
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
File: e4huM5cQFPDjX65u41WpXuU_E5c.mft (raw, json)
Hash identifier: yjsDJtZVtYDwKNmXMK9thY9FKY8qqAUgeiMDyICywow=
Subject key identifier: 99:CE:F6:AE:59:F5:9A:C8:E8:7D:BB:80:18:4F:2F:A1:78:90:7C:C4
Authority key identifier: 7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97
Certificate issuer: /CN=7b886e33971014f0e35fae6ee355a95ee53f1397
Certificate serial: 019F92ECEA8D7023165622EB9B2059BB6C64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
Manifest number: 0EEE
Signing time: Fri 24 Jul 2026 07:00:27 +0000
Manifest this update: Fri 24 Jul 2026 07:00:27 +0000
Manifest next update: Sat 25 Jul 2026 07:00:27 +0000
Files and hashes: 1: e4huM5cQFPDjX65u41WpXuU_E5c.crl (hash: J0R1vDpsb2crJQo+t/UgJmW705yTfr0xgqvGzXPu4gc=)
2: ryw8pANYiWDQuIyjdZ7oamR1t58.roa (hash: 2HMSeXqRqzVzH58INszxQlwSvF3HPks2TZimmKfWKr4=)
3: w1lnaXc0stYti4D5HKapAQ20wiM.roa (hash: dNDg8xo8m9AS8HO+Ntxotl19K7LOzsHs1ntt7tMGKHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:ea:8d:70:23:16:56:22:eb:9b:20:59:bb:6c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b886e33971014f0e35fae6ee355a95ee53f1397
Validity
Not Before: Jul 24 07:00:27 2026 GMT
Not After : Jul 25 07:00:27 2026 GMT
Subject: CN=99cef6ae59f59ac8e87dbb80184f2fa178907cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5b:66:e6:e7:53:d8:c8:28:a4:ae:2a:96:e3:
83:7d:5b:ca:61:bb:48:82:f3:a7:89:11:f7:0a:8a:
d1:84:d8:46:9a:63:ca:75:d1:15:69:8b:59:79:3c:
91:4c:9a:89:ff:d6:3e:1f:e7:4b:bc:55:5d:df:cd:
95:6a:19:33:0e:25:c8:74:6c:23:99:3f:7a:7d:92:
cb:21:88:a9:29:66:e1:73:09:b0:de:ec:be:e6:b0:
1b:e6:d4:ab:f3:7c:a2:09:bc:3d:04:c2:0f:9a:2e:
36:77:4d:da:13:6b:90:8f:b7:0f:4c:ea:39:73:65:
57:64:b7:3b:5f:5b:03:e1:a3:04:f9:22:b9:2d:bd:
50:bd:b2:9b:df:5a:bf:81:29:71:80:04:bf:10:16:
70:94:93:2f:e3:11:18:f3:03:28:de:d7:54:2d:fa:
4c:ab:4e:2c:d4:50:e8:6e:e1:d3:bc:5d:c2:10:b8:
bc:8c:41:45:c8:c3:81:27:49:72:c3:77:19:ae:95:
c1:93:4d:35:04:fe:c7:33:7b:e0:64:55:6e:25:93:
a8:89:d5:40:3a:eb:d7:ec:14:d2:d9:85:13:09:4d:
0d:97:06:77:4f:cb:4b:de:7d:59:74:e6:59:a5:85:
f5:12:69:8e:5b:81:64:49:28:18:75:d5:5d:49:9c:
67:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CE:F6:AE:59:F5:9A:C8:E8:7D:BB:80:18:4F:2F:A1:78:90:7C:C4
X509v3 Authority Key Identifier:
keyid:7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:fb:f7:f1:01:12:e1:32:39:3d:29:a2:d0:47:90:10:bc:a4:
af:ab:b2:50:bc:ae:1d:50:23:d5:8c:2c:04:b8:82:80:78:4e:
61:f4:32:79:e0:64:af:d6:aa:ea:cc:28:ff:72:68:70:da:18:
ee:51:f9:65:53:fc:d7:db:d5:85:90:c8:62:3e:6a:dc:07:07:
07:cb:32:d2:2e:4b:ef:46:9d:e2:74:48:51:9b:ad:35:20:00:
56:b7:fc:8d:bf:5a:22:df:13:ce:90:7d:63:14:63:a8:bb:58:
e8:41:50:ae:9c:a5:db:0e:bc:bd:ed:cb:a3:3c:22:bb:d0:ca:
a3:61:5b:29:9c:15:c3:d8:7f:76:be:4c:9e:bd:8d:ac:5c:59:
ef:a8:24:7a:8d:03:1a:0e:9f:3a:25:4f:42:78:b8:23:96:64:
96:c8:b7:14:69:9b:45:d4:8a:b2:58:07:d6:35:a8:60:8c:07:
fb:07:fe:df:0f:cd:96:78:6c:d5:1a:ea:a9:45:4f:25:a0:7a:
14:cf:d9:b8:e9:ec:d6:76:d8:33:ff:19:f5:e1:cb:98:ad:82:
83:31:2d:16:28:90:67:61:99:b2:80:5c:65:17:ea:0a:06:d9:
e6:47:90:a4:d4:b0:b6:0b:0b:87:5e:26:2a:1d:82:29:62:c2:
ec:b5:99:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:19:46 2026 by rpki-client