Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
File: eHl3C__BTZzftXTshmyq8TVy9Fw.mft (raw, json)
Hash identifier: DBCmOL3qA1m8dy2l4JuZkVok20jknvfYGgFhNgA97Bk=
Subject key identifier: 6B:F1:AF:58:36:8B:22:0C:B5:94:39:D6:52:D8:F3:BB:FA:F6:30:DE
Authority key identifier: 78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
Certificate issuer: /CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Certificate serial: 019F93FFE35ADD1E5AA6078EC685FD0EEB87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
Manifest number: 1688
Signing time: Fri 24 Jul 2026 12:00:48 +0000
Manifest this update: Fri 24 Jul 2026 12:00:48 +0000
Manifest next update: Sat 25 Jul 2026 12:00:48 +0000
Files and hashes: 1: eHl3C__BTZzftXTshmyq8TVy9Fw.crl (hash: MrEWyy1fEA3OQRC3keb2Jpz0HWb+phmgf1gZi/yd6NY=)
2: haFw3q9tFoad6JUgiF-KPVOV4eM.roa (hash: e1I2SrRGxtbgkFSgcz9jLZjRjE847NKvzw0g1roFc00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:e3:5a:dd:1e:5a:a6:07:8e:c6:85:fd:0e:eb:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Validity
Not Before: Jul 24 12:00:48 2026 GMT
Not After : Jul 25 12:00:48 2026 GMT
Subject: CN=6bf1af58368b220cb59439d652d8f3bbfaf630de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ef:24:a6:e0:14:14:86:d3:94:d8:62:50:e1:
9b:28:e3:ed:dd:92:71:7a:73:55:b4:69:f0:1c:4b:
9d:b4:f6:43:0f:6b:d2:54:07:8a:a5:d4:7d:a9:9f:
28:76:f6:c8:21:ad:c0:0a:cb:b0:4b:79:f8:a9:d3:
c6:42:fb:6e:4b:dc:ad:c9:1d:be:c9:af:77:ee:2c:
0f:5c:b6:d8:46:05:9c:5d:cc:32:7a:d8:0a:76:ac:
af:ef:8e:b0:27:d7:2f:4e:c8:77:fc:6d:60:21:01:
9b:82:c3:69:ee:d0:7d:1b:58:4b:53:01:39:d0:c3:
ed:25:da:57:3d:dd:94:a2:14:bc:d4:43:d5:70:02:
ef:b7:9f:35:60:5c:4d:35:e6:ea:d4:29:9d:d0:10:
14:c9:5d:31:79:e1:10:ab:c3:12:55:9f:f4:c9:ee:
87:e2:72:51:e7:61:c2:fd:50:80:27:07:a9:bc:cd:
9b:6b:3b:bb:c3:4f:c6:4e:b0:9f:a8:60:e8:67:02:
b1:d0:b3:7b:cc:63:38:f5:d4:1e:46:13:db:bf:6f:
e9:c0:1d:b4:d5:f0:17:e1:d6:f3:1d:da:69:15:4a:
9c:e0:29:a7:6d:e8:e7:e7:16:69:53:1f:af:c4:8e:
04:42:a8:30:46:ea:19:b1:38:b1:48:1d:cc:cf:4f:
0e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F1:AF:58:36:8B:22:0C:B5:94:39:D6:52:D8:F3:BB:FA:F6:30:DE
X509v3 Authority Key Identifier:
keyid:78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e7:b9:e5:c7:eb:d6:f2:17:c1:b4:ab:83:6f:d9:9c:55:56:
ab:1f:3e:23:32:f4:19:15:67:dd:5f:4f:9e:58:2e:12:e4:e7:
26:df:0e:94:23:dc:17:57:79:f8:b3:15:16:e3:ff:24:ff:87:
9c:48:b8:c2:37:af:0b:43:40:d7:71:1b:b9:2e:b4:25:2c:59:
f3:f9:2f:e2:c2:b1:d1:00:ae:26:32:ce:44:d2:a5:6c:9f:8f:
6c:c5:bf:70:fd:6c:f1:b9:86:d5:0e:3f:a7:ef:f3:fd:68:91:
f8:2f:1e:bb:37:22:14:73:7c:a3:ff:97:84:b8:ee:04:c8:eb:
f6:1c:37:e2:9f:b1:cc:05:c5:c9:6e:bc:58:d3:6c:ce:90:5b:
b4:3c:00:46:8a:42:1d:13:14:bc:7f:8c:18:82:66:f1:ec:8a:
97:06:b9:8e:07:0e:d2:bc:7a:88:81:1f:f9:13:77:04:ee:98:
52:2c:04:b5:a8:6a:ac:4a:b8:37:61:3a:d3:05:b2:c7:e2:e5:
47:ab:ea:4a:c6:aa:e8:03:a1:de:9a:22:6b:7d:27:1e:f7:6d:
09:f1:b3:1e:aa:2c:b5:ba:4a:76:f7:12:2d:51:ed:25:47:56:
03:a7:dc:55:72:d5:c1:50:b4:88:50:54:c7:11:50:8c:d8:cb:
fc:6e:12:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:07:12 2026 by rpki-client