Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
File: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft (raw, json)
Hash identifier: 8czZ1EjPWxzd1oxs4m2XXz/ukLOCCUWTl1Ygn3jizQw=
Subject key identifier: 22:0A:F7:A1:A2:E6:24:23:F9:A8:C7:E2:F9:5C:44:F4:2B:98:89:C9
Authority key identifier: 7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
Certificate issuer: /CN=7a17259a863c3d637d457e119b750df95e003fd6
Certificate serial: 01A0D315B477D933C7127D41092256508066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 11:03:29 +0000
Manifest this update: Thu 24 Sep 2026 11:03:29 +0000
Manifest next update: Fri 25 Sep 2026 11:03:29 +0000
Files and hashes: 1: 5tBrp55-EAXMGlNBrWNqj744wk4.roa (hash: rV+tN1f8sl1mzbaoUz6eUbNwGQ89OtRS1uDIueamB+M=)
2: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl (hash: rCyxhrx2eGuMEAjmTI4BJodyarAd61jZB7QFvUwDHvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:03:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:b4:77:d9:33:c7:12:7d:41:09:22:56:50:80:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a17259a863c3d637d457e119b750df95e003fd6
Validity
Not Before: Sep 24 11:03:29 2026 GMT
Not After : Sep 25 11:03:29 2026 GMT
Subject: CN=220af7a1a2e62423f9a8c7e2f95c44f42b9889c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5c:07:24:0c:93:12:fe:85:da:ce:8f:52:ce:
31:09:1e:22:86:0a:1a:ae:57:cf:a7:84:fd:78:c7:
83:f5:56:b1:5a:fc:64:62:68:1b:77:c3:a3:c0:dd:
e6:3f:28:af:12:7e:75:8b:85:e8:ba:94:ae:5c:c5:
1e:c9:f5:e2:11:75:7c:2b:9d:dd:25:e8:e1:db:1e:
9f:ea:78:1b:69:be:90:13:c2:e9:42:b8:53:1d:c7:
3f:c1:73:b7:31:50:0d:ec:a2:2e:89:b0:41:8a:48:
20:4f:78:fc:1e:28:09:25:90:59:b6:11:93:7f:de:
1a:16:af:9e:fe:b8:45:07:ac:18:5a:5c:70:04:26:
2e:8a:6c:02:d7:e7:a0:48:fe:f7:2e:ec:94:2a:e2:
f0:7a:e1:89:0b:ad:03:58:0e:f3:ec:63:ae:3b:18:
70:c9:80:42:31:3a:1b:d6:7e:2b:6d:22:9b:2c:ad:
23:05:f1:df:ea:b7:6f:4a:29:fe:d1:fa:4a:b0:56:
13:7c:a3:1b:72:fc:f2:93:0b:b9:6f:9a:72:57:45:
f7:9a:0e:ce:f7:81:38:3a:29:9f:4f:91:a6:4a:02:
7b:c9:af:07:f6:d5:b2:98:a2:db:00:ca:85:15:fd:
cc:0f:0d:dd:83:33:d4:33:3c:72:3f:20:89:d5:33:
0a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0A:F7:A1:A2:E6:24:23:F9:A8:C7:E2:F9:5C:44:F4:2B:98:89:C9
X509v3 Authority Key Identifier:
keyid:7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:01:7f:59:a6:f8:b9:7f:bd:6f:b9:6a:96:6d:ab:53:46:dd:
fd:20:90:14:29:86:b8:7a:28:71:58:5b:8e:b6:27:e6:23:93:
12:07:f4:9e:4d:19:51:64:ba:52:dc:f7:3f:8e:b0:c5:de:4a:
2a:29:99:9e:84:ae:99:3c:d0:91:1c:7d:af:cf:b3:3c:a1:e1:
34:01:e0:cf:4c:11:b0:94:9b:06:3d:51:86:23:7f:65:48:af:
54:ea:2b:33:87:b1:99:6c:8e:67:83:67:cb:2a:15:b4:ce:0c:
30:da:90:05:a4:9b:71:bb:61:8c:09:66:83:2e:ae:21:8c:bd:
7c:5d:ce:fd:d7:48:0d:a0:4b:d3:99:69:a0:67:ab:71:5b:44:
0a:32:1b:fe:b1:58:f4:c9:72:ca:10:90:9f:7a:37:9b:3d:44:
08:a3:b3:61:e4:ef:57:6c:15:aa:49:78:5b:48:cf:05:9f:8c:
f8:fe:2e:36:b5:63:ee:d5:08:31:5c:5b:e7:c2:62:4b:fd:d9:
e3:b6:69:b2:96:0f:9d:6c:f7:12:6c:3a:17:54:e1:36:04:93:
29:a6:e7:c6:ad:91:28:53:da:7d:a0:97:7e:4f:8d:54:ab:71:
6b:23:72:83:ff:e7:c1:07:e5:a6:ee:7e:95:5a:68:4c:d7:9f:
56:c4:ac:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:10:03 2026 by rpki-client