Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
File: ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft (raw, json)
Hash identifier: KfhSVDNThS1U3UQKSRkhsnFeumfqAjKg8OuaOUU5Zsk=
Subject key identifier: B2:88:F2:D3:C0:54:F5:04:A9:30:F4:E8:90:5E:D9:BC:7B:D8:F3:33
Authority key identifier: 7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
Certificate issuer: /CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Certificate serial: 019F9392177A35EC0E71F123B20C5C57852A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 10:00:52 +0000
Manifest this update: Fri 24 Jul 2026 10:00:52 +0000
Manifest next update: Sat 25 Jul 2026 10:00:52 +0000
Files and hashes: 1: Bi1pDCNkHaQHAemnse3wWLypO7k.roa (hash: lAsWeGFXffMfinXBeg3+QU6P9EnW1X8Od5LyXs53FsY=)
2: ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl (hash: ODWl1NEQO7lPE8azT2GKz5YANOvurORjzNMDBXQKlC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:17:7a:35:ec:0e:71:f1:23:b2:0c:5c:57:85:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Validity
Not Before: Jul 24 10:00:52 2026 GMT
Not After : Jul 25 10:00:52 2026 GMT
Subject: CN=b288f2d3c054f504a930f4e8905ed9bc7bd8f333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0a:de:04:a1:fa:74:e9:11:b4:f5:c6:06:3e:
d4:2e:87:b2:70:e2:d2:38:bb:49:a7:57:6e:1e:fe:
52:c1:a2:90:64:62:a8:e8:24:bb:8b:0d:2c:6c:6a:
87:c1:89:9f:41:06:b8:6f:95:a7:a8:25:02:9d:0b:
bd:d3:58:63:59:bc:3c:13:d3:75:15:cd:03:a7:31:
48:7e:bd:40:d7:17:81:df:ee:58:b9:e8:5a:a1:85:
cb:77:5b:c0:63:6d:4f:7a:58:67:33:c6:0b:39:9f:
16:d2:fa:aa:b2:4e:a4:5d:11:07:48:5b:32:4e:04:
13:00:ac:44:7f:65:c3:6b:fd:de:bc:2b:c2:27:71:
fd:51:10:8c:c4:cf:67:f3:86:3f:de:77:4c:95:32:
5a:a6:79:f8:d1:8d:a8:fd:64:94:79:bb:e6:91:d6:
6d:97:78:98:0d:b9:70:0c:80:81:c0:84:82:e9:fe:
7c:a3:3a:34:ca:3e:12:e2:83:52:b1:86:51:94:c3:
69:3c:7d:54:14:f4:14:c8:f3:5b:36:66:a6:7e:ee:
15:c5:b7:5c:1a:95:a7:43:af:37:f0:29:5f:cc:a5:
87:00:3d:ed:7c:a1:30:b5:a4:d1:76:f2:49:c3:51:
ea:8c:ff:86:ad:a3:5e:36:12:57:e5:d0:85:f2:d2:
60:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:88:F2:D3:C0:54:F5:04:A9:30:F4:E8:90:5E:D9:BC:7B:D8:F3:33
X509v3 Authority Key Identifier:
keyid:7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:65:d8:fb:c0:59:e5:47:f7:e6:68:d2:d1:99:24:28:ed:29:
b0:99:3d:71:c6:ff:cc:37:be:45:25:5c:ec:de:38:e9:eb:59:
ae:b5:6d:5e:ab:4b:36:66:13:ab:f4:6a:05:82:af:5b:87:d1:
40:16:34:7c:92:62:a8:bd:b1:26:bc:7c:04:3d:05:52:eb:b1:
a0:aa:d0:1b:10:3f:b3:0c:e1:da:2f:92:23:8c:48:15:55:5b:
41:9a:3a:6d:c6:d4:45:f8:66:aa:0e:98:44:83:a7:d4:da:19:
57:66:5e:09:90:93:d8:e8:b6:eb:ff:83:87:84:d7:df:be:50:
71:bc:03:1f:36:c6:96:67:0f:d4:8e:8e:67:5b:cf:35:33:dd:
4e:bc:97:2e:6e:84:db:61:8c:e4:8d:b1:7f:5a:fc:42:c0:c2:
c0:cc:a4:e1:37:3b:a1:d9:47:28:1f:66:51:e6:0e:81:46:f1:
3d:b8:53:24:3f:17:63:16:a8:c0:fa:c6:77:55:f0:c0:00:a1:
02:8a:61:b3:e7:31:5a:8a:74:76:7d:f0:24:2a:3e:4f:48:bb:
55:f6:75:6e:a9:d8:52:ad:66:e6:c1:2e:b9:eb:55:ea:19:5a:
9b:5b:0c:02:73:ff:4a:c2:aa:2f:28:4c:99:58:f1:7a:31:ad:
91:20:47:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Tkhd6NewOcfEjsgxcV4UqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMThmY2FhYzZjODQwOWYyNGQzZmE5MGRmOGUzMDIxOGVl
OWMzZmYwHhcNMjYwNzI0MTAwMDUyWhcNMjYwNzI1MTAwMDUyWjAzMTEwLwYDVQQD
EyhiMjg4ZjJkM2MwNTRmNTA0YTkzMGY0ZTg5MDVlZDliYzdiZDhmMzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQreBKH6dOkRtPXGBj7ULoeycOLS
OLtJp1duHv5SwaKQZGKo6CS7iw0sbGqHwYmfQQa4b5WnqCUCnQu901hjWbw8E9N1
Fc0DpzFIfr1A1xeB3+5YuehaoYXLd1vAY21PelhnM8YLOZ8W0vqqsk6kXREHSFsy
TgQTAKxEf2XDa/3evCvCJ3H9URCMxM9n84Y/3ndMlTJapnn40Y2o/WSUebvmkdZt
l3iYDblwDICBwISC6f58ozo0yj4S4oNSsYZRlMNpPH1UFPQUyPNbNmamfu4Vxbdc
GpWnQ6838ClfzKWHAD3tfKEwtaTRdvJJw1HqjP+GraNeNhJX5dCF8tJg9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKI8tPAVPUEqTD06JBe2bx72PMzMB8GA1UdIwQY
MBaAFHoY/KrGyECfJNP6kN+OMCGO6cP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWhqOHFzYklRSjhrMF9xUTM0NHdJWTdwd184LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC81OGE4NmMtYjg4Mi00MmZmLWI3NDMt
YzQxYjhhYTJkZjk1LzEvZWhqOHFzYklRSjhrMF9xUTM0NHdJWTdwd184Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC81OGE4NmMtYjg4Mi00MmZmLWI3NDMtYzQxYjhhYTJkZjk1
LzEvZWhqOHFzYklRSjhrMF9xUTM0NHdJWTdwd184LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo2XY+8BZ
5Uf35mjS0ZkkKO0psJk9ccb/zDe+RSVc7N446etZrrVtXqtLNmYTq/RqBYKvW4fR
QBY0fJJiqL2xJrx8BD0FUuuxoKrQGxA/swzh2i+SI4xIFVVbQZo6bcbURfhmqg6Y
RIOn1NoZV2ZeCZCT2Oi26/+Dh4TX375QcbwDHzbGlmcP1I6OZ1vPNTPdTryXLm6E
22GM5I2xf1r8QsDCwMyk4Tc7odlHKB9mUeYOgUbxPbhTJD8XYxaowPrGd1XwwACh
Aophs+cxWop0dn3wJCo+T0i7VfZ1bqnYUq1m5sEuuetV6hlam1sMAnP/SsKqLyhM
mVjxejGtkSBHzg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:31:55 2026 by rpki-client