Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
File: EHQA5PCchADaMYvWywP9XFSqqfE.mft (raw, json)
Hash identifier: Rdj02G6hHE15RYIOszqA94m+GARCHxOyfnqG24Euuak=
Subject key identifier: 81:83:9A:B5:B2:6E:D3:F8:C4:20:3C:67:60:3B:91:2D:C1:FF:7C:87
Authority key identifier: 10:74:00:E4:F0:9C:84:00:DA:31:8B:D6:CB:03:FD:5C:54:AA:A9:F1
Certificate issuer: /CN=107400e4f09c8400da318bd6cb03fd5c54aaa9f1
Certificate serial: 019E1DC71D6AF10F2F319D5DE3238B40968B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
Manifest number: 0165
Signing time: Tue 12 May 2026 20:00:48 +0000
Manifest this update: Tue 12 May 2026 20:00:48 +0000
Manifest next update: Wed 13 May 2026 20:00:48 +0000
Files and hashes: 1: EHQA5PCchADaMYvWywP9XFSqqfE.crl (hash: 7btkN2gQySGN7y0CgfWAoKUdrQHyLAcQgXVStYhxw/8=)
2: msGNeRKY4hek2w_pSa5AbdvnMq8.asa (hash: PIe6d7l8SXdZZ/I+p6eU+FbcvFslTUziAAD/2pokhqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:1d:6a:f1:0f:2f:31:9d:5d:e3:23:8b:40:96:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107400e4f09c8400da318bd6cb03fd5c54aaa9f1
Validity
Not Before: May 12 20:00:48 2026 GMT
Not After : May 13 20:00:48 2026 GMT
Subject: CN=81839ab5b26ed3f8c4203c67603b912dc1ff7c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5e:eb:02:35:49:94:15:6a:91:4b:8b:23:ba:
bd:6a:ba:79:c7:07:f5:30:b5:c4:72:5f:59:9a:c1:
72:38:3a:27:30:86:ed:49:50:a7:a6:95:2a:80:e5:
dc:f9:ed:16:78:61:1a:e3:0b:1e:7c:cf:55:39:3c:
c3:0a:13:55:11:cc:de:e4:e2:ac:be:1e:b8:80:17:
40:d1:b3:6d:00:e6:3f:08:d9:2f:f4:8c:3b:35:7a:
e1:18:38:92:20:a3:40:28:7a:1c:b6:8f:00:04:0d:
e8:52:0a:9a:17:c8:aa:a1:9d:a2:e3:1b:2d:1b:1a:
a3:fc:a6:ef:18:71:dc:94:ca:8e:37:4f:bf:38:3c:
2b:21:24:6e:6a:2f:ee:a5:19:06:28:17:d2:79:d1:
53:de:96:b4:7b:61:ba:31:76:07:d7:65:32:67:3c:
d8:4f:81:5a:40:57:5e:f7:0a:9a:a2:36:56:c4:ce:
47:2c:64:0d:22:b3:38:fd:8f:ca:2d:83:5c:84:32:
f9:e5:c4:24:d2:9f:b1:27:70:24:0f:a2:9e:cc:24:
5d:58:3d:98:70:c5:ee:9b:0e:d3:b6:4b:0d:28:60:
e0:fc:1a:33:2c:34:47:4f:51:73:05:65:12:8b:28:
0a:a1:39:da:61:87:d9:a9:4d:1d:c3:19:88:d7:69:
89:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:83:9A:B5:B2:6E:D3:F8:C4:20:3C:67:60:3B:91:2D:C1:FF:7C:87
X509v3 Authority Key Identifier:
keyid:10:74:00:E4:F0:9C:84:00:DA:31:8B:D6:CB:03:FD:5C:54:AA:A9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ce:49:07:b6:56:b7:de:98:81:34:19:3a:06:7d:ba:c3:93:
1d:b2:10:7a:f5:fd:c7:0c:bf:66:1e:51:c8:9b:52:0e:40:88:
14:77:e6:18:52:76:06:ce:bb:54:8a:2c:d3:f6:29:03:fd:18:
33:a6:07:88:e5:63:3d:9f:b2:5c:bd:f4:8c:ed:67:c7:54:ba:
43:39:6c:3d:09:77:eb:69:f7:4d:e3:e4:59:1c:ec:67:87:08:
ca:ff:d4:8b:b3:82:2a:cf:9f:b3:28:b8:85:35:af:01:b8:23:
51:1b:81:8e:e8:dc:90:14:a5:e8:ea:2a:57:d3:3c:4b:ec:61:
07:19:64:cb:b3:12:a0:5c:08:dc:78:70:28:70:f2:0c:0a:77:
09:0f:ea:4c:b8:48:24:a4:bf:d7:8e:87:a9:d6:1f:8d:27:88:
aa:5a:e8:73:fb:9a:a1:28:c2:8d:37:30:fa:11:57:1b:1f:58:
98:3c:37:75:5b:33:69:04:ff:1b:9c:be:53:ff:cd:15:8e:ec:
2e:91:11:7f:b8:41:b0:74:d0:af:de:ce:31:0d:31:89:8b:1e:
77:d9:69:5e:bf:f3:64:9c:7c:0f:cc:a4:ba:9e:a4:40:c1:0d:
bf:56:7c:5e:d1:ff:9d:82:58:8a:f6:58:39:e6:cc:77:1d:d6:
1a:7e:af:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:28:25 2026 by rpki-client