Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
File: EHIerWpFdWQ8twMGLAlodV6Cges.mft (raw, json)
Hash identifier: Qs8dE20BMukkGptkTwf80B0pVwB44FV+pj43PceCcBU=
Subject key identifier: E8:82:A8:4C:BC:96:A5:FA:C9:63:69:62:7A:3E:89:AF:23:86:5C:94
Authority key identifier: 10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
Certificate issuer: /CN=10721ead6a4575643cb703062c0968755e8281eb
Certificate serial: 019F9059C57C2608662C0BDC0112B97915F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
Manifest number: 123C
Signing time: Thu 23 Jul 2026 19:00:30 +0000
Manifest this update: Thu 23 Jul 2026 19:00:30 +0000
Manifest next update: Fri 24 Jul 2026 19:00:30 +0000
Files and hashes: 1: 1-rET-TrbL0N0PmSCeeqaK3f307A.roa (hash: 3mf7fKWr4vRI4ELzbIBegjtJk+mkQEPMj+4jcV/D7Z4=)
2: EHIerWpFdWQ8twMGLAlodV6Cges.crl (hash: rO/N9ou8zHfp6nTL6k8UIHSbpsKHPcC6RW4esWQ3laM=)
3: OYfq_lWnAQ_tUxH83Vafk3m1hAU.roa (hash: jPa4kfq6v0aw3m5eHQ43ps6ZzHtlfC/2MPYqiPwryT8=)
4: OklpCWAYtSxGFSO6LoyURgrDbcQ.roa (hash: 1mSZtPwrR8rsCOpqJ4xfUkwL5UPo6V6cd8N6AZWROk0=)
5: adft9gClh_5cLRsjg_tIKsse5c8.roa (hash: mOJk0iIwfTDt5ixEea0GhZ9TZ+LmcfXcF0RkG7cTHPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:c5:7c:26:08:66:2c:0b:dc:01:12:b9:79:15:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10721ead6a4575643cb703062c0968755e8281eb
Validity
Not Before: Jul 23 19:00:30 2026 GMT
Not After : Jul 24 19:00:30 2026 GMT
Subject: CN=e882a84cbc96a5fac96369627a3e89af23865c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:56:2d:1b:30:db:92:74:98:10:19:81:f8:f1:
3f:26:03:46:df:b2:f6:52:cd:72:40:a9:33:d6:b9:
48:71:5b:3c:b4:e1:4d:46:0f:3e:bb:b1:eb:6d:d3:
f2:e5:44:bb:81:81:76:30:38:c2:50:27:3c:a6:55:
c8:da:5a:7c:53:91:7b:cc:a4:97:37:93:1c:90:9e:
2d:89:4b:57:35:c5:f1:e0:73:ec:2a:f3:1b:61:98:
b3:1d:7c:0a:f1:1d:08:6f:a1:4e:fb:ef:87:79:1d:
c6:f4:e0:c3:b9:09:6d:f1:11:74:1f:52:e9:00:52:
46:c8:f5:24:98:9a:61:10:94:2b:77:f4:d7:44:c6:
35:b0:e8:89:d5:7e:e2:fd:89:43:c1:2d:0e:14:4e:
77:12:31:04:82:ab:35:ca:1c:fb:ef:ae:d3:cc:3b:
5d:f8:97:85:3a:08:31:ff:c9:be:02:a8:ea:8b:e5:
28:d2:f2:e6:70:0f:44:10:11:23:42:88:35:a3:ef:
9d:ce:8e:9a:98:18:4b:e5:ad:e3:8f:d8:4a:d7:bb:
e2:c6:1e:bc:a6:64:ce:07:01:dc:54:d9:34:2e:d5:
42:55:1e:b0:fe:8b:4e:82:f1:ab:72:98:da:32:8f:
34:7f:95:b2:d9:dc:35:4e:c4:b8:f9:06:89:92:bd:
83:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:82:A8:4C:BC:96:A5:FA:C9:63:69:62:7A:3E:89:AF:23:86:5C:94
X509v3 Authority Key Identifier:
