Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
File: EHQA5PCchADaMYvWywP9XFSqqfE.mft (raw, json)
Hash identifier: wI1RCgD0GxF05lNfdC5AW4eqooNY5N/ILoqyyYArTbI=
Subject key identifier: CC:DF:A6:4E:98:A0:E0:3B:15:5C:D1:CF:CC:64:82:F4:50:4E:E3:8F
Authority key identifier: 10:74:00:E4:F0:9C:84:00:DA:31:8B:D6:CB:03:FD:5C:54:AA:A9:F1
Certificate issuer: /CN=107400e4f09c8400da318bd6cb03fd5c54aaa9f1
Certificate serial: 01A179286D1D1D6DADB9927906223DB57CE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
Manifest number: 0323
Signing time: Mon 26 Oct 2026 17:00:54 +0000
Manifest this update: Mon 26 Oct 2026 17:00:54 +0000
Manifest next update: Tue 27 Oct 2026 17:00:54 +0000
Files and hashes: 1: EHQA5PCchADaMYvWywP9XFSqqfE.crl (hash: GwQuTX9RrNqk5356pr9KE8jKGO7VVppDXMwREcL8OX4=)
2: OGjeDErcHRCzEaNJIlL9WLO39x0.asa (hash: twryuu4Niufwid1brPkWkntu7TTmLytf1vNFmmKb5Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:28:6d:1d:1d:6d:ad:b9:92:79:06:22:3d:b5:7c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107400e4f09c8400da318bd6cb03fd5c54aaa9f1
Validity
Not Before: Oct 26 17:00:54 2026 GMT
Not After : Oct 27 17:00:54 2026 GMT
Subject: CN=ccdfa64e98a0e03b155cd1cfcc6482f4504ee38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bf:7e:2c:cc:9d:01:50:30:e5:39:71:95:d2:
84:5f:ce:59:4a:41:e3:4d:1a:b5:c4:60:0a:4a:d1:
01:b5:5b:e6:28:0a:77:d1:d3:5d:26:01:3f:ad:d2:
25:1e:f5:fa:8a:f2:fd:2c:4b:94:55:3c:4d:61:aa:
ff:1d:db:df:da:cf:31:ea:a0:ac:8f:d9:e0:42:5a:
b8:de:00:fa:c5:95:3a:f1:a8:1c:dd:d9:7a:e3:14:
50:86:aa:92:eb:f2:7d:e1:86:41:5b:84:71:e2:91:
b3:b6:2a:08:3f:aa:83:76:28:3b:9f:d3:02:33:1f:
e3:d5:50:d8:0e:24:3d:74:53:9c:11:92:53:e4:19:
f5:69:80:47:26:3b:a6:9e:16:73:a0:59:16:d2:79:
7e:09:cf:0e:69:d7:e3:86:d7:c5:d5:f8:54:f0:1f:
4a:fd:f4:f6:4b:b7:47:15:54:31:a3:e8:94:98:41:
6f:00:29:66:27:09:eb:8e:bf:57:d1:47:51:90:47:
26:3b:61:88:1c:42:78:c0:62:f4:38:60:58:24:01:
ea:80:32:1d:77:52:6c:25:92:20:39:89:21:29:4c:
0c:1f:21:0d:70:93:d7:c8:51:48:e0:ad:64:26:f3:
83:dc:14:9a:25:dd:47:62:95:5f:cb:35:aa:94:92:
ba:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DF:A6:4E:98:A0:E0:3B:15:5C:D1:CF:CC:64:82:F4:50:4E:E3:8F
X509v3 Authority Key Identifier:
keyid:10:74:00:E4:F0:9C:84:00:DA:31:8B:D6:CB:03:FD:5C:54:AA:A9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9c:fe:ca:6f:d8:0e:ee:b3:bc:60:83:63:18:8a:49:e5:c2:
55:b7:60:c3:9a:14:17:0c:04:30:81:91:82:ad:a7:bb:22:75:
03:db:54:4e:12:2b:fd:d9:ea:ae:b9:54:67:99:09:61:6b:f2:
ee:76:d7:45:8e:a2:f6:98:52:fe:0e:64:8b:b2:0b:f5:fb:c4:
df:a7:27:ea:1b:64:d9:46:c0:89:69:4e:48:11:71:00:d1:21:
f8:cc:ff:e7:9c:33:a1:8f:93:43:2c:e3:8d:93:b3:77:0c:1c:
7c:6c:21:33:e3:5c:21:50:b8:c4:10:b0:60:35:6e:34:8d:fb:
8c:e3:53:d4:83:6c:81:5d:34:0c:3d:cc:d1:27:53:c7:b5:a8:
28:23:1e:60:6c:fd:76:a2:bb:e1:51:d9:50:27:6c:63:17:f7:
f8:07:8c:f1:cb:fa:30:81:38:0c:a7:b9:4a:27:a5:01:6b:b2:
bf:7d:24:f3:b2:c0:f6:cc:62:31:5b:69:13:19:62:61:71:7c:
15:09:7f:c0:df:f9:e8:59:51:9b:5c:fc:4c:b4:62:d0:0c:09:
29:24:bd:95:8c:12:c5:1a:f3:59:04:cb:54:68:52:82:12:bf:
9c:20:e4:78:ab:78:7e:08:15:0f:60:75:29:03:9b:95:8e:ad:
fa:9a:e3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 01:07:29 2026 by rpki-client