Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
File: EHQA5PCchADaMYvWywP9XFSqqfE.mft (raw, json)
Hash identifier: muZQteArxKsv4WaKcp+Ps+PM7iIVZCZJOefDdOAfIbc=
Subject key identifier: 0A:BB:EE:9C:22:F2:64:5E:0B:71:E7:7A:ED:F9:68:D5:8A:F3:C9:D9
Authority key identifier: 10:74:00:E4:F0:9C:84:00:DA:31:8B:D6:CB:03:FD:5C:54:AA:A9:F1
Certificate issuer: /CN=107400e4f09c8400da318bd6cb03fd5c54aaa9f1
Certificate serial: 019F8EA2E61E459408CE9C2F174E60EB50CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
Manifest number: 0225
Signing time: Thu 23 Jul 2026 11:01:08 +0000
Manifest this update: Thu 23 Jul 2026 11:01:08 +0000
Manifest next update: Fri 24 Jul 2026 11:01:08 +0000
Files and hashes: 1: EHQA5PCchADaMYvWywP9XFSqqfE.crl (hash: ML+27AbR8m5medwuwO0+R/IBla4QlImjuiHd75BBIbE=)
2: OGjeDErcHRCzEaNJIlL9WLO39x0.asa (hash: twryuu4Niufwid1brPkWkntu7TTmLytf1vNFmmKb5Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:e6:1e:45:94:08:ce:9c:2f:17:4e:60:eb:50:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107400e4f09c8400da318bd6cb03fd5c54aaa9f1
Validity
Not Before: Jul 23 11:01:08 2026 GMT
Not After : Jul 24 11:01:08 2026 GMT
Subject: CN=0abbee9c22f2645e0b71e77aedf968d58af3c9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:52:7e:04:ef:3c:dc:e0:10:3c:bc:59:41:c4:
54:61:53:77:26:d1:cc:ef:27:36:88:71:85:c3:97:
97:76:3f:fd:43:5e:92:ca:20:8a:12:3f:1b:cb:6a:
90:11:41:9b:12:e3:4b:be:b8:dc:6e:e5:9a:c8:0b:
1c:92:be:f2:e0:f0:77:54:16:24:48:1f:ca:94:09:
48:de:f5:f5:a1:3d:e7:7e:9c:40:46:61:72:60:ce:
89:56:65:60:6b:f7:18:a2:b3:8b:1f:04:73:39:da:
08:54:d4:b9:3d:6e:01:d7:f8:6c:41:05:71:37:9b:
35:f2:c8:bf:10:ad:e6:4f:71:35:9c:d5:d3:a7:5e:
2b:ae:2d:7b:05:c2:2c:09:1f:bb:97:f1:2d:11:fb:
c8:9a:d3:9a:f3:3e:3e:aa:57:d7:71:29:eb:a2:14:
bc:f9:b1:04:19:01:44:69:5c:da:2c:88:a7:7f:11:
9c:53:2b:5d:b2:96:ee:ac:13:40:d6:46:16:f7:19:
f4:71:27:3a:3b:ff:c5:9b:23:4f:02:a1:13:51:4e:
a5:e3:ea:ca:36:44:7e:be:cb:80:69:9a:1c:d6:00:
4e:97:63:82:6d:2e:bc:6c:4e:3f:45:34:4b:26:50:
61:c6:d2:ee:29:d5:44:73:a4:32:cd:53:1d:8f:8b:
72:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BB:EE:9C:22:F2:64:5E:0B:71:E7:7A:ED:F9:68:D5:8A:F3:C9:D9
X509v3 Authority Key Identifier:
keyid:10:74:00:E4:F0:9C:84:00:DA:31:8B:D6:CB:03:FD:5C:54:AA:A9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3c:0b:26:96:0b:2d:a6:8b:70:24:2d:66:0b:6c:9f:78:e5:
10:20:5a:a8:1a:2a:40:34:3f:2f:e8:52:cc:4f:e2:53:84:66:
79:29:0e:a8:ae:1d:49:ec:d1:25:85:fc:e9:86:75:85:d2:5d:
e3:54:fa:49:16:4b:4e:28:46:59:b0:3a:e5:aa:3b:b3:97:4c:
f1:26:57:50:81:b9:3b:a0:03:05:c7:e2:8d:70:4f:9f:da:82:
29:69:7d:05:51:49:ca:2c:65:2c:bc:2c:d6:b4:7e:d2:4d:26:
6c:2d:fa:a1:ca:59:3f:c9:84:e9:f3:d2:b6:73:9e:bb:c4:f6:
d9:e6:6e:19:7a:44:91:7e:30:c4:7a:05:e3:28:a4:93:19:20:
15:7f:b7:ab:38:ba:85:0a:59:96:a5:2a:d2:ca:1b:ec:36:4d:
7a:d2:b8:ce:ec:20:5e:8f:03:f2:0e:76:96:44:be:6d:15:74:
00:6b:d8:77:84:06:c8:53:ff:4c:f4:9c:a4:8d:1f:5f:4b:da:
e6:24:f8:0f:7f:6d:38:fb:91:d8:3d:c7:2e:8f:96:bf:d4:bf:
d0:f3:f1:1f:45:b5:91:4c:b3:e5:17:46:74:7a:14:70:ea:a5:
a9:43:a5:2e:6c:59:5d:52:94:28:9b:48:38:d0:18:3d:de:07:
81:db:cc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:02:25 2026 by rpki-client