Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
File: EharzETJqVVAzfWx3FQux9Ef4Ho.mft (raw, json)
Hash identifier: 8Nw2f9QvXlW+vWlYz32t0fxPbCwmFaGTVFu+fFJgszY=
Subject key identifier: 09:F8:2A:31:83:DE:A7:EA:48:FE:F6:70:36:53:AB:32:2E:16:12:D6
Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
Certificate issuer: /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Certificate serial: 01A0D26E842E2B4F94829C0EB16A78901A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
Manifest number: 0589
Signing time: Thu 24 Sep 2026 08:00:53 +0000
Manifest this update: Thu 24 Sep 2026 08:00:53 +0000
Manifest next update: Fri 25 Sep 2026 08:00:53 +0000
Files and hashes: 1: 9V3S7FKC66AOlqD78_S81truyog.roa (hash: zjtnM6n3Uet2Hry92cMihIwePJR9odotoqz4FTgtQpQ=)
2: EharzETJqVVAzfWx3FQux9Ef4Ho.crl (hash: 5jqygLmiMiqpnrXIjKFPw39sSIHSHVzaBUHfpeT9R5E=)
3: Q89cC5EdEYVsTAR7wEMR5rmM-FA.roa (hash: IpAEUAQrDRw1Avy4gtoYvc+jdCy+th+rhrs9OezDlo8=)
4: R6vEKMp8XV0nRsp07cf4y7I04qo.roa (hash: nWBD/KxL+ZqMUbvdWaWo1r7/2jynLrCSHLN52H6UCwM=)
5: XGUIHnWF_LunuxvNcMmR57_WKzo.roa (hash: Gg+yICFewOrJllU9keGQjZ8+O9tNzguLLKLqMVLJpjs=)
6: b1NnfX82WWUKnDzO-T_p9BDnjPM.roa (hash: uuhxZnIOVP3yGkI2POwoZpysQSXnT6B0qJNkc7bJXFw=)
7: dkbWWj1fcNuoxRuY36otGw7y-4o.roa (hash: eWnON+KoPCnW1mOHfIOhfYni2hFCmr45cz2OH330WCY=)
8: fYJN56gNpyjk6FeN9g2u8kda_Ck.roa (hash: 0Bz6iRQD5arZ6ysTUfpQvVjP86yHCsoWY8uCR19q2k4=)
9: iTrKyBgs_fihjw2gMNeMi35dTSA.roa (hash: zNTMLDdPTDqmLO0jhMMrsQBD6z1cOUxn49L1ph7eXpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:84:2e:2b:4f:94:82:9c:0e:b1:6a:78:90:1a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Validity
Not Before: Sep 24 08:00:53 2026 GMT
Not After : Sep 25 08:00:53 2026 GMT
Subject: CN=09f82a3183dea7ea48fef6703653ab322e1612d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:41:13:c5:57:68:3d:38:2b:5b:a9:c7:d3:26:
fa:36:27:d3:19:91:86:f8:88:3c:5c:6b:9e:24:79:
1d:8a:83:a3:75:65:60:b7:8a:ec:2e:b2:24:32:a8:
d3:cb:f8:ae:6e:82:76:65:5b:0e:5e:fa:8f:b4:6d:
4c:31:a6:82:21:27:45:41:cc:ee:83:62:7b:46:c0:
7e:f1:18:da:43:eb:e7:2a:47:6e:4f:d5:07:95:15:
1b:d4:e2:0e:80:b8:7b:fb:0a:9f:a7:1a:c6:59:3f:
3e:ee:64:e1:72:1d:00:22:27:8d:3c:94:78:18:89:
c1:c0:51:3b:9d:b8:89:c7:a5:a4:ed:01:16:e1:a9:
e2:e9:71:6c:5d:9d:8c:f5:f7:73:5d:c1:6c:48:b8:
cd:80:31:bd:97:ea:8d:90:05:8e:8e:cf:3d:93:bc:
2a:d6:13:a3:2a:3e:a1:52:d2:f9:99:4e:57:4f:d0:
9a:dc:f5:97:97:e9:13:b4:b4:f9:71:9e:e0:d9:c0:
b3:21:1e:54:18:3c:58:fe:b6:a9:28:6f:dc:ac:22:
d7:e4:4d:bd:6f:7e:78:74:79:1e:42:57:ab:69:7a:
12:90:e9:60:a9:70:36:a2:3e:97:be:08:25:ca:0c:
4c:60:64:c0:c8:ad:07:41:c7:e4:98:63:0b:ef:d5:
ca:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F8:2A:31:83:DE:A7:EA:48:FE:F6:70:36:53:AB:32:2E:16:12:D6
X509v3 Authority Key Identifier:
keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:7c:47:d8:eb:75:f9:9d:af:b0:1c:a7:7d:e6:5c:94:f0:57:
fd:1c:64:b4:77:37:09:98:a6:c2:e4:46:37:25:1f:45:0b:d8:
6d:d8:24:dc:18:f1:a1:06:0a:63:3c:f9:6d:32:e4:fe:1f:ab:
2b:c9:42:45:2b:bb:76:8f:ab:78:71:7b:31:6f:69:da:89:a4:
2a:5f:32:69:52:88:e1:75:4a:81:fd:9d:87:70:1e:ee:87:94:
b5:aa:8f:de:eb:fa:6a:2c:42:7b:03:1f:1c:0c:f7:9a:71:40:
06:29:fe:43:74:dd:24:cd:0d:32:b4:3b:2b:50:dc:53:78:1c:
8e:e3:87:33:ae:56:a7:6c:77:98:82:0c:8f:98:0d:b8:e9:42:
3d:fc:74:d2:9e:10:6c:19:8e:2b:0a:b4:48:aa:6a:ff:7d:a1:
2d:f1:77:86:00:b3:11:60:99:67:3f:ae:e5:36:4d:1a:92:d5:
f0:a8:92:72:82:2c:9a:67:e2:9e:e0:04:25:77:53:17:7f:3d:
83:7d:47:c0:f0:ba:0f:b8:8a:83:2a:1c:27:66:47:29:e5:de:
3b:93:a9:44:95:7f:68:83:88:27:73:88:12:7b:43:ba:a2:f9:
23:89:e1:0a:91:b1:cb:37:db:15:24:61:08:6f:09:48:61:37:
1b:f1:19:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:25:58 2026 by rpki-client