Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
File: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft (raw, json)
Hash identifier: 76RK6EZB0O0S9BDHXqXsYT6i35WCHY56gSIP8aXr/ak=
Subject key identifier: 33:7D:C9:DC:90:47:27:ED:6E:4B:B4:AC:A0:3D:57:2F:56:DB:22:E8
Authority key identifier: 7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
Certificate issuer: /CN=7a17259a863c3d637d457e119b750df95e003fd6
Certificate serial: 019F8EA270C1E1AD865DF4BB775268998E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
Manifest number: 19C4
Signing time: Thu 23 Jul 2026 11:00:38 +0000
Manifest this update: Thu 23 Jul 2026 11:00:38 +0000
Manifest next update: Fri 24 Jul 2026 11:00:38 +0000
Files and hashes: 1: 5tBrp55-EAXMGlNBrWNqj744wk4.roa (hash: rV+tN1f8sl1mzbaoUz6eUbNwGQ89OtRS1uDIueamB+M=)
2: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl (hash: U4fqUIb7/O4pTxB999WQGh3PSg4DUntewZzVP90urF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:70:c1:e1:ad:86:5d:f4:bb:77:52:68:99:8e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a17259a863c3d637d457e119b750df95e003fd6
Validity
Not Before: Jul 23 11:00:38 2026 GMT
Not After : Jul 24 11:00:38 2026 GMT
Subject: CN=337dc9dc904727ed6e4bb4aca03d572f56db22e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:56:6d:0c:76:c1:25:67:ff:35:eb:6f:dd:fa:
5b:e2:bf:03:83:48:e3:08:64:34:a2:27:1a:b1:a3:
20:88:5f:55:be:57:38:de:ce:bd:d9:8c:64:41:fb:
6e:23:b7:2e:d3:7c:48:db:2c:fd:08:e5:26:c1:b8:
4b:38:d5:e1:62:d2:3c:e5:98:fa:0e:a7:9c:33:77:
32:fd:68:20:dc:70:cf:70:2f:ca:50:a5:18:60:fa:
e5:dc:30:19:69:25:ca:13:2e:1a:67:d0:01:2f:cd:
b4:02:05:af:6a:0a:0c:99:a1:b8:5c:20:c1:5b:37:
e9:c2:cd:fb:43:ca:63:f8:1a:c8:47:63:8e:ae:d7:
3a:ff:48:f9:e5:b2:96:68:bc:8c:39:cc:5e:63:44:
d2:99:3a:79:52:79:f2:ef:cc:43:08:c2:22:e6:4b:
3e:27:a7:b4:0c:05:74:94:7c:98:fc:52:86:3a:ee:
a5:d6:39:40:9d:d1:32:f2:d2:47:bd:0d:c8:60:9a:
5a:df:f1:d2:2a:76:32:9f:54:b9:8c:90:6d:96:cf:
28:d4:7f:fe:e3:20:60:83:37:e5:0f:18:c4:58:2d:
51:5d:2f:3c:98:f3:26:82:5c:38:01:42:4e:89:a6:
2f:40:87:af:e7:32:f4:fc:4d:24:97:8f:ea:5c:17:
fb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7D:C9:DC:90:47:27:ED:6E:4B:B4:AC:A0:3D:57:2F:56:DB:22:E8
X509v3 Authority Key Identifier:
keyid:7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e4:60:a6:7c:b5:f9:1e:2e:de:c5:08:49:56:d4:35:c6:7b:
a9:dc:81:e9:fc:15:f6:56:cd:a6:b9:f4:c6:88:c2:36:fc:28:
