Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
File: eIehaWWHX29TvMMfDkk6lhVOt7k.mft (raw, json)
Hash identifier: gt7jqlDz5UOhhNvwld6IS/OiIHu3IUc5RmWnKsIKeJw=
Subject key identifier: A4:60:22:CC:1B:18:BE:42:09:D4:AD:DB:ED:8F:6C:58:84:AB:B9:C9
Authority key identifier: 78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
Certificate issuer: /CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Certificate serial: 019E1D23212AA0D3B317CF1285B3219AAD24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
Manifest number: 1624
Signing time: Tue 12 May 2026 17:01:41 +0000
Manifest this update: Tue 12 May 2026 17:01:41 +0000
Manifest next update: Wed 13 May 2026 17:01:41 +0000
Files and hashes: 1: MJofjdkMEmgx2BydUOl_6hfgSP0.roa (hash: SYQp19hNRf4PycQPpMlkNy2V7oY/RHobHYkQy5EY5Uk=)
2: e3rUNCM0Xf2LeGKAo_m6z686FVs.roa (hash: /zRO4TdqdR87Zu84kUd28IeKppEjdoIpNzsSQ/9y0kI=)
3: eIehaWWHX29TvMMfDkk6lhVOt7k.crl (hash: m/eq0ysP23AqLP8034UN2qqFf/oR3zsysUhO7N1d18o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:21:2a:a0:d3:b3:17:cf:12:85:b3:21:9a:ad:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Validity
Not Before: May 12 17:01:41 2026 GMT
Not After : May 13 17:01:41 2026 GMT
Subject: CN=a46022cc1b18be4209d4addbed8f6c5884abb9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c9:e9:90:05:14:09:8d:e6:3b:ba:f2:13:05:
15:0a:a5:79:01:89:a6:b9:d1:8b:f2:b9:7a:f6:88:
07:f2:45:0e:4f:b9:5a:8d:32:f3:0a:c0:86:ff:9b:
da:a8:db:04:f6:2c:b8:8d:6f:ff:69:10:ff:1d:ea:
87:9a:80:06:9e:24:0d:af:a8:0d:6e:23:62:ed:03:
79:69:45:d0:63:46:50:e6:b3:9f:76:81:b5:8d:27:
e9:05:29:c5:a5:8e:0e:36:d9:c2:3f:18:0e:f1:5e:
1d:98:c8:c2:ea:eb:83:49:8b:c3:56:92:93:f6:70:
9c:93:6f:78:54:3d:8a:39:ad:17:80:4c:5d:b6:23:
dd:cd:00:bd:28:38:ba:2c:cb:8f:96:de:3b:95:c2:
65:c2:b7:96:7a:1e:20:89:6e:85:13:72:01:5b:a8:
84:94:7c:9f:0e:ca:9e:e3:0c:1b:56:3f:c2:b7:aa:
d4:cf:41:c7:e1:ba:c1:8d:74:52:38:bb:e7:74:fd:
b5:80:00:21:66:1d:d5:e8:00:02:c9:9e:6b:7d:4c:
8d:5d:ce:bc:37:bd:25:75:13:ef:ad:ee:ae:75:7b:
0b:87:ca:25:10:fe:be:45:e3:ce:0f:bd:d7:5c:68:
32:59:f2:4d:54:05:94:7a:5d:b2:3e:cc:63:c3:a8:
04:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:60:22:CC:1B:18:BE:42:09:D4:AD:DB:ED:8F:6C:58:84:AB:B9:C9
X509v3 Authority Key Identifier:
keyid:78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:41:66:08:f5:2c:cf:e5:b9:40:d8:b6:22:b3:ce:70:11:e2:
70:cd:d2:1c:74:65:a0:7f:fa:7c:3a:82:3e:6e:ae:92:af:d5:
c8:cc:1f:ac:99:41:93:cc:73:b2:df:e1:08:50:ea:aa:6b:d1:
29:07:b6:be:6d:78:66:f7:9c:73:81:67:e6:d8:6d:4c:4c:74:
7b:c8:80:24:a0:2d:b5:08:c1:a2:52:ec:b1:9a:07:a0:4e:87:
25:e0:8d:76:56:93:97:a8:e4:2d:f5:bc:da:4b:0e:64:b4:32:
42:a0:08:0b:28:59:3c:3d:88:37:5d:0f:bd:08:16:b8:e4:b6:
8d:e2:f1:ec:e7:83:ac:4f:cd:72:76:a7:e3:33:d8:7d:75:5d:
5e:cc:92:21:11:0c:66:15:e1:91:13:06:8f:90:b1:6d:9e:95:
6e:03:ac:e0:47:e5:5d:f8:fb:3e:a7:e9:9a:3c:55:98:89:cc:
2c:66:32:9b:be:62:8b:74:ab:a8:c9:e1:7f:82:fb:7e:26:49:
57:2e:85:50:4b:cf:91:b1:d7:4f:23:15:9e:ca:c4:cf:cf:0e:
91:78:f4:5c:af:98:76:10:39:bc:e5:cf:99:0f:73:38:0f:21:
20:35:2c:d2:e7:e2:b6:14:dd:10:5d:2e:cb:b2:ae:47:67:11:
23:52:78:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:12:38 2026 by rpki-client