Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
File: ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft (raw, json)
Hash identifier: xf3mPnkP2LhcvTdHGH41ELvuXna/IiHkdO1cSHnGNHk=
Subject key identifier: 08:34:FF:17:A3:28:2A:91:D8:F6:2C:BB:8C:D7:51:DB:EA:03:EC:6A
Authority key identifier: 7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
Certificate issuer: /CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Certificate serial: 019D2B850C871616DA3467742E939FC73B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 19:00:32 +0000
Manifest this update: Thu 26 Mar 2026 19:00:32 +0000
Manifest next update: Fri 27 Mar 2026 19:00:32 +0000
Files and hashes: 1: Bi1pDCNkHaQHAemnse3wWLypO7k.roa (hash: lAsWeGFXffMfinXBeg3+QU6P9EnW1X8Od5LyXs53FsY=)
2: ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl (hash: NGKC0yHRkgWXYYHaMAE+bGLxMYbCai73MiiShj0iG6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:0c:87:16:16:da:34:67:74:2e:93:9f:c7:3b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Validity
Not Before: Mar 26 19:00:32 2026 GMT
Not After : Mar 27 19:00:32 2026 GMT
Subject: CN=0834ff17a3282a91d8f62cbb8cd751dbea03ec6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e0:dd:26:df:0d:29:a0:34:da:71:53:c8:1e:
c4:45:8d:02:55:eb:c6:97:ef:14:83:74:aa:89:0a:
16:b1:8a:e6:ad:50:1b:73:cf:c3:b2:72:58:02:32:
41:2c:0f:1b:35:50:9f:6c:ad:a7:be:65:be:69:98:
3b:a3:08:9d:09:d1:2b:23:60:5e:b6:49:bd:e3:68:
ba:de:a0:ae:02:eb:7c:65:de:3f:bf:f0:67:8f:c6:
43:ca:08:09:a0:73:79:90:c6:70:bc:02:89:03:c6:
b2:8d:e7:19:fe:82:c7:d3:a6:4a:53:8a:bd:f5:e9:
c6:4f:7b:8a:3a:34:88:5b:29:fe:0d:2f:89:56:ff:
b7:62:e3:f8:8e:2a:71:cd:d5:be:68:a7:5a:a0:47:
74:83:b9:76:a0:45:81:01:6b:83:a7:ab:27:6e:26:
c9:0b:a2:f6:34:18:07:21:e6:d6:9a:7e:b7:fe:1c:
1f:83:65:9d:41:b3:04:e8:b2:80:79:4b:90:f9:cc:
8f:0d:13:af:11:91:d0:36:31:1f:ee:7d:4d:7c:f5:
fd:68:b2:44:d7:e4:16:f4:4c:71:99:55:b5:73:ea:
fb:f5:df:90:29:88:8a:b1:72:15:a9:52:cc:8a:2c:
be:06:36:42:00:8f:54:65:be:c3:93:6b:6f:f5:01:
cf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:34:FF:17:A3:28:2A:91:D8:F6:2C:BB:8C:D7:51:DB:EA:03:EC:6A
X509v3 Authority Key Identifier:
keyid:7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:de:3a:61:6b:2c:0a:fc:96:82:9c:40:bb:2c:4f:70:0b:31:
50:8d:4b:ab:fb:1c:15:42:50:4c:2b:14:1e:b4:04:f8:86:e7:
35:0e:dc:ed:b0:3a:91:13:0d:66:1e:c3:4f:b5:39:81:b0:ec:
86:56:94:2d:6b:da:55:e9:9e:c0:5e:c1:ce:ae:3a:60:e4:fc:
c1:3e:85:62:a6:1b:79:f5:07:05:bb:3d:a3:99:38:cd:63:33:
77:18:e4:2a:ef:50:97:73:05:71:e2:19:e7:1a:d3:03:db:21:
63:84:f8:69:c1:90:42:cf:17:db:c6:d4:e3:3e:0c:59:ff:64:
3d:71:9c:82:ae:71:ca:71:dc:d2:82:38:0f:de:39:d6:95:ab:
81:17:68:e1:d1:fb:6b:cc:d1:ff:31:06:f8:fa:65:c9:12:96:
8d:f5:5f:26:9f:60:35:df:ba:6b:06:92:74:26:73:0b:94:f4:
0d:dc:72:0a:6a:fa:b2:5b:db:5e:a7:08:1e:d1:3d:28:72:72:
28:a6:fa:14:ce:de:e3:30:c6:ee:71:a8:9a:a0:f0:db:a3:7b:
20:81:68:06:4f:73:a6:51:85:6e:e8:33:ba:e7:bb:7a:33:34:
0c:e8:8b:6d:88:52:24:a5:c0:30:07:f3:4f:e3:cc:af:6e:2c:
0e:0f:d4:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rhQyHFhbaNGd0LpOfxzueMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMThmY2FhYzZjODQwOWYyNGQzZmE5MGRmOGUzMDIxOGVl
OWMzZmYwHhcNMjYwMzI2MTkwMDMyWhcNMjYwMzI3MTkwMDMyWjAzMTEwLwYDVQQD
EygwODM0ZmYxN2EzMjgyYTkxZDhmNjJjYmI4Y2Q3NTFkYmVhMDNlYzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+DdJt8NKaA02nFTyB7ERY0CVevG
l+8Ug3SqiQoWsYrmrVAbc8/DsnJYAjJBLA8bNVCfbK2nvmW+aZg7owidCdErI2Be
tkm942i63qCuAut8Zd4/v/Bnj8ZDyggJoHN5kMZwvAKJA8ayjecZ/oLH06ZKU4q9
9enGT3uKOjSIWyn+DS+JVv+3YuP4jipxzdW+aKdaoEd0g7l2oEWBAWuDp6snbibJ
C6L2NBgHIebWmn63/hwfg2WdQbME6LKAeUuQ+cyPDROvEZHQNjEf7n1NfPX9aLJE
1+QW9ExxmVW1c+r79d+QKYiKsXIVqVLMiiy+BjZCAI9UZb7Dk2tv9QHPOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAg0/xejKCqR2PYsu4zXUdvqA+xqMB8GA1UdIwQY
MBaAFHoY/KrGyECfJNP6kN+OMCGO6cP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWhqOHFzYklRSjhrMF9xUTM0NHdJWTdwd184LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC81OGE4NmMtYjg4Mi00MmZmLWI3NDMt
YzQxYjhhYTJkZjk1LzEvZWhqOHFzYklRSjhrMF9xUTM0NHdJWTdwd184Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC81OGE4NmMtYjg4Mi00MmZmLWI3NDMtYzQxYjhhYTJkZjk1
LzEvZWhqOHFzYklRSjhrMF9xUTM0NHdJWTdwd184LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGd46YWss
CvyWgpxAuyxPcAsxUI1Lq/scFUJQTCsUHrQE+IbnNQ7c7bA6kRMNZh7DT7U5gbDs
hlaULWvaVemewF7Bzq46YOT8wT6FYqYbefUHBbs9o5k4zWMzdxjkKu9Ql3MFceIZ
5xrTA9shY4T4acGQQs8X28bU4z4MWf9kPXGcgq5xynHc0oI4D9451pWrgRdo4dH7
a8zR/zEG+PplyRKWjfVfJp9gNd+6awaSdCZzC5T0DdxyCmr6slvbXqcIHtE9KHJy
KKb6FM7e4zDG7nGomqDw26N7IIFoBk9zplGFbugzuue7ejM0DOiLbYhSJKXAMAfz
T+PMr24sDg/UrA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:03:37 2026 by rpki-client