Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
File: EharzETJqVVAzfWx3FQux9Ef4Ho.mft (raw, json)
Hash identifier: E4Fog2xgG3wQZgwFocOMm3YezCscOB5PK79yagZzXdA=
Subject key identifier: D4:50:E7:D8:F2:50:D5:6B:07:6B:F5:1B:57:36:25:C3:E9:A3:B9:81
Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
Certificate issuer: /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Certificate serial: 019D266001BCF2C356172D30EA04D8D43FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
Manifest number: 03A2
Signing time: Wed 25 Mar 2026 19:01:59 +0000
Manifest this update: Wed 25 Mar 2026 19:01:59 +0000
Manifest next update: Thu 26 Mar 2026 19:01:59 +0000
Files and hashes: 1: 9V3S7FKC66AOlqD78_S81truyog.roa (hash: zjtnM6n3Uet2Hry92cMihIwePJR9odotoqz4FTgtQpQ=)
2: EharzETJqVVAzfWx3FQux9Ef4Ho.crl (hash: DtQ0kUL/j2ATIAkxd5/mIU2lVvCKFpHxS4+zXpxV8t0=)
3: Q89cC5EdEYVsTAR7wEMR5rmM-FA.roa (hash: IpAEUAQrDRw1Avy4gtoYvc+jdCy+th+rhrs9OezDlo8=)
4: R6vEKMp8XV0nRsp07cf4y7I04qo.roa (hash: nWBD/KxL+ZqMUbvdWaWo1r7/2jynLrCSHLN52H6UCwM=)
5: XGUIHnWF_LunuxvNcMmR57_WKzo.roa (hash: Gg+yICFewOrJllU9keGQjZ8+O9tNzguLLKLqMVLJpjs=)
6: b1NnfX82WWUKnDzO-T_p9BDnjPM.roa (hash: uuhxZnIOVP3yGkI2POwoZpysQSXnT6B0qJNkc7bJXFw=)
7: fYJN56gNpyjk6FeN9g2u8kda_Ck.roa (hash: 0Bz6iRQD5arZ6ysTUfpQvVjP86yHCsoWY8uCR19q2k4=)
8: iTrKyBgs_fihjw2gMNeMi35dTSA.roa (hash: zNTMLDdPTDqmLO0jhMMrsQBD6z1cOUxn49L1ph7eXpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:60:01:bc:f2:c3:56:17:2d:30:ea:04:d8:d4:3f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Validity
Not Before: Mar 25 19:01:59 2026 GMT
Not After : Mar 26 19:01:59 2026 GMT
Subject: CN=d450e7d8f250d56b076bf51b573625c3e9a3b981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:24:c2:28:54:97:55:ce:80:1c:a1:84:65:b5:
ad:c3:49:21:94:f0:de:8e:86:7d:6d:48:6e:ef:f6:
1e:70:f9:aa:4a:ed:df:c1:5d:c3:6f:d4:ad:7a:94:
0c:fd:29:b2:a8:d2:5f:28:4c:60:55:a9:1b:13:41:
51:4e:5e:a3:cc:6b:ba:eb:bb:02:13:4c:e7:ce:91:
dd:04:79:47:58:ce:d0:c4:6c:b2:7b:03:2c:bb:cd:
ba:4c:e4:05:4b:4a:83:8b:1e:48:b8:fe:56:fa:ac:
1d:7d:51:5e:5c:ae:c1:9d:f1:4b:3c:1a:ab:e4:30:
55:05:23:52:a5:5d:e2:08:ee:bd:fd:48:b8:86:7b:
d8:ce:98:f4:a5:69:db:ee:f3:fb:ee:4d:84:e8:61:
99:cf:4d:7f:d1:99:cb:0d:25:27:29:81:16:1f:e5:
06:c4:26:3f:14:9a:43:4b:0e:08:41:b7:e0:a3:a1:
04:5f:d7:0c:43:f1:21:57:e2:08:f3:c9:27:1a:a1:
22:6e:42:5f:37:0c:98:2a:38:38:62:79:0c:81:56:
13:1b:05:98:a7:bf:43:67:f2:08:e6:cd:f2:73:9b:
be:4d:51:ac:e8:bb:02:86:e7:5f:a9:f4:de:20:5e:
76:48:5b:e9:84:44:00:9b:f6:56:80:32:1c:2e:89:
dc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:50:E7:D8:F2:50:D5:6B:07:6B:F5:1B:57:36:25:C3:E9:A3:B9:81
X509v3 Authority Key Identifier:
keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:c6:4d:ee:f7:70:84:50:0e:d9:04:e7:e0:55:2f:ae:42:ef:
87:10:f1:bb:8d:ae:27:22:9c:48:f6:32:ed:62:99:62:8f:aa:
8f:d0:f4:33:da:36:a8:93:e9:e5:82:d6:cc:4b:9b:a2:9e:f0:
11:b2:91:03:2c:94:6f:b8:47:5a:d3:da:ad:a0:4b:a8:a5:42:
7a:02:3a:e4:b5:b6:60:96:e4:5d:58:d9:90:b1:b6:82:78:04:
fb:96:b0:e6:ff:6b:64:1c:2c:c9:37:08:e4:11:47:d3:ea:c3:
1c:bc:5b:6a:da:c0:b2:84:4c:b6:25:a6:f1:0a:83:23:8d:e0:
a2:3a:30:9e:b2:c7:36:ef:9e:69:2c:1b:3a:2e:5c:39:19:d8:
89:09:8c:44:53:dc:8c:6a:b1:03:f5:d6:bd:df:65:65:44:84:
f4:ee:b7:b8:72:b3:ec:a9:d9:61:de:f5:f9:42:ba:0e:48:91:
b4:67:54:54:f4:d0:de:07:6a:93:6b:a0:15:91:fd:93:bd:9c:
7a:78:e2:e0:01:27:99:c3:e8:3f:4f:2a:77:9f:c8:49:19:ab:
28:00:66:22:1d:0e:58:4c:df:f3:27:5e:70:42:d4:0e:15:24:
c5:7c:f5:2b:96:96:83:79:64:0e:4c:0c:0b:56:fd:06:7c:da:
95:e2:74:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:22:25 2026 by rpki-client