Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
File: Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft (raw, json)
Hash identifier: j6up3IV5ng6Dh2Kkyj7vJTC4pSOkmB6h6Xs2M9zJSfI=
Subject key identifier: 2D:7B:F9:08:78:0F:28:53:C0:E0:89:C1:E6:4C:D9:2E:2F:A0:D7:79
Authority key identifier: 12:17:3D:1B:3E:23:1C:57:B3:51:9E:8D:4E:54:78:68:60:6C:4F:D3
Certificate issuer: /CN=12173d1b3e231c57b3519e8d4e547868606c4fd3
Certificate serial: 019E2023379AFD9EE97DF48C72201D9D7CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
Manifest number: 0555
Signing time: Wed 13 May 2026 07:00:39 +0000
Manifest this update: Wed 13 May 2026 07:00:39 +0000
Manifest next update: Thu 14 May 2026 07:00:39 +0000
Files and hashes: 1: Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl (hash: FTix3iFUyPTBTStwBI+deiNL2Pib61dPXN/h00vGpss=)
2: kbYYTf26Qdyy8hhHFW4_RjwSQWA.roa (hash: 2qdtkJ2lC31a0rLZJKYXNaFAckA2VphgyMCHPFOQIyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:37:9a:fd:9e:e9:7d:f4:8c:72:20:1d:9d:7c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12173d1b3e231c57b3519e8d4e547868606c4fd3
Validity
Not Before: May 13 07:00:39 2026 GMT
Not After : May 14 07:00:39 2026 GMT
Subject: CN=2d7bf908780f2853c0e089c1e64cd92e2fa0d779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:53:b9:70:04:ee:b7:2b:6c:57:b0:87:99:8e:
de:66:bd:7b:ca:75:c1:ad:dd:31:c9:a4:71:e6:4a:
4f:74:62:96:db:ee:a3:f7:66:14:78:4e:f7:44:bd:
fb:b1:b1:f8:af:ee:45:7d:e6:f7:9a:20:25:44:2c:
42:eb:62:44:f8:76:41:59:d3:9a:9e:f1:3c:01:66:
6f:b8:ae:df:d7:42:df:ba:e4:df:5b:72:83:54:1d:
3d:94:f9:f3:81:9f:53:54:30:07:f1:8c:93:58:80:
fc:f2:1d:15:76:10:a4:b1:b6:e0:21:5e:16:49:18:
d4:36:a4:ad:e6:10:c1:3a:0f:d5:3d:1e:6f:39:3a:
e5:e3:39:08:d6:64:28:76:41:93:14:5a:6b:49:44:
7e:43:34:ee:d2:ee:71:75:4e:f3:73:ee:3c:32:ce:
56:80:9e:d9:cd:66:f1:5a:78:bb:00:82:50:a7:75:
4a:8e:6d:5a:5d:86:ec:a7:ec:9a:1d:7f:30:07:7e:
68:da:46:d2:cd:bb:6e:96:1c:c0:7c:95:03:f6:b3:
86:40:c9:43:b8:34:70:1a:94:0f:4d:9e:cf:6b:5d:
47:f5:fd:1a:01:9d:9f:8a:ae:cf:11:ff:63:30:e6:
3e:d3:90:c9:e6:1d:8a:84:96:ec:6f:53:fd:ac:a9:
20:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7B:F9:08:78:0F:28:53:C0:E0:89:C1:E6:4C:D9:2E:2F:A0:D7:79
X509v3 Authority Key Identifier:
keyid:12:17:3D:1B:3E:23:1C:57:B3:51:9E:8D:4E:54:78:68:60:6C:4F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:11:a5:eb:93:e8:b1:47:47:b9:ff:08:83:f0:e1:c1:da:95:
23:85:42:1b:d4:24:c9:ba:03:90:8d:d0:bc:2e:4d:8b:ba:55:
e3:8e:79:84:ac:56:ca:a5:be:bf:3e:61:5d:3d:ae:1e:b9:da:
95:4c:08:99:0c:d2:d2:03:51:9d:4b:51:95:1e:de:93:f2:48:
7f:c5:98:56:06:ea:44:2e:6b:00:3e:58:ee:26:cb:95:64:1a:
a3:a3:e3:27:d3:43:83:c2:17:8f:07:ec:be:1a:77:e6:c6:c9:
46:91:cc:63:9b:57:95:50:b1:d9:ad:be:07:1f:97:00:48:54:
73:78:d2:8a:60:e8:99:32:81:f5:10:db:a7:d0:de:a0:71:09:
1a:6f:73:9e:ec:f5:b5:0f:04:26:69:9c:01:a0:80:93:34:33:
4d:e3:00:35:db:11:64:76:ee:29:c5:d1:9c:88:38:15:85:a3:
f1:65:a8:32:36:8f:5d:71:59:53:65:b3:70:b4:c6:f1:9d:e6:
bf:f7:39:84:80:a3:83:13:b6:1f:9f:5a:c1:08:f5:af:44:73:
7a:ab:26:6d:e2:14:7a:03:b3:63:37:20:c4:77:78:fb:64:07:
46:6f:16:eb:40:58:db:67:e8:00:01:be:70:77:2b:3f:47:b4:
70:d1:57:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:20:56 2026 by rpki-client