Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
File: EhUb9X9TFrLdXNij95hSfqwUt3Q.mft (raw, json)
Hash identifier: yD9m9ZnUe4Nh8nPw2TsKZ+1u1/y4oRgBYDaL3JLDaBM=
Subject key identifier: 2D:90:BF:76:CB:4E:66:FB:D9:A4:09:7A:5D:30:65:46:A9:70:77:08
Authority key identifier: 12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
Certificate issuer: /CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Certificate serial: 019D2696656FF710CD36F596530F8075FE03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
Manifest number: 1819
Signing time: Wed 25 Mar 2026 20:01:23 +0000
Manifest this update: Wed 25 Mar 2026 20:01:23 +0000
Manifest next update: Thu 26 Mar 2026 20:01:23 +0000
Files and hashes: 1: EhUb9X9TFrLdXNij95hSfqwUt3Q.crl (hash: GE6+4nR00XcoJSttDDxv8VlZq16lr80i7jaJQGlZPyU=)
2: cgx3Y5niHaURRA_j2XVnH5snZqE.roa (hash: wvI3PVCUphqU2rq2ZXh+5+5Blo4y6rgwv7y5x6vRtSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:65:6f:f7:10:cd:36:f5:96:53:0f:80:75:fe:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Validity
Not Before: Mar 25 20:01:23 2026 GMT
Not After : Mar 26 20:01:23 2026 GMT
Subject: CN=2d90bf76cb4e66fbd9a4097a5d306546a9707708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ed:3c:13:c1:cd:38:d8:30:bd:f7:42:9c:04:
de:6e:8f:a7:b4:ba:5e:d9:07:bc:90:87:f7:6d:f9:
1d:1c:12:6e:cc:58:8d:da:d2:c0:e4:2c:2e:71:63:
7c:e2:b8:e1:be:12:13:1c:3f:06:08:ea:40:2a:eb:
1c:f8:d9:10:1a:7b:03:8a:be:39:a2:4c:43:e1:8d:
ae:b1:01:8b:a9:44:4d:4b:fa:40:80:75:60:69:45:
e9:cb:b1:7a:df:bb:a1:25:cf:57:02:b6:7c:51:0d:
f6:b0:71:af:4a:da:d1:5c:48:63:63:ad:f1:24:5b:
93:72:66:98:5b:71:df:b6:d3:26:68:28:49:4f:7c:
d8:43:84:0b:82:e7:20:71:0f:49:7f:cf:9e:dd:0a:
1c:e1:2d:26:0f:77:7b:77:b0:64:55:dc:e2:c8:dc:
7d:65:09:b5:1e:8d:8e:9b:5c:e7:36:06:28:a2:3f:
46:da:26:59:89:98:0a:bf:bb:27:db:15:ef:29:42:
b5:b1:8d:d7:30:5f:89:4d:85:38:12:46:ad:b2:d6:
2a:0d:f7:74:1f:70:74:99:3f:a2:cb:96:93:df:d0:
5b:89:7a:ee:cb:5f:02:26:6c:84:26:8d:0a:6f:ba:
29:3a:fa:62:5e:b5:29:38:5a:f3:90:eb:5e:62:16:
ef:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:90:BF:76:CB:4E:66:FB:D9:A4:09:7A:5D:30:65:46:A9:70:77:08
X509v3 Authority Key Identifier:
keyid:12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:7b:c7:1b:cd:bc:13:19:d6:22:36:24:75:50:b1:7f:2f:f2:
fc:06:57:91:f3:40:58:e4:14:46:99:68:52:91:9d:a0:f6:93:
