Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
File: EharzETJqVVAzfWx3FQux9Ef4Ho.mft (raw, json)
Hash identifier: cWca13e2PVLpH9CXiYFbZc5DKqUgLBc0wjRSrsjjSEs=
Subject key identifier: 4E:F9:BB:04:61:32:5B:94:EE:1A:77:45:00:EB:62:93:63:3A:A9:3D
Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
Certificate issuer: /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Certificate serial: 019E1F7F52003043839A502DB1EF4AFE378B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
Manifest number: 0423
Signing time: Wed 13 May 2026 04:01:38 +0000
Manifest this update: Wed 13 May 2026 04:01:38 +0000
Manifest next update: Thu 14 May 2026 04:01:38 +0000
Files and hashes: 1: 9V3S7FKC66AOlqD78_S81truyog.roa (hash: zjtnM6n3Uet2Hry92cMihIwePJR9odotoqz4FTgtQpQ=)
2: EharzETJqVVAzfWx3FQux9Ef4Ho.crl (hash: 7cWppzkJpwIpvmTTe63d7cTbpmdF94j0EK80paSWcz8=)
3: Q89cC5EdEYVsTAR7wEMR5rmM-FA.roa (hash: IpAEUAQrDRw1Avy4gtoYvc+jdCy+th+rhrs9OezDlo8=)
4: R6vEKMp8XV0nRsp07cf4y7I04qo.roa (hash: nWBD/KxL+ZqMUbvdWaWo1r7/2jynLrCSHLN52H6UCwM=)
5: XGUIHnWF_LunuxvNcMmR57_WKzo.roa (hash: Gg+yICFewOrJllU9keGQjZ8+O9tNzguLLKLqMVLJpjs=)
6: b1NnfX82WWUKnDzO-T_p9BDnjPM.roa (hash: uuhxZnIOVP3yGkI2POwoZpysQSXnT6B0qJNkc7bJXFw=)
7: fYJN56gNpyjk6FeN9g2u8kda_Ck.roa (hash: 0Bz6iRQD5arZ6ysTUfpQvVjP86yHCsoWY8uCR19q2k4=)
8: iTrKyBgs_fihjw2gMNeMi35dTSA.roa (hash: zNTMLDdPTDqmLO0jhMMrsQBD6z1cOUxn49L1ph7eXpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:52:00:30:43:83:9a:50:2d:b1:ef:4a:fe:37:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Validity
Not Before: May 13 04:01:38 2026 GMT
Not After : May 14 04:01:38 2026 GMT
Subject: CN=4ef9bb0461325b94ee1a774500eb6293633aa93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:63:a2:8b:03:a5:43:3d:d1:f0:81:5a:8e:55:
5b:b6:d7:2c:eb:75:41:f3:27:17:f4:47:79:4b:5f:
5e:ba:23:cb:76:16:ce:b9:99:a6:20:70:c0:d4:e4:
8d:48:45:fd:99:88:74:00:a5:76:8e:1c:b2:c0:58:
3e:dc:25:f9:99:c7:6d:78:7f:9c:38:de:68:d6:d4:
d4:dd:24:16:58:40:04:ab:9b:b3:20:ee:25:0f:35:
0e:ab:03:e8:fd:ef:a4:7f:30:d2:f7:b0:13:9a:52:
bf:6d:e6:af:f0:b5:10:c5:37:82:54:b5:74:89:c2:
a9:8b:07:18:06:83:76:30:af:95:77:e7:11:bb:93:
ef:dd:8f:2b:65:97:37:28:b4:ec:30:8d:51:f8:79:
01:6d:64:96:96:1b:81:56:fa:85:a1:2c:47:c0:59:
f8:7b:dc:5a:5e:a7:63:dd:ab:ce:cb:40:47:17:20:
d9:55:43:fb:74:e9:d5:d1:b6:3b:d3:32:92:1b:52:
45:ae:5a:ca:a7:60:ff:53:b5:38:1f:28:da:64:50:
3f:7b:d3:56:6b:4d:21:80:24:53:a8:c6:98:e2:3c:
a5:60:1d:bc:8e:78:b5:56:3b:90:a9:70:e6:15:8b:
88:e4:dd:cd:1f:d6:22:0e:da:b0:b7:11:d5:6c:f4:
2d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F9:BB:04:61:32:5B:94:EE:1A:77:45:00:EB:62:93:63:3A:A9:3D
X509v3 Authority Key Identifier:
keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8f:ae:f6:7f:c9:33:aa:83:a3:e6:f8:f3:55:71:45:dd:8e:
c8:4d:f7:72:76:ec:ea:be:d9:c4:4c:84:ea:15:3c:37:b9:43:
e1:bf:53:b4:e1:4b:45:b0:09:91:37:76:d5:24:dd:22:5f:4f:
99:93:1b:56:22:46:75:2a:b9:38:69:72:ae:f6:79:08:41:d4:
63:5d:03:17:fb:d3:07:95:08:4d:0b:1b:e6:34:f6:b1:69:69:
1e:c6:11:fa:fc:a9:47:0a:6d:e5:15:22:ae:4d:3f:b7:89:3f:
09:e1:d6:20:67:36:69:78:58:e0:51:a3:34:6b:f6:a6:8d:38:
02:d9:6b:77:4a:63:7e:00:a9:75:66:49:a7:de:f9:8b:98:1f:
2f:19:10:d2:15:04:0f:80:87:45:48:b6:f2:b1:f4:31:c6:0a:
99:52:f7:40:66:d1:ce:1c:61:d5:c8:1f:a6:4a:ae:91:1f:b6:
43:72:8e:fa:6a:f0:1f:fb:b1:a2:d3:6f:f6:6a:ae:3a:84:f5:
3a:73:b2:b5:3e:5d:d2:16:01:5a:03:89:d5:75:de:c5:74:2e:
58:bc:d0:cf:72:d3:55:01:4e:af:25:00:1d:ae:6c:7f:33:11:
f7:c9:b1:a6:4d:22:34:86:22:84:8e:f1:85:0c:89:2c:76:3a:
61:cf:e0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:46:43 2026 by rpki-client