Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
File: EHIerWpFdWQ8twMGLAlodV6Cges.mft (raw, json)
Hash identifier: vFEjwjiXsBbBXX58g17r7ig0+VKZ5Ii6ZZ8VWluFcVw=
Subject key identifier: 92:05:7F:30:CA:8A:3F:12:A9:09:CF:ED:FF:0D:83:FB:7B:D7:26:23
Authority key identifier: 10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
Certificate issuer: /CN=10721ead6a4575643cb703062c0968755e8281eb
Certificate serial: 019D277256AA8113EBE396C2B08AD7308D01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
Manifest number: 10FB
Signing time: Thu 26 Mar 2026 00:01:37 +0000
Manifest this update: Thu 26 Mar 2026 00:01:37 +0000
Manifest next update: Fri 27 Mar 2026 00:01:37 +0000
Files and hashes: 1: 1-rET-TrbL0N0PmSCeeqaK3f307A.roa (hash: 3mf7fKWr4vRI4ELzbIBegjtJk+mkQEPMj+4jcV/D7Z4=)
2: EHIerWpFdWQ8twMGLAlodV6Cges.crl (hash: DWJl47GiNKkjzOqbpgy11f+Wuo/TFMetRhqQRx7Y6D0=)
3: Im1hsaO2oTHkZ-z1x6BH4qOQeiA.roa (hash: rtKkHZhMW9ixPsD8Afo3cijSYyrzXMxXcNv91q8fepc=)
4: OYfq_lWnAQ_tUxH83Vafk3m1hAU.roa (hash: jPa4kfq6v0aw3m5eHQ43ps6ZzHtlfC/2MPYqiPwryT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:56:aa:81:13:eb:e3:96:c2:b0:8a:d7:30:8d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10721ead6a4575643cb703062c0968755e8281eb
Validity
Not Before: Mar 26 00:01:37 2026 GMT
Not After : Mar 27 00:01:37 2026 GMT
Subject: CN=92057f30ca8a3f12a909cfedff0d83fb7bd72623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ad:a8:39:bf:0e:1c:2c:c3:a1:67:c4:03:b6:
5d:9f:6f:d3:c9:a0:f5:89:19:97:06:29:0c:ee:99:
2d:e0:05:9b:8d:39:fa:6f:e8:c2:3c:81:00:43:7d:
97:27:ee:40:8e:aa:cd:5a:a7:ad:16:b4:5c:9a:08:
b3:03:76:a8:fd:05:d4:16:37:e8:c0:dd:71:61:1a:
cd:61:34:9a:8c:8f:d4:36:e5:b3:58:8a:57:6d:71:
ed:19:cf:5a:41:a6:9f:aa:af:10:4a:0b:22:f3:2f:
7c:51:17:09:10:08:0e:ae:32:90:59:c7:ea:a7:9d:
d1:32:3e:56:a2:77:65:44:2b:31:84:9f:0d:80:7d:
f0:e0:d4:c0:86:76:f1:bd:2b:6f:bc:a4:34:8c:a4:
3a:6b:3e:ef:b6:6c:6d:55:1e:7d:0b:8a:f9:36:2e:
f1:7c:97:75:13:9e:d8:d5:bb:30:83:56:b5:2e:5d:
a8:18:86:e4:c2:8c:61:16:3f:4e:25:d8:a2:9f:fb:
e2:fe:03:20:e4:63:50:3c:6e:73:2b:b1:1f:2f:22:
79:a5:37:bc:e6:84:04:2c:0f:48:04:50:05:42:64:
27:93:94:e5:9a:80:03:09:97:b8:04:01:48:a2:c8:
9a:58:ab:ba:3f:26:0f:e8:51:88:27:f2:53:dc:f2:
5a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:05:7F:30:CA:8A:3F:12:A9:09:CF:ED:FF:0D:83:FB:7B:D7:26:23
X509v3 Authority Key Identifier:
keyid:10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:61:d1:a8:5b:13:5e:6c:3b:f8:67:f2:89:ba:62:c6:4a:80:
27:42:53:c7:57:a3:d3:be:2b:ac:1d:c2:6e:1c:86:57:9d:fa:
82:e8:49:94:64:ed:c9:ce:23:2f:2c:eb:c5:bb:62:18:04:24:
d0:96:a2:2a:6e:89:f3:7b:82:92:43:60:d8:c5:58:93:54:89:
2c:d6:fc:98:c8:50:1e:76:7f:5a:7f:29:64:3f:ad:ed:b1:f5:
30:36:c1:ec:3d:c6:42:68:fa:eb:33:67:e5:2e:97:71:39:70:
6c:20:99:32:b2:03:30:a6:2c:ba:97:1b:7e:07:be:69:8e:82:
dc:4c:9f:7a:22:83:c4:a4:da:e1:2f:f5:07:51:4c:c3:80:c4:
4f:7c:d5:1a:ce:60:2b:9e:a4:1d:4b:e6:b0:33:26:83:72:a2:
5f:85:fb:95:1c:b3:0a:66:5a:5c:61:e2:91:82:09:ee:88:7a:
57:a1:4f:6d:53:b7:ef:c5:0f:e0:05:0c:4c:84:d0:86:6b:fa:
a0:d7:65:14:68:66:51:e2:fe:7d:2e:d3:90:61:0c:b7:33:79:
32:0a:50:b7:52:67:35:f3:41:63:30:71:02:9a:83:f0:f7:3d:
97:eb:63:a9:f4:f1:74:f0:1b:b1:46:75:f3:59:20:35:f5:1b:
e0:66:60:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:48 2026 by rpki-client