d3:c1:19:54:f4:ba:41:65:94:56:3a:27:99:6b:81:5b:61:d4:
11:0b:93:67:d6:4f:84:b8:fb:04:21:14:45:5b:39:c4:35:45:
ec:c7:33:ab:18:a7:0a:4b:af:66:a5:34:02:bd:21:bf:51:f2:
24:8a:66:d9:ef:ef:f9:b5:17:7d:50:ba:27:25:d2:f2:a4:75:
54:db:ef:ff:bf:5e:5f:8e:c2:84:39:32:05:52:c3:78:61:99:
64:fa:ab:29:5b:e4:d3:69:b6:57:be:41:f0:3a:91:11:99:bd:
a5:06:1a:57:8f:c1:6c:0c:22:fa:61:d8:eb:ad:0a:8c:1f:43:
8e:83:a6:fa:d2:fb:ab:2d:be:e0:d2:98:aa:01:8a:8d:df:35:
34:af:3c:c5:22:2e:e8:95:be:e3:19:f8:76:d9:7d:0a:4b:60:
d0:86:5d:17:2b:06:16:3a:fc:58:07:00:2a:43:72:e9:56:cb:
fa:f7:df:1c:de:d8:c0:78:9a:3c:b9:d3:8c:44:c9:f0:11:a4:
a6:47:3e:cb:9c:df:bd:f9:ec:a1:54:13:20:0d:17:17:d9:23:
7b:3c:da:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+OonDB4a2GXfS7d1JomY5xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMTcyNTlhODYzYzNkNjM3ZDQ1N2UxMTliNzUwZGY5NWUw
MDNmZDYwHhcNMjYwNzIzMTEwMDM4WhcNMjYwNzI0MTEwMDM4WjAzMTEwLwYDVQQD
EygzMzdkYzlkYzkwNDcyN2VkNmU0YmI0YWNhMDNkNTcyZjU2ZGIyMmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11ZtDHbBJWf/Netv3fpb4r8Dg0jj
CGQ0oicasaMgiF9Vvlc43s692YxkQftuI7cu03xI2yz9COUmwbhLONXhYtI85Zj6
DqecM3cy/Wgg3HDPcC/KUKUYYPrl3DAZaSXKEy4aZ9ABL820AgWvagoMmaG4XCDB
Wzfpws37Q8pj+BrIR2OOrtc6/0j55bKWaLyMOcxeY0TSmTp5Unny78xDCMIi5ks+
J6e0DAV0lHyY/FKGOu6l1jlAndEy8tJHvQ3IYJpa3/HSKnYyn1S5jJBtls8o1H/+
4yBggzflDxjEWC1RXS88mPMmglw4AUJOiaYvQIev5zL0/E0kl4/qXBf7VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDN9ydyQRyftbku0rKA9Vy9W2yLoMB8GA1UdIwQY
MBaAFHoXJZqGPD1jfUV+EZt1DfleAD/WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWhjbG1vWThQV045Ulg0Um0zVU4tVjRBUDlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wMDg0OWUtZDhlNi00YmIxLWFkMzAt
YWQ4YmM4YmM3OTY3LzEvZWhjbG1vWThQV045Ulg0Um0zVU4tVjRBUDlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8wMDg0OWUtZDhlNi00YmIxLWFkMzAtYWQ4YmM4YmM3OTY3
LzEvZWhjbG1vWThQV045Ulg0Um0zVU4tVjRBUDlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAduRgpny1
+R4u3sUISVbUNcZ7qdyB6fwV9lbNprn0xojCNvwo08EZVPS6QWWUVjonmWuBW2HU
EQuTZ9ZPhLj7BCEURVs5xDVF7MczqxinCkuvZqU0Ar0hv1HyJIpm2e/v+bUXfVC6
JyXS8qR1VNvv/79eX47ChDkyBVLDeGGZZPqrKVvk02m2V75B8DqREZm9pQYaV4/B
bAwi+mHY660KjB9DjoOm+tL7qy2+4NKYqgGKjd81NK88xSIu6JW+4xn4dtl9Cktg
0IZdFysGFjr8WAcAKkNy6VbL+vffHN7YwHiaPLnTjETJ8BGkpkc+y5zfvfnsoVQT
IA0XF9kjezzauA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:25:58 2026 by rpki-client