:b1:cd:62:7b:
1c:ba:1f:58:1e:2d:03:cf:62:fa:03:c3:ba:58:be:
d3:7d:7f:92:1d:56:12:95:10:01:d5:5d:a6:8d:9a:
1c:54:d5:9d:0e:0a:db:e1:fc:18:94:93:7b:a3:44:
26:83:42:e7:a7:e6:12:77:df:2b:55:8a:fa:0b:e7:
b6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:30:7F:04:CA:5B:AA:EF:DA:22:E7:C7:5B:92:05:25:1E:9E:71:8D
X509v3 Authority Key Identifier:
keyid:12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:ac:61:b1:07:52:cc:6d:d7:48:d1:f4:be:3e:36:c6:69:25:
66:0a:01:f6:b4:d1:4b:1c:fa:15:ef:e1:fe:e5:a1:22:3c:08:
5f:5c:22:f4:31:52:00:c1:cb:3d:1b:11:bf:d9:7d:65:be:62:
69:59:d6:ff:96:18:0f:24:16:a8:3e:86:55:c2:5a:8f:72:07:
0b:89:a8:3c:1c:81:8f:f0:64:6d:f8:84:f6:dd:ab:6b:ba:b8:
41:63:31:5b:9b:76:e1:9b:d8:85:05:39:2e:19:53:db:b5:95:
09:a7:47:b9:c3:07:09:22:1e:29:ce:07:2c:a8:a6:bf:0b:0f:
8e:c6:ee:de:e6:c2:f1:aa:14:ce:b9:79:6e:8f:17:08:a6:3b:
c3:c1:c8:81:ff:ff:af:ff:9d:0b:e8:98:e1:2e:77:39:f2:ae:
cb:d9:a4:2d:51:82:8f:b2:9e:64:03:da:b2:6e:e8:25:0d:32:
30:c0:41:57:11:d0:1d:4d:fc:72:9d:4a:77:e4:b9:85:56:00:
c4:1a:5f:ca:85:8e:56:d8:f0:f4:5d:0a:37:6f:aa:00:4c:09:
7a:d6:df:39:d5:a2:55:97:7d:fe:95:ad:fb:88:52:ea:85:c4:
59:86:ec:70:67:16:b2:1b:c2:c5:35:ed:33:91:4e:a9:ba:be:
1f:98:b9:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+WW+TJk4M5bB7xZylGOkgyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMTUxYmY1N2Y1MzE2YjJkZDVjZDhhM2Y3OTg1MjdlYWMx
NGI3NzQwHhcNMjYwNzI0MjMwMDMyWhcNMjYwNzI1MjMwMDMyWjAzMTEwLwYDVQQD
Eyg3NzMwN2YwNGNhNWJhYWVmZGEyMmU3Yzc1YjkyMDUyNTFlOWU3MThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0Pl9EvYZbO1N9l2c6KhGXZQ4rAR
h6GRknw58OngNHNZ3gkRcmxCeR6lpz6KO+sB0MyOzqpLtnXH6bbiBhcqcb1KZcls
jUIhJrdTDxQx2f8Ob5A5JXW82Oj+w0fZwrioHjJ8x/WzNirFFIs/oq40uKi3l61+
8I8M7GhRnkFWtWAYRs4JLpNwn5/Ge3W9JqwnDPMm2hKoVOYOjMHvFvJcJ05Mlibj
jsCgNaivNc9kz8svRZDw0NP2moc68J+9mbHNYnscuh9YHi0Dz2L6A8O6WL7TfX+S
HVYSlRAB1V2mjZocVNWdDgrb4fwYlJN7o0Qmg0Lnp+YSd98rVYr6C+e2UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcwfwTKW6rv2iLnx1uSBSUennGNMB8GA1UdIwQY
MBaAFBIVG/V/Uxay3VzYo/eYUn6sFLd0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWhVYjlYOVRGckxkWE5pajk1aFNmcXdVdDNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jNTBkMGMtMzg4ZS00YzAwLWJlZjQt
NGRjNmE0ZjRlZTU1LzEvRWhVYjlYOVRGckxkWE5pajk1aFNmcXdVdDNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jNTBkMGMtMzg4ZS00YzAwLWJlZjQtNGRjNmE0ZjRlZTU1
LzEvRWhVYjlYOVRGckxkWE5pajk1aFNmcXdVdDNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvaxhsQdS
zG3XSNH0vj42xmklZgoB9rTRSxz6Fe/h/uWhIjwIX1wi9DFSAMHLPRsRv9l9Zb5i
aVnW/5YYDyQWqD6GVcJaj3IHC4moPByBj/BkbfiE9t2ra7q4QWMxW5t24ZvYhQU5
LhlT27WVCadHucMHCSIeKc4HLKimvwsPjsbu3ubC8aoUzrl5bo8XCKY7w8HIgf//
r/+dC+iY4S53OfKuy9mkLVGCj7KeZAPasm7oJQ0yMMBBVxHQHU38cp1Kd+S5hVYA
xBpfyoWOVtjw9F0KN2+qAEwJetbfOdWiVZd9/pWt+4hS6oXEWYbscGcWshvCxTXt
M5FOqbq+H5i5sw==
-----END CERTIFICATE-----
Generated at Sat Jul 25 02:52:13 2026 by rpki-client