Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
File: ehuwNttA15nYYRmKUkOzwD1Wwgo.mft (raw, json)
Hash identifier: RsNGsOLviUl9geW8zc2Ha/ZOl0pxUjHhorHZ28wZDak=
Subject key identifier: 72:59:69:2B:CF:5F:B1:6E:2B:5F:FC:F4:FA:BD:3F:C8:02:A0:02:D6
Authority key identifier: 7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A
Certificate issuer: /CN=7a1bb036db40d799d861198a5243b3c03d56c20a
Certificate serial: 019D284E230673EB15667779145B0EB062D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
Manifest number: 03CE
Signing time: Thu 26 Mar 2026 04:01:42 +0000
Manifest this update: Thu 26 Mar 2026 04:01:42 +0000
Manifest next update: Fri 27 Mar 2026 04:01:42 +0000
Files and hashes: 1: 2xwSBwS6RDNnNKRZKOi0MbfjwVc.roa (hash: RMcEguGLwOa0BQU2j27En5sOEwzBOElDccZLVB4NNcw=)
2: MRM-CoQOpNzOiMlv-SoepHZ_vkg.roa (hash: XmXaFQhLTQFHGNBv8hvjwKW9TmIBhDQDOsRTHRNNRp8=)
3: ehuwNttA15nYYRmKUkOzwD1Wwgo.crl (hash: pl9JeCX0ME1d3NX4RCB8qtJtfp9TRpxp5/Jhnaa6HD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:23:06:73:eb:15:66:77:79:14:5b:0e:b0:62:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a1bb036db40d799d861198a5243b3c03d56c20a
Validity
Not Before: Mar 26 04:01:42 2026 GMT
Not After : Mar 27 04:01:42 2026 GMT
Subject: CN=7259692bcf5fb16e2b5ffcf4fabd3fc802a002d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d2:d1:ef:15:11:cd:12:a8:1d:6e:62:51:f9:
e9:0d:7c:d1:13:52:51:ae:c6:c5:1b:c0:87:e1:8c:
8f:ff:25:da:9f:60:0b:73:44:7f:12:11:1c:a5:c1:
f0:07:07:e1:f6:1e:fb:aa:33:2b:db:97:e9:b2:74:
c7:f5:4d:ac:a2:a9:51:ef:60:4f:79:02:9e:4a:2c:
b7:25:53:14:70:7a:2e:b8:39:18:f5:78:24:36:9e:
4a:2a:25:57:bb:37:56:6d:50:59:a3:1e:96:fa:f6:
39:a8:f7:57:8e:0d:43:2a:4e:13:c9:17:fb:a6:42:
ce:8c:1a:94:00:cb:92:f6:a5:ff:94:3f:92:a9:ad:
b8:4b:50:f7:d4:f8:a2:54:82:c2:d5:b1:bd:08:5e:
eb:b5:e6:cb:b0:4c:4e:83:0d:5e:1a:36:68:cd:35:
7a:ff:fc:38:f0:12:e8:80:bc:9c:d9:98:d7:55:c4:
48:d7:b7:2f:0b:30:df:86:ee:d6:fd:29:dd:61:40:
30:9a:16:56:58:ba:10:76:7a:6a:00:9d:00:fe:f7:
2b:6a:3a:24:ec:f3:13:66:4d:45:fa:cb:96:f2:a8:
3c:5d:4a:a0:2f:5c:38:54:c6:0a:4d:73:1e:c4:8d:
e6:3d:55:5b:af:af:17:2c:3a:b0:b5:12:fc:7c:f5:
64:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:59:69:2B:CF:5F:B1:6E:2B:5F:FC:F4:FA:BD:3F:C8:02:A0:02:D6
X509v3 Authority Key Identifier:
keyid:7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:a5:0f:b6:b4:e2:65:e9:53:8d:fd:04:e8:eb:fb:25:0a:eb:
8b:b3:c1:ab:67:b9:77:fe:da:38:22:ed:71:7e:d5:6f:8f:16:
b2:b7:59:66:4e:62:3c:fb:45:a4:ee:02:f7:2d:46:b3:5b:68:
e6:28:67:ba:8c:83:7a:e8:37:3a:9a:6e:ab:ea:28:60:b3:2f:
35:ea:3d:d5:fe:c6:38:49:e5:74:e4:1d:a2:93:d8:e8:20:5a:
9d:41:f2:db:40:06:41:3c:b6:3b:7a:a6:ab:2b:0f:1c:64:78:
69:5e:e8:6b:fe:3d:ff:7b:04:a0:d0:bc:1e:2b:7b:25:0c:a3:
37:d8:8e:4b:af:2a:c5:da:3b:31:aa:e3:78:25:f4:58:e9:0d:
83:37:6c:c3:39:5d:e0:13:65:bc:87:e6:a5:40:2e:4d:59:27:
bb:9e:1f:45:7d:a1:ab:40:29:75:5d:ec:b1:7f:a9:8c:15:44:
27:f5:a7:5f:60:71:9c:5d:72:71:fa:5e:fb:f6:1f:f9:ec:11:
f9:0c:b7:8b:1a:86:47:29:2e:a2:dd:e4:74:7c:83:12:d3:21:
b7:8e:41:31:62:72:f0:20:12:4b:47:7f:79:42:69:b1:7b:b6:
23:23:10:d7:0d:1b:d7:58:d2:c2:de:2a:e1:b9:1b:16:0a:28:
8d:69:26:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:35 2026 by rpki-client