Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
File: Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft (raw, json)
Hash identifier: NtKth+upzVcqA4R+TenMXS18dEtrAa3v5RTK140KsQ0=
Subject key identifier: 04:56:CA:62:90:6D:C6:84:BF:B9:25:0C:26:69:49:E5:9A:2D:FC:1A
Authority key identifier: 12:17:3D:1B:3E:23:1C:57:B3:51:9E:8D:4E:54:78:68:60:6C:4F:D3
Certificate issuer: /CN=12173d1b3e231c57b3519e8d4e547868606c4fd3
Certificate serial: 019F92ED4328A17D3E03F49C264366D35F18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
Manifest number: 0615
Signing time: Fri 24 Jul 2026 07:00:50 +0000
Manifest this update: Fri 24 Jul 2026 07:00:50 +0000
Manifest next update: Sat 25 Jul 2026 07:00:50 +0000
Files and hashes: 1: Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl (hash: ZDuNrrDIDAPP2gvsBn+TQShZ229FXjbJwcsbTUQ7Pf4=)
2: kbYYTf26Qdyy8hhHFW4_RjwSQWA.roa (hash: 2qdtkJ2lC31a0rLZJKYXNaFAckA2VphgyMCHPFOQIyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:43:28:a1:7d:3e:03:f4:9c:26:43:66:d3:5f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12173d1b3e231c57b3519e8d4e547868606c4fd3
Validity
Not Before: Jul 24 07:00:50 2026 GMT
Not After : Jul 25 07:00:50 2026 GMT
Subject: CN=0456ca62906dc684bfb9250c266949e59a2dfc1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f7:3d:9d:e7:c1:21:ec:d8:aa:6d:19:f8:65:
61:73:f3:89:ec:eb:3d:6b:15:f6:9a:99:e7:77:25:
41:46:65:8e:94:6c:83:60:00:ac:83:e1:84:9c:84:
c6:a9:8c:67:e9:9f:8d:f8:41:b8:2b:6a:f2:34:14:
ac:6a:11:53:ce:34:d6:49:4f:21:b4:76:d9:59:52:
ff:80:d6:9d:44:3c:7a:4d:0f:87:79:2e:6b:d1:e4:
84:32:74:3b:83:c5:e2:b1:89:5d:b8:c8:8f:69:d5:
bb:28:0e:af:9d:a2:c5:41:7b:89:46:f6:fe:f2:1c:
34:e2:85:a7:a7:e9:e4:72:44:e2:41:58:e4:9c:2c:
7a:fb:06:cc:55:bf:2b:e1:e2:9d:09:b3:88:e5:d5:
40:ad:e1:b9:fe:ac:7b:71:28:be:54:67:7e:ae:9d:
f7:03:3a:ca:60:5f:50:a5:43:74:77:f8:48:d0:1a:
0f:72:83:e7:33:21:5d:45:9f:95:e8:fc:84:16:b5:
db:8f:bf:f5:28:1d:fe:c7:dc:ca:ac:dc:c9:d4:5f:
69:7f:e6:ff:a4:09:d9:a5:f9:db:59:c4:25:f6:07:
25:28:f4:48:f5:ac:8e:2f:a7:fe:a3:ad:f3:eb:cc:
df:f8:1f:f1:fa:42:81:7e:e1:7e:37:e0:ea:e1:f4:
bc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:56:CA:62:90:6D:C6:84:BF:B9:25:0C:26:69:49:E5:9A:2D:FC:1A
X509v3 Authority Key Identifier:
keyid:12:17:3D:1B:3E:23:1C:57:B3:51:9E:8D:4E:54:78:68:60:6C:4F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:56:d2:9e:a2:98:9e:e0:57:57:ec:3a:59:34:3a:10:a8:44:
48:2f:45:19:01:e7:90:d3:65:a1:4a:c3:3d:c5:b1:0c:8b:8e:
7d:fc:52:c0:f3:64:ec:4c:a3:cc:76:ac:79:5a:6a:24:40:3c:
2a:4e:1e:24:e1:86:b9:6f:82:b9:d1:d8:5c:de:08:f4:e3:99:
1b:74:12:11:63:43:19:87:a1:1f:4a:03:ca:2d:ea:da:95:77:
26:43:ba:18:44:38:28:13:48:10:60:dc:29:ec:ff:6e:ae:77:
07:99:09:0b:10:18:1a:74:f6:25:f2:cb:b4:bc:1a:ec:da:96:
9a:08:eb:f5:7e:5d:9c:24:03:79:b7:7c:b9:70:98:7b:d0:23:
5f:00:70:5c:be:9d:d2:eb:bb:db:06:b1:4e:6c:f5:4c:7b:e8:
ed:ff:97:b9:77:9f:e6:fd:44:c6:2e:49:3c:42:7d:9e:6a:48:
1f:69:f1:5f:b3:ac:b2:da:43:5e:1d:c1:80:c9:0c:47:6b:fa:
9c:37:f5:02:e6:63:04:bd:99:87:d2:69:22:20:43:26:d8:cc:
d6:4c:b5:a2:66:f7:c1:2d:61:41:2e:03:96:df:05:0f:b5:dc:
2d:fb:f3:83:5c:3e:92:11:f2:5a:b3:35:a2:c8:fa:af:df:72:
e2:20:ec:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:00:06 2026 by rpki-client