Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
File: EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json)
Hash identifier: uiwzQApkAvXrGL8XLZmiViHlRgoKF1jGPHwTnsJprfE=
Subject key identifier: 5B:9C:60:FC:E1:20:6B:2E:57:01:D2:88:0D:7E:64:C1:48:91:79:B2
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 01A1570B1F095398BB3A0227BF4359EDE123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
Manifest number: 1ABB
Signing time: Tue 20 Oct 2026 02:01:48 +0000
Manifest this update: Tue 20 Oct 2026 02:01:48 +0000
Manifest next update: Wed 21 Oct 2026 02:01:48 +0000
Files and hashes: 1: 2UJnYkLlrBrsr-FiuY1t_mTWT4k.roa (hash: Xa61lzBRtSApWj6goAfzYPWzx5tHlOIe0rD8n3ZeiWM=)
2: 6SSFg2yTmoKjF6zDnreMbjMeibE.roa (hash: AXKKKuWwPyZUnqIrE5CjvILYke6ea5omdcN+j9qzetQ=)
3: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: Jwq1vIWXPz7h+zxwUQAjSo9/rOY5GGBWBmdfG/tMV2Y=)
4: IL8deFD8PSOp3NWJSt_iFRSnHrw.roa (hash: q/v7MQox/nq9r/rZ534FmTQXSTW9buaaFYPj+WtYk78=)
5: Q5hESTZfbwdELtpLu27GaP7-Lno.roa (hash: ObHNDf8xA8n0C2IML/LhP97ggga61XCUWT978woHwn0=)
6: ZKLNMt3VfAzRkdvHr5Xd6gL_UHI.roa (hash: MwQzyqB63sngmzcWgEGwpFF72y7jC9kNOl+3Zg+6fcs=)
7: fKYfVT1YDQ8JUaTATaBTlPz4QNw.roa (hash: oYpajimnxUNbsLq6vnCVkRjpUdwX5aoikIaxhzhw2Vw=)
8: qK_PP9-atac9mTKlNBkq0IeVJSc.roa (hash: 7XIhv4ZG0yNjDke4N6v5k/ztyTTS+fsvn2uOI243g1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 02:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:57:0b:1f:09:53:98:bb:3a:02:27:bf:43:59:ed:e1:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Oct 20 02:01:48 2026 GMT
Not After : Oct 21 02:01:48 2026 GMT
Subject: CN=5b9c60fce1206b2e5701d2880d7e64c1489179b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:d3:ba:38:54:47:57:b1:c4:09:3e:65:f3:
b8:9e:5d:82:33:ab:ba:ac:83:e7:56:f7:b9:24:61:
04:05:df:af:94:f9:00:e1:d8:45:c5:d0:da:af:c3:
61:01:08:fd:70:d0:62:ff:44:95:f3:b7:e6:b6:84:
cf:c7:a3:cb:56:85:21:eb:7c:f2:c8:da:bd:92:a5:
ee:19:98:0b:2c:b3:70:09:6c:14:93:46:97:2b:0e:
ab:3b:39:ac:bd:d7:f4:24:a5:78:d5:f7:65:16:d7:
8b:b3:8e:7a:fa:cc:bd:f9:8a:a5:c4:bc:ca:9c:86:
cb:c4:b9:73:a1:28:c2:38:c3:2e:ed:f5:ac:8a:81:
bc:e5:46:09:84:2d:0b:25:34:76:4b:a0:05:b5:4b:
a7:f9:5c:0e:4e:09:2d:34:b6:71:f6:bd:67:ff:6e:
67:5c:a1:e5:0f:f4:77:aa:f3:9e:56:b6:6b:6c:5b:
c0:5c:ba:ea:15:cf:b2:e2:0a:ca:64:55:af:ff:bf:
b9:ed:e3:eb:64:9f:b4:2b:ee:b8:66:9e:b9:af:80:
83:f6:d6:e3:4c:7a:08:cb:b3:00:2c:83:9c:4d:b4:
46:1e:fa:7e:42:cd:6c:d5:81:1a:6f:34:1c:d8:14:
36:16:21:c5:d2:e1:74:33:1e:3f:4e:4c:45:43:96:
8e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9C:60:FC:E1:20:6B:2E:57:01:D2:88:0D:7E:64:C1:48:91:79:B2
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d0:e6:ec:03:26:a1:e7:b4:c2:f7:7a:78:d3:81:c7:83:11:
f1:48:2b:95:e2:66:40:a2:dd:15:af:ad:77:62:f5:c9:0b:03:
db:1a:52:0b:a1:5c:9e:4d:36:36:fc:c4:54:19:fd:c7:0f:05:
9f:45:c2:b6:2d:8c:2f:04:9e:d0:8b:a5:46:fb:3b:20:eb:0a:
c9:3b:6f:21:5b:0b:38:1d:e9:39:8b:2d:1c:66:33:1c:ea:b9:
a6:97:50:3d:41:3e:ee:9c:9f:87:f7:76:c5:d4:b8:ad:4e:79:
68:e1:7e:5c:ad:a4:d4:6b:96:5a:77:f4:7c:e2:95:8a:8b:0e:
e4:1b:a9:eb:08:37:69:16:c3:96:a4:53:0f:97:de:16:b1:95:
8d:83:35:58:69:f7:75:52:c7:e0:07:f4:62:d7:a1:36:66:9a:
76:bc:b4:10:24:d7:e4:5c:97:48:b0:5d:ee:73:ff:4c:66:47:
0d:b0:8f:41:15:c3:9f:ab:00:4a:bc:69:ab:51:ba:71:2a:dd:
82:d1:bd:46:c9:58:e4:05:3a:e7:15:d4:e2:eb:ed:bf:c8:d5:
91:f7:6e:4f:ba:a8:5b:b9:06:93:37:e2:f4:13:39:c9:46:5d:
fd:61:82:67:10:f6:22:1a:1b:ce:bf:64:36:8f:58:33:2f:80:
05:14:1b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 14:22:28 2026 by rpki-client