Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
File: EHIerWpFdWQ8twMGLAlodV6Cges.mft (raw, json)
Hash identifier: rSPUVm4Vil7YAmv0+1K3SHOAfa1J8efV5SSGj4VaiJk=
Subject key identifier: 4A:C4:BD:6B:C8:C8:8F:41:13:22:F0:38:AA:9A:3D:51:D9:D2:D2:12
Authority key identifier: 10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
Certificate issuer: /CN=10721ead6a4575643cb703062c0968755e8281eb
Certificate serial: 01A0D0EDC038762D015D71A40AC9205FBAA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
Manifest number: 12E2
Signing time: Thu 24 Sep 2026 01:00:37 +0000
Manifest this update: Thu 24 Sep 2026 01:00:37 +0000
Manifest next update: Fri 25 Sep 2026 01:00:37 +0000
Files and hashes: 1: 1-rET-TrbL0N0PmSCeeqaK3f307A.roa (hash: 3mf7fKWr4vRI4ELzbIBegjtJk+mkQEPMj+4jcV/D7Z4=)
2: EHIerWpFdWQ8twMGLAlodV6Cges.crl (hash: SUyDpLhZ+H50M4PlBrwXFkZkV3aZ4tNKHKZLtL3l9vE=)
3: OYfq_lWnAQ_tUxH83Vafk3m1hAU.roa (hash: jPa4kfq6v0aw3m5eHQ43ps6ZzHtlfC/2MPYqiPwryT8=)
4: OklpCWAYtSxGFSO6LoyURgrDbcQ.roa (hash: 1mSZtPwrR8rsCOpqJ4xfUkwL5UPo6V6cd8N6AZWROk0=)
5: adft9gClh_5cLRsjg_tIKsse5c8.roa (hash: mOJk0iIwfTDt5ixEea0GhZ9TZ+LmcfXcF0RkG7cTHPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:c0:38:76:2d:01:5d:71:a4:0a:c9:20:5f:ba:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10721ead6a4575643cb703062c0968755e8281eb
Validity
Not Before: Sep 24 01:00:37 2026 GMT
Not After : Sep 25 01:00:37 2026 GMT
Subject: CN=4ac4bd6bc8c88f411322f038aa9a3d51d9d2d212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:63:ad:ec:d0:f3:86:94:1f:f1:a9:a3:01:c3:
43:db:7d:97:b2:7e:66:d0:1b:66:da:6a:b5:8e:d0:
8f:89:ab:26:46:fa:1b:42:78:a1:7d:64:22:84:30:
02:8e:70:c8:3b:7a:28:81:73:db:6b:a8:55:ab:a4:
6c:2a:18:a4:3f:54:33:57:40:08:a7:dd:ed:55:23:
91:9c:ef:a9:cd:17:52:48:db:d3:d1:18:bc:46:86:
71:ab:a6:81:d6:38:ad:ec:43:fd:d1:64:17:29:ea:
15:45:4b:9e:88:92:f5:39:b1:66:2c:7a:f3:a0:a3:
81:d5:a6:fb:df:51:b8:24:40:e8:7b:8a:b1:8c:71:
64:b6:d5:70:5b:a6:48:a9:b6:ca:33:c2:8f:74:d9:
6a:28:3f:d0:e9:1b:24:6c:05:9c:bc:e1:14:6b:23:
8f:72:9d:4e:89:fd:a3:8d:cd:df:ee:99:31:73:d6:
02:80:dd:7e:08:88:e0:d5:be:0d:27:e6:f1:cf:00:
77:ec:57:49:45:74:4e:3f:17:36:7c:06:e3:23:16:
60:05:6c:54:2f:89:7d:09:4c:7a:6d:68:99:bd:ae:
21:63:45:59:c0:69:25:20:3f:94:11:12:c4:65:77:
04:cb:8c:94:25:45:9c:50:3f:4f:be:a8:6b:cd:15:
fc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C4:BD:6B:C8:C8:8F:41:13:22:F0:38:AA:9A:3D:51:D9:D2:D2:12
X509v3 Authority Key Identifier:
keyid:10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:57:9f:5a:03:cf:8f:6b:55:e8:a8:5f:c2:a7:11:42:38:e8:
18:0d:e9:06:54:e0:06:8e:40:04:57:47:47:16:45:f1:8e:bd:
78:88:ea:6e:a2:a5:45:19:c7:67:66:b6:56:01:9f:15:97:76:
c0:f3:ba:8a:a5:dd:14:55:6f:06:5a:78:e5:1a:b7:0d:b1:e1:
06:5a:59:81:7e:db:bc:ab:cb:1a:66:c2:d3:98:b7:92:bf:de:
45:cc:dc:d5:68:3b:11:ca:a2:af:1f:96:5e:bd:e4:c3:58:09:
8c:f9:b5:63:2d:d7:75:c8:fe:9f:e9:4e:08:ea:be:19:78:fe:
4a:81:69:db:95:ec:e4:29:e2:3a:20:ed:12:ea:ac:4c:fa:56:
72:a3:6c:f6:5c:4d:98:c3:03:b7:c2:26:cb:d0:df:56:4c:56:
88:47:b3:80:73:13:aa:06:ff:64:f7:c9:91:9c:27:76:26:e9:
52:8e:ca:e0:8e:82:64:64:d2:d2:1c:27:cd:b1:95:65:a6:f7:
13:13:f7:46:8e:dd:06:cc:6a:f5:52:ee:29:25:84:52:c2:2e:
d7:c9:2a:77:fd:4c:0e:60:e8:45:df:39:28:d2:3c:00:b1:66:
b4:96:4c:63:af:87:19:c5:04:9f:b6:9e:7f:0b:44:e0:b4:93:
50:54:8a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:10:03 2026 by rpki-client