Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
File: EHWcamLieNqDEa_sj3Z3xBNj0fg.mft (raw, json)
Hash identifier: HArJsGvyi5VyZvfVoZyw7hRVkQOnk5aHXgw3KJo0OEk=
Subject key identifier: 04:04:46:C4:F6:2B:CC:4C:AE:0E:99:00:9A:A2:28:82:67:8A:DA:D4
Authority key identifier: 10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8
Certificate issuer: /CN=10759c6a62e278da8311afec8f7677c41363d1f8
Certificate serial: 019D28166EC7FC7390D97DE6AD603FECAC8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
Manifest number: 072D
Signing time: Thu 26 Mar 2026 03:00:51 +0000
Manifest this update: Thu 26 Mar 2026 03:00:51 +0000
Manifest next update: Fri 27 Mar 2026 03:00:51 +0000
Files and hashes: 1: EHWcamLieNqDEa_sj3Z3xBNj0fg.crl (hash: s3rjZlYgq9L8ESnN2wxxCpNRZ6lGukaJRS963xlGt0U=)
2: WzghRqzGjI_eG3WiC84nx-l-Aus.roa (hash: BkSKCwkOQoqJmPqml1/0+ldKWjkL69DMpw0CtVVRSPA=)
3: mHoBt9PDNYSmvIbOtBMkSD1EeQc.roa (hash: NyFP79wSko1G5ztyYBa7m1r2+XgRX6VCVkCRadeTppY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:6e:c7:fc:73:90:d9:7d:e6:ad:60:3f:ec:ac:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10759c6a62e278da8311afec8f7677c41363d1f8
Validity
Not Before: Mar 26 03:00:51 2026 GMT
Not After : Mar 27 03:00:51 2026 GMT
Subject: CN=040446c4f62bcc4cae0e99009aa22882678adad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:40:17:df:c5:18:14:2b:c2:56:0a:59:13:8b:
fd:b4:a2:5e:79:38:00:69:83:37:22:09:b1:82:33:
5a:3c:df:bd:4b:d4:94:59:47:02:3c:6a:54:22:c9:
c0:98:a4:2e:7b:fa:1b:2b:8d:9f:7b:67:19:d6:bb:
48:ec:0c:83:61:2c:70:d7:13:fe:d6:2e:d9:4c:97:
77:5e:63:85:92:20:fd:69:dc:ce:cb:56:a6:81:d9:
89:35:2f:fa:25:03:a1:e8:59:91:ea:4c:fc:7d:a1:
bb:9f:5c:91:9a:56:48:d2:49:ec:f8:68:e2:90:cd:
6e:22:01:aa:0c:f5:82:6b:b9:38:9a:e3:bd:ab:4e:
5f:6e:a1:b3:3a:9f:76:22:d4:c8:15:4f:72:e5:34:
5a:f9:c1:f7:ae:72:a4:cd:0c:f1:3d:c4:54:e5:71:
06:95:da:b9:fd:f9:39:32:fa:02:d7:14:2f:96:c1:
95:1c:96:90:91:35:45:44:e5:5c:71:5a:4a:5e:04:
9a:a7:ef:ef:34:44:c6:f2:7f:58:24:e6:a4:c5:69:
50:1e:8d:8f:dd:46:fc:51:4b:06:51:de:26:b0:06:
38:8f:15:7f:a4:09:53:a8:cd:ea:3b:ba:e9:fd:47:
20:e2:80:30:34:28:e1:1f:cb:0c:39:34:14:14:d7:
d4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:04:46:C4:F6:2B:CC:4C:AE:0E:99:00:9A:A2:28:82:67:8A:DA:D4
X509v3 Authority Key Identifier:
keyid:10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d5:5b:60:35:cc:97:61:2c:66:fa:7e:7b:ea:18:3a:33:2c:
cf:6e:d8:86:a1:5e:1b:e6:ea:57:29:3e:8e:ef:5e:40:e5:d5:
0d:34:9d:0f:a8:c0:0d:f0:cd:ad:ce:a2:25:4a:dd:66:64:a9:
e3:f7:91:c2:77:e4:62:94:3d:5c:27:a0:76:fa:48:5b:52:4b:
11:b2:60:40:ff:fa:86:a6:07:0c:67:d8:61:91:0c:e7:b8:58:
26:62:97:3d:98:fe:a6:14:2f:03:c6:fe:67:bf:cc:c2:c1:b4:
70:17:ea:39:dd:e1:86:03:a7:32:3a:38:57:f9:75:5e:93:17:
78:3b:15:36:e4:20:34:f3:fc:de:a7:4b:1a:b9:eb:39:7d:77:
7a:8c:cb:3c:ba:ca:7f:60:e1:03:62:e4:18:36:82:4c:92:30:
d8:c3:d8:86:74:53:5f:53:d1:c6:92:39:0f:bb:02:37:22:78:
5f:63:1b:43:06:b1:a6:08:67:a3:fe:cc:fb:ff:68:37:1b:88:
32:a8:04:16:9b:c9:99:50:d6:7e:42:de:bf:5a:67:a4:41:b2:
f7:2c:c2:9c:7f:60:ce:c9:8e:71:a8:97:2e:fa:61:4f:50:48:
18:92:3b:d0:f3:ca:40:b3:62:fc:cd:f4:e2:7c:99:9d:00:a3:
b2:77:5d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:54 2026 by rpki-client