Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
File: EHQA5PCchADaMYvWywP9XFSqqfE.mft (raw, json)
Hash identifier: itOejtiBiaUkdqJF4yagPlxMZRz4UNrATkdlXdQTqOM=
Subject key identifier: 6D:A1:23:06:83:8C:F5:3A:8D:A2:DE:9A:B9:28:50:89:EC:CA:D0:4C
Authority key identifier: 10:74:00:E4:F0:9C:84:00:DA:31:8B:D6:CB:03:FD:5C:54:AA:A9:F1
Certificate issuer: /CN=107400e4f09c8400da318bd6cb03fd5c54aaa9f1
Certificate serial: 019D24A76360663D4C587E4BB469E1536B4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
Manifest number: E4
Signing time: Wed 25 Mar 2026 11:00:42 +0000
Manifest this update: Wed 25 Mar 2026 11:00:42 +0000
Manifest next update: Thu 26 Mar 2026 11:00:42 +0000
Files and hashes: 1: EHQA5PCchADaMYvWywP9XFSqqfE.crl (hash: LLsLAYGLROzRS67OzSlVOQxLJOU96zVdlgKv5ZTtoUY=)
2: msGNeRKY4hek2w_pSa5AbdvnMq8.asa (hash: PIe6d7l8SXdZZ/I+p6eU+FbcvFslTUziAAD/2pokhqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:a7:63:60:66:3d:4c:58:7e:4b:b4:69:e1:53:6b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107400e4f09c8400da318bd6cb03fd5c54aaa9f1
Validity
Not Before: Mar 25 11:00:42 2026 GMT
Not After : Mar 26 11:00:42 2026 GMT
Subject: CN=6da12306838cf53a8da2de9ab9285089eccad04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ac:dd:9a:a9:d3:16:58:63:a3:2c:f7:64:93:
e7:75:7c:ce:dc:e6:40:bc:b4:88:4d:8b:4e:7c:db:
2e:01:f3:01:4f:06:67:50:ce:cd:ba:ff:70:6f:7b:
2e:47:d5:a8:38:32:40:ff:e4:31:fe:e8:53:22:55:
a2:39:85:1d:a9:d9:0b:b3:7b:51:9d:36:40:56:e0:
f5:82:34:d3:6b:c1:66:6b:89:f4:b2:e7:26:eb:a2:
ac:b1:d3:f1:b4:16:fd:5d:0a:a3:78:7c:77:b6:a3:
4d:9c:a0:05:a6:46:8c:da:5e:cf:73:69:75:95:04:
f3:80:b4:27:7d:90:71:a9:cc:9e:bf:e5:fd:97:68:
34:79:9a:0c:1c:cd:ce:7f:ef:ba:46:bc:fd:e6:72:
47:6f:9f:d4:64:92:dd:f5:0c:11:79:1c:10:b2:45:
df:3d:a8:1e:61:31:55:cb:a6:10:a5:33:b1:f5:37:
0d:25:f1:a2:bb:91:6c:15:02:e5:8f:13:e3:01:17:
65:35:cc:4c:1a:3d:84:67:1f:26:d5:9b:4c:97:d5:
02:9b:bc:86:1f:a4:3f:26:1b:e6:c0:14:ba:ed:a9:
a7:39:c5:47:cb:71:f1:f9:aa:72:11:7e:cf:32:ac:
c1:43:17:48:92:53:a1:2d:c4:29:49:c6:3a:9d:31:
99:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A1:23:06:83:8C:F5:3A:8D:A2:DE:9A:B9:28:50:89:EC:CA:D0:4C
X509v3 Authority Key Identifier:
keyid:10:74:00:E4:F0:9C:84:00:DA:31:8B:D6:CB:03:FD:5C:54:AA:A9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:6d:f3:4d:4a:4b:45:57:01:6c:44:af:6d:e5:4f:7b:05:62:
21:af:f9:c2:a2:58:58:e2:6a:28:f5:fd:0d:39:99:d1:fb:1b:
9c:7d:62:6f:88:d0:ac:b5:c0:07:eb:84:83:d6:23:cd:4f:85:
c4:b0:83:b2:6d:3f:01:ac:f4:7f:23:7e:02:d6:00:18:2c:80:
a7:d7:d8:a4:62:40:34:f4:32:6b:a7:d1:09:2e:0f:34:5a:44:
cd:b3:ee:ea:a0:ad:c9:73:e3:d9:50:a8:7c:b8:07:26:4b:1a:
34:eb:7d:a3:e0:cf:bd:43:5f:f7:85:9e:cf:c7:2e:8f:d7:0f:
28:86:42:e4:f1:1d:b9:66:98:c6:ec:52:fa:01:dd:f7:42:5a:
80:bd:6f:61:8b:84:e1:84:5f:cd:92:79:df:62:ff:75:98:ea:
af:91:1e:ff:0a:7b:fc:52:b1:6a:72:56:86:c8:32:1d:28:96:
ea:83:7d:b7:68:af:96:4e:d7:7f:f2:40:fa:a3:4f:c3:07:eb:
57:d0:65:af:9d:3a:36:cd:22:99:3f:fb:0a:0b:15:0e:58:db:
07:a1:f5:98:fd:77:56:e0:01:1f:15:4d:25:23:15:10:56:a0:
c2:b4:dd:4d:2b:a7:43:fd:5a:46:48:e8:55:59:d1:b5:e3:dd:
d2:a8:c8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:31:48 2026 by rpki-client