Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
File: EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json)
Hash identifier: wnX23T/ASI33nPoaRg/63YADCJkYiYL9X5DjX1p6XII=
Subject key identifier: 93:B2:A1:0D:43:B8:3B:86:89:1B:C9:E6:B6:2D:D5:CC:B8:B5:47:9B
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 019F859F4EFCE39BA2CCBC981E8542704E9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
Manifest number: 19CA
Signing time: Tue 21 Jul 2026 17:00:37 +0000
Manifest this update: Tue 21 Jul 2026 17:00:37 +0000
Manifest next update: Wed 22 Jul 2026 17:00:37 +0000
Files and hashes: 1: 2UJnYkLlrBrsr-FiuY1t_mTWT4k.roa (hash: Xa61lzBRtSApWj6goAfzYPWzx5tHlOIe0rD8n3ZeiWM=)
2: 6SSFg2yTmoKjF6zDnreMbjMeibE.roa (hash: AXKKKuWwPyZUnqIrE5CjvILYke6ea5omdcN+j9qzetQ=)
3: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: j/Njdo9EoU0499O5dgvXK0p1xSA77IOuAMDGzVfJUCw=)
4: IL8deFD8PSOp3NWJSt_iFRSnHrw.roa (hash: q/v7MQox/nq9r/rZ534FmTQXSTW9buaaFYPj+WtYk78=)
5: Q5hESTZfbwdELtpLu27GaP7-Lno.roa (hash: ObHNDf8xA8n0C2IML/LhP97ggga61XCUWT978woHwn0=)
6: ZKLNMt3VfAzRkdvHr5Xd6gL_UHI.roa (hash: MwQzyqB63sngmzcWgEGwpFF72y7jC9kNOl+3Zg+6fcs=)
7: fKYfVT1YDQ8JUaTATaBTlPz4QNw.roa (hash: oYpajimnxUNbsLq6vnCVkRjpUdwX5aoikIaxhzhw2Vw=)
8: qK_PP9-atac9mTKlNBkq0IeVJSc.roa (hash: 7XIhv4ZG0yNjDke4N6v5k/ztyTTS+fsvn2uOI243g1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:9f:4e:fc:e3:9b:a2:cc:bc:98:1e:85:42:70:4e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Jul 21 17:00:37 2026 GMT
Not After : Jul 22 17:00:37 2026 GMT
Subject: CN=93b2a10d43b83b86891bc9e6b62dd5ccb8b5479b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7b:a4:ae:86:29:35:2e:31:ac:20:44:17:35:
00:85:cc:8c:c1:24:a7:d5:d1:44:4a:cb:c2:77:65:
e0:b7:a9:b3:a7:c5:d8:bb:bd:f5:5f:f3:b2:de:2b:
d5:f1:3d:c5:35:96:d2:41:63:c6:3e:82:32:57:1a:
e6:f6:60:e3:c5:28:20:22:48:f8:ac:07:2e:cb:fb:
1b:8d:49:88:54:48:60:a9:34:18:ed:2c:84:f4:5d:
c6:47:c5:23:56:64:05:6c:e9:57:61:25:73:10:64:
d2:b8:65:db:3c:f3:19:33:ba:2f:74:de:84:fe:37:
cc:d3:72:6b:8c:6c:6f:1b:33:b2:99:29:77:52:05:
06:ea:4b:34:58:4c:db:da:24:71:c9:91:ae:ff:e5:
9a:33:9f:e1:d7:2a:4b:ba:47:8a:57:eb:81:62:56:
db:d5:d8:9c:03:1a:ea:9a:7c:31:88:27:56:45:4c:
29:6f:1b:47:d9:10:13:eb:a4:48:66:b5:15:9e:c8:
38:56:5e:6b:d9:07:ec:b4:c7:e4:1b:a7:fd:6c:fe:
c9:49:f1:db:82:3c:3a:0b:eb:16:7f:e5:53:a3:2e:
52:68:5e:b8:26:75:79:15:d0:52:c5:cc:98:e3:19:
a0:b6:a0:81:b8:a4:81:c2:50:47:80:65:91:eb:1d:
11:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B2:A1:0D:43:B8:3B:86:89:1B:C9:E6:B6:2D:D5:CC:B8:B5:47:9B
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ec:3e:fb:2b:8a:7c:01:37:e6:03:e6:0c:7c:d3:47:38:27:
16:29:d1:03:be:47:97:f4:f0:c3:b1:21:14:d2:bf:47:2f:c9:
5b:75:5c:bd:d0:75:f8:6d:cf:d2:2a:ea:75:e0:f3:4f:66:0d:
cc:09:88:64:70:6a:63:48:10:12:34:5e:7a:be:87:10:d2:06:
f6:39:28:7f:51:e6:77:49:b0:fc:2c:62:56:fd:2d:dd:eb:e2:
e4:a7:56:d6:0a:fe:0d:a1:c4:17:de:cd:d5:73:9b:0a:f6:c3:
8c:22:9b:43:41:e4:c2:75:90:b4:44:db:d0:0a:0f:d6:88:6b:
3f:2b:d2:6f:d9:6d:e7:17:df:ac:bb:96:d4:ed:49:cc:a7:7f:
3d:2c:48:9c:86:42:88:47:e6:19:d5:86:5b:33:34:c7:8e:22:
14:26:ea:fa:de:82:97:7f:22:ec:8b:59:13:54:90:b2:53:40:
ff:30:74:b0:39:bb:be:dd:9d:88:7a:0a:b3:2c:c7:84:7e:78:
55:e0:c6:f7:60:bb:35:79:59:69:a9:2d:b0:26:bc:49:33:ef:
79:ef:f6:ad:2d:e1:ca:64:f2:a3:d3:c6:0d:88:71:32:8d:34:
93:ad:33:e1:22:f6:47:56:90:14:51:01:0b:d6:e2:01:22:06:
15:2d:ce:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:29:34 2026 by rpki-client