3d:fe:d5:e3:5d:ca:df:3a:14:a6:db:2f:ef:10:ca:40:34:55:
13:56:16:6e:1c:3a:57:13:37:42:ad:ab:0b:e8:b6:8c:b0:a7:
ac:7f:4a:cb:63:06:6a:1c:ff:a6:57:db:29:18:c3:36:6e:36:
d9:85:01:b5:8c:b7:ea:75:be:4b:66:3e:42:fb:70:34:82:61:
44:6d:c7:e8:ff:e7:ff:0b:f9:50:3f:1e:7a:84:0c:05:6d:6b:
62:7c:47:38:4e:76:71:83:69:60:6a:b5:e9:09:1c:2f:74:dd:
da:83:0c:73:b4:b9:b8:d8:03:82:78:25:34:bb:45:34:55:fd:
e9:27:66:32:5e:b8:c1:39:7d:bd:f2:07:f2:1d:6b:68:a2:99:
ea:94:40:36:64:b3:2e:44:cb:14:57:bc:8d:29:3a:8f:9a:45:
de:76:ca:9a:3a:e7:be:f4:87:ed:35:61:bd:5c:d1:11:9f:d9:
bd:66:20:69:81:3c:8b:78:61:2a:b5:cd:c1:0a:58:0a:c0:33:
a1:4c:40:da:2c:b7:b2:a5:c9:3e:0c:59:a5:14:8a:18:0d:f3:
66:d4:e3:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlmVv9xDNNvWWUw+Adf4DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMTUxYmY1N2Y1MzE2YjJkZDVjZDhhM2Y3OTg1MjdlYWMx
NGI3NzQwHhcNMjYwMzI1MjAwMTIzWhcNMjYwMzI2MjAwMTIzWjAzMTEwLwYDVQQD
EygyZDkwYmY3NmNiNGU2NmZiZDlhNDA5N2E1ZDMwNjU0NmE5NzA3NzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+08E8HNONgwvfdCnATebo+ntLpe
2Qe8kIf3bfkdHBJuzFiN2tLA5CwucWN84rjhvhITHD8GCOpAKusc+NkQGnsDir45
okxD4Y2usQGLqURNS/pAgHVgaUXpy7F637uhJc9XArZ8UQ32sHGvStrRXEhjY63x
JFuTcmaYW3HfttMmaChJT3zYQ4QLgucgcQ9Jf8+e3Qoc4S0mD3d7d7BkVdziyNx9
ZQm1Ho2Om1znNgYooj9G2iZZiZgKv7sn2xXvKUK1sY3XMF+JTYU4EkatstYqDfd0
H3B0mT+iy5aT39BbiXruy18CJmyEJo0Kb7opOvpiXrUpOFrzkOteYhbvYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2Qv3bLTmb72aQJel0wZUapcHcIMB8GA1UdIwQY
MBaAFBIVG/V/Uxay3VzYo/eYUn6sFLd0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWhVYjlYOVRGckxkWE5pajk1aFNmcXdVdDNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jNTBkMGMtMzg4ZS00YzAwLWJlZjQt
NGRjNmE0ZjRlZTU1LzEvRWhVYjlYOVRGckxkWE5pajk1aFNmcXdVdDNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jNTBkMGMtMzg4ZS00YzAwLWJlZjQtNGRjNmE0ZjRlZTU1
LzEvRWhVYjlYOVRGckxkWE5pajk1aFNmcXdVdDNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXvHG828
ExnWIjYkdVCxfy/y/AZXkfNAWOQURploUpGdoPaTPf7V413K3zoUptsv7xDKQDRV
E1YWbhw6VxM3Qq2rC+i2jLCnrH9Ky2MGahz/plfbKRjDNm422YUBtYy36nW+S2Y+
QvtwNIJhRG3H6P/n/wv5UD8eeoQMBW1rYnxHOE52cYNpYGq16QkcL3Td2oMMc7S5
uNgDgnglNLtFNFX96SdmMl64wTl9vfIH8h1raKKZ6pRANmSzLkTLFFe8jSk6j5pF
3nbKmjrnvvSH7TVhvVzREZ/ZvWYgaYE8i3hhKrXNwQpYCsAzoUxA2iy3sqXJPgxZ
pRSKGA3zZtTjIg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:08 2026 by rpki-client