Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
File: EHIerWpFdWQ8twMGLAlodV6Cges.mft (raw, json)
Hash identifier: JSjm6RDuzjDp85aMM0oatEspM24lUkwtDSTl/nhFoJM=
Subject key identifier: D4:FF:E1:FD:2A:6A:9C:98:B1:F2:3F:07:48:5D:0E:65:00:A6:07:CD
Authority key identifier: 10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
Certificate issuer: /CN=10721ead6a4575643cb703062c0968755e8281eb
Certificate serial: 019E1D900FAEAA2E6F409CC05027E6400243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
Manifest number: 117C
Signing time: Tue 12 May 2026 19:00:40 +0000
Manifest this update: Tue 12 May 2026 19:00:40 +0000
Manifest next update: Wed 13 May 2026 19:00:40 +0000
Files and hashes: 1: 1-rET-TrbL0N0PmSCeeqaK3f307A.roa (hash: 3mf7fKWr4vRI4ELzbIBegjtJk+mkQEPMj+4jcV/D7Z4=)
2: EHIerWpFdWQ8twMGLAlodV6Cges.crl (hash: jXRBXJmszYzxsXEkLY7qoJuoaCnXNUYWaeum/k2NCsw=)
3: OYfq_lWnAQ_tUxH83Vafk3m1hAU.roa (hash: jPa4kfq6v0aw3m5eHQ43ps6ZzHtlfC/2MPYqiPwryT8=)
4: OklpCWAYtSxGFSO6LoyURgrDbcQ.roa (hash: 1mSZtPwrR8rsCOpqJ4xfUkwL5UPo6V6cd8N6AZWROk0=)
5: adft9gClh_5cLRsjg_tIKsse5c8.roa (hash: mOJk0iIwfTDt5ixEea0GhZ9TZ+LmcfXcF0RkG7cTHPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:0f:ae:aa:2e:6f:40:9c:c0:50:27:e6:40:02:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10721ead6a4575643cb703062c0968755e8281eb
Validity
Not Before: May 12 19:00:40 2026 GMT
Not After : May 13 19:00:40 2026 GMT
Subject: CN=d4ffe1fd2a6a9c98b1f23f07485d0e6500a607cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:50:fd:0a:3d:32:5d:df:50:77:b5:63:63:25:
84:54:9d:9b:c2:73:cd:e1:3d:26:fd:87:23:ac:28:
4c:01:fa:03:a6:6b:fe:f5:64:f6:7a:2c:a1:32:8b:
dc:4d:1e:24:ee:fc:7e:90:7f:e3:cd:a6:0e:d2:bc:
1f:74:e1:29:96:6d:ca:56:f5:c8:3c:ef:39:94:86:
68:de:c5:03:9c:ee:18:71:00:2f:96:d4:5b:70:35:
5a:38:55:fc:0e:ad:7e:c8:36:7b:ce:47:69:b6:47:
fe:b6:31:41:3a:a1:7d:6b:f8:1e:f4:b3:2e:81:71:
a5:db:de:71:33:a2:4e:e4:3a:13:29:00:f8:73:29:
c6:34:0e:31:f4:57:da:f4:71:ad:1f:76:19:9e:39:
62:81:a7:af:e4:f2:d1:1b:30:6f:d9:0b:70:97:9c:
50:be:af:91:0f:18:1c:9a:67:35:cc:26:ff:92:1c:
73:c8:15:f8:e8:dd:fc:ce:e8:53:0d:ea:47:30:b7:
d5:d9:a9:43:5a:a2:77:f7:19:fa:c0:fa:25:7f:24:
57:f4:c9:2e:49:07:94:81:d3:46:29:f1:bf:53:32:
33:35:0b:e2:85:4d:c1:5c:cb:49:cd:68:42:b4:08:
c5:77:8a:32:a4:b3:12:0b:1b:c8:34:4c:be:f0:ca:
f7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FF:E1:FD:2A:6A:9C:98:B1:F2:3F:07:48:5D:0E:65:00:A6:07:CD
X509v3 Authority Key Identifier:
keyid:10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:48:b2:13:35:3d:fb:49:f8:2e:32:e2:bc:d3:35:c0:e6:c4:
7d:99:fe:05:d3:21:15:9b:b5:44:3c:69:15:25:1a:a4:6b:59:
02:0e:59:d9:48:16:fe:65:0b:31:f6:a8:32:a9:5c:b7:f1:06:
69:3e:db:9c:8d:65:b9:93:f9:a5:e6:38:13:52:62:f0:50:e4:
76:f9:f2:2c:95:35:9e:4d:1d:fa:b2:ea:de:0b:e6:fe:f8:6f:
7b:f2:f3:d6:c1:6c:f3:96:19:c1:c9:51:47:0a:8e:91:81:46:
6c:55:d9:69:03:e2:f3:a9:ff:04:94:ca:7b:ca:a1:b7:eb:a1:
0e:6b:13:0b:53:e6:64:f9:70:d5:83:5f:27:ed:ee:79:81:26:
3a:55:8b:c9:02:34:bd:34:e0:2d:3d:52:89:be:ed:35:d8:10:
bc:7f:4e:9c:39:55:b1:64:51:07:63:ec:6a:fd:de:3e:d0:ed:
b7:56:f4:e2:72:9d:b4:c8:63:0f:2e:1c:fc:61:30:b6:6b:30:
0e:41:a3:24:37:9f:a0:08:67:37:3d:be:3f:85:70:30:77:1d:
a6:16:94:00:0b:19:f7:f1:3b:01:41:3e:ee:fd:f7:e2:dd:81:
21:10:2b:1b:d2:e1:ee:c2:aa:74:95:c4:1e:0e:f1:ef:3a:b8:
59:cf:8d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:09:59 2026 by rpki-client