keyid:10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:dc:d2:69:ee:ea:b5:5b:e3:6d:33:70:0d:13:1c:01:6d:09:
bf:1f:3e:93:cf:ca:2a:74:b4:c0:1a:1f:b3:db:84:f3:4a:a0:
87:39:de:07:ff:3b:3e:5d:8f:25:b7:88:bf:56:8b:10:9c:9c:
6d:7a:54:a5:56:4d:85:17:89:e8:69:13:88:0b:3c:5d:a8:80:
53:66:42:db:02:a9:ca:55:b7:53:af:3d:71:a1:e5:83:ff:91:
16:ac:1e:12:27:a3:9c:98:2f:82:30:7a:3d:24:92:a7:d0:9e:
cf:9c:b2:fb:1b:7c:20:91:82:e3:1e:22:c8:2a:9e:45:5e:46:
be:35:24:1f:3c:51:ea:7c:ce:1b:e7:93:1e:8e:df:be:56:33:
4a:fb:74:e0:83:c5:a5:24:23:4a:1d:54:1d:2c:d6:41:32:e1:
53:4c:62:0a:e7:3d:88:18:9f:39:6a:cf:75:0e:f9:ba:f3:2b:
be:b0:7d:df:13:41:7a:59:f5:4c:5f:1b:ab:02:88:b6:d6:61:
c4:89:b5:11:9e:b3:40:df:9f:a9:2f:29:af:cc:10:54:dc:a5:
29:7b:4d:e5:cc:72:0d:33:68:e8:a8:e0:30:a8:b3:bd:ae:8c:
16:e1:15:3e:66:4a:bd:e4:65:ca:71:73:58:3a:36:13:c6:ea:
91:e4:2c:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWcV8JghmLAvcARK5eRXwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzIxZWFkNmE0NTc1NjQzY2I3MDMwNjJjMDk2ODc1NWU4
MjgxZWIwHhcNMjYwNzIzMTkwMDMwWhcNMjYwNzI0MTkwMDMwWjAzMTEwLwYDVQQD
EyhlODgyYTg0Y2JjOTZhNWZhYzk2MzY5NjI3YTNlODlhZjIzODY1Yzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlYtGzDbknSYEBmB+PE/JgNG37L2
Us1yQKkz1rlIcVs8tOFNRg8+u7HrbdPy5US7gYF2MDjCUCc8plXI2lp8U5F7zKSX
N5MckJ4tiUtXNcXx4HPsKvMbYZizHXwK8R0Ib6FO+++HeR3G9ODDuQlt8RF0H1Lp
AFJGyPUkmJphEJQrd/TXRMY1sOiJ1X7i/YlDwS0OFE53EjEEgqs1yhz7767TzDtd
+JeFOggx/8m+Aqjqi+Uo0vLmcA9EEBEjQog1o++dzo6amBhL5a3jj9hK17vixh68
pmTOBwHcVNk0LtVCVR6w/otOgvGrcpjaMo80f5Wy2dw1TsS4+QaJkr2D7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOiCqEy8lqX6yWNpYno+ia8jhlyUMB8GA1UdIwQY
MBaAFBByHq1qRXVkPLcDBiwJaHVegoHrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhJZXJXcEZkV1E4dHdNR0xBbG9kVjZDZ2VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9jYTkzNWItMjQ4NC00MDIwLWI4MTQt
M2Q0YWU4MGZjNDVkLzEvRUhJZXJXcEZkV1E4dHdNR0xBbG9kVjZDZ2VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9jYTkzNWItMjQ4NC00MDIwLWI4MTQtM2Q0YWU4MGZjNDVk
LzEvRUhJZXJXcEZkV1E4dHdNR0xBbG9kVjZDZ2VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb9zSae7q
tVvjbTNwDRMcAW0Jvx8+k8/KKnS0wBofs9uE80qghzneB/87Pl2PJbeIv1aLEJyc
bXpUpVZNhReJ6GkTiAs8XaiAU2ZC2wKpylW3U689caHlg/+RFqweEiejnJgvgjB6
PSSSp9Cez5yy+xt8IJGC4x4iyCqeRV5GvjUkHzxR6nzOG+eTHo7fvlYzSvt04IPF
pSQjSh1UHSzWQTLhU0xiCuc9iBifOWrPdQ75uvMrvrB93xNBeln1TF8bqwKIttZh
xIm1EZ6zQN+fqS8pr8wQVNylKXtN5cxyDTNo6KjgMKizva6MFuEVPmZKveRlynFz
WDo2E8bqkeQsBg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:13:37 2026 by rpki-client