Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
File: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft (raw, json)
Hash identifier: LRgIaxJWOeFDCLSE4Zsf/eEWM4f8FrzG4l6MHC7s4+s=
Subject key identifier: 80:45:D6:47:02:C6:61:AA:86:19:04:9A:0D:7F:19:3E:12:88:50:81
Authority key identifier: 7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
Certificate issuer: /CN=7a17259a863c3d637d457e119b750df95e003fd6
Certificate serial: 019D269631BF99586C6A46B02BEBE8938F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 20:01:10 +0000
Manifest this update: Wed 25 Mar 2026 20:01:10 +0000
Manifest next update: Thu 26 Mar 2026 20:01:10 +0000
Files and hashes: 1: 5tBrp55-EAXMGlNBrWNqj744wk4.roa (hash: rV+tN1f8sl1mzbaoUz6eUbNwGQ89OtRS1uDIueamB+M=)
2: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl (hash: SKb5kiow6fsPOaLjm/iIgNGFYxZQNRrK96AoLeEo0iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:31:bf:99:58:6c:6a:46:b0:2b:eb:e8:93:8f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a17259a863c3d637d457e119b750df95e003fd6
Validity
Not Before: Mar 25 20:01:10 2026 GMT
Not After : Mar 26 20:01:10 2026 GMT
Subject: CN=8045d64702c661aa8619049a0d7f193e12885081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:31:bf:a0:3f:c2:b0:50:13:a4:ca:c6:d6:
99:65:4d:ff:e6:a1:e0:36:fc:14:51:0a:ed:fc:7f:
24:0e:bd:6b:e9:d9:99:04:e2:e0:df:d7:1a:a9:16:
5b:84:71:ad:39:86:9d:93:26:64:72:db:4d:0c:6e:
da:60:82:75:dd:ac:43:8a:91:64:3d:98:d2:b7:04:
48:e4:81:f3:55:e2:f8:ca:47:5a:0a:d0:6d:df:13:
6a:5b:15:25:c2:3b:c6:29:6f:fe:71:8e:cf:3a:40:
11:e4:e4:af:f0:79:5d:db:de:67:6d:3e:1d:94:60:
09:62:26:62:af:b6:33:95:35:4d:90:e1:c4:76:dc:
30:eb:4f:8e:24:db:af:6c:66:0f:c5:21:07:8f:24:
b5:e2:a3:3d:41:dc:cd:aa:20:10:29:dc:d3:99:1e:
5f:50:90:b4:b3:5a:c4:14:0d:77:cc:ca:6b:d3:3a:
2e:46:e2:6a:7b:54:cb:ac:46:61:79:b0:4c:86:85:
70:7f:99:9c:fd:21:60:9b:31:a0:c2:d1:71:42:d0:
32:d6:97:27:a9:0a:d0:23:53:42:a9:fe:d0:c5:d0:
a7:f1:50:ae:cf:cb:63:25:88:23:c1:4a:1c:f7:89:
98:c2:08:57:d0:0f:6c:2d:3e:25:ae:75:88:ce:33:
50:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:45:D6:47:02:C6:61:AA:86:19:04:9A:0D:7F:19:3E:12:88:50:81
X509v3 Authority Key Identifier:
keyid:7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e8:fd:12:97:72:c2:8d:b0:c6:21:8e:9a:e7:d8:6e:60:1a:
4d:12:70:26:90:1c:1b:e5:bc:08:e5:a5:bb:d6:b9:09:8b:5f:
dd:f0:98:de:a8:68:22:9a:46:ee:16:75:96:17:64:ad:e3:81:
cb:69:78:e8:89:88:8c:a1:f3:b0:4a:0a:02:d3:53:89:0d:46:
b7:67:e0:4d:b1:4e:17:6b:f9:7a:8d:a3:5d:e1:c8:60:a2:ad:
3b:31:5d:80:64:28:43:07:25:9c:36:11:e8:c1:da:6e:29:54:
8d:c0:d5:c0:b4:65:6b:bf:ec:6f:24:18:c7:06:d3:96:ad:6c:
1d:6f:7b:40:11:4d:0f:8b:78:2b:e6:e9:dc:ad:29:15:8d:b8:
57:16:1d:7b:fa:5e:17:5a:ae:e5:83:64:1e:62:2c:7e:a7:26:
d5:fe:b7:c3:20:bd:b1:7e:6b:b3:16:4e:59:d3:77:bb:8c:34:
4b:e1:4c:7d:65:c3:40:fb:68:74:f3:e0:d5:cd:a3:29:22:08:
80:c7:ee:9b:69:7f:f9:3a:f5:fb:a4:37:f5:0f:fd:2b:11:dc:
ca:3b:79:42:52:0a:52:b6:74:66:a8:50:0b:be:fc:a3:35:25:
99:dc:48:53:64:c2:b8:e4:94:10:f1:b1:3b:3e:5c:89:3b:54:
28:2c:79:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:55:26 2026 by rpki-client