Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
File: EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json)
Hash identifier: /YXD40Wl6CmyZfAO933uByxzkFrH4FyIJlXOFTUJcJg=
Subject key identifier: 24:8F:2B:3F:D2:69:06:16:68:B7:61:7A:20:18:20:5A:CE:36:27:A3
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 01A15EC3FC038CA420146296EA6D6B900F18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
Manifest number: 1ABF
Signing time: Wed 21 Oct 2026 14:01:04 +0000
Manifest this update: Wed 21 Oct 2026 14:01:04 +0000
Manifest next update: Thu 22 Oct 2026 14:01:04 +0000
Files and hashes: 1: 2UJnYkLlrBrsr-FiuY1t_mTWT4k.roa (hash: Xa61lzBRtSApWj6goAfzYPWzx5tHlOIe0rD8n3ZeiWM=)
2: 6SSFg2yTmoKjF6zDnreMbjMeibE.roa (hash: AXKKKuWwPyZUnqIrE5CjvILYke6ea5omdcN+j9qzetQ=)
3: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: dW3P/IMG03FT5wbOkAk6c7Fulob5hBvgqJklsTY//d0=)
4: IL8deFD8PSOp3NWJSt_iFRSnHrw.roa (hash: q/v7MQox/nq9r/rZ534FmTQXSTW9buaaFYPj+WtYk78=)
5: Q5hESTZfbwdELtpLu27GaP7-Lno.roa (hash: ObHNDf8xA8n0C2IML/LhP97ggga61XCUWT978woHwn0=)
6: ZKLNMt3VfAzRkdvHr5Xd6gL_UHI.roa (hash: MwQzyqB63sngmzcWgEGwpFF72y7jC9kNOl+3Zg+6fcs=)
7: fKYfVT1YDQ8JUaTATaBTlPz4QNw.roa (hash: oYpajimnxUNbsLq6vnCVkRjpUdwX5aoikIaxhzhw2Vw=)
8: qK_PP9-atac9mTKlNBkq0IeVJSc.roa (hash: 7XIhv4ZG0yNjDke4N6v5k/ztyTTS+fsvn2uOI243g1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:c3:fc:03:8c:a4:20:14:62:96:ea:6d:6b:90:0f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Oct 21 14:01:04 2026 GMT
Not After : Oct 22 14:01:04 2026 GMT
Subject: CN=248f2b3fd269061668b7617a2018205ace3627a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3e:fd:ec:42:a2:d4:91:77:be:c3:6c:af:7a:
fc:a6:80:11:48:de:29:a6:b5:19:19:3a:1e:c0:b6:
72:c8:6a:e5:54:e8:f1:d1:31:c0:0f:5b:1a:9a:13:
bb:0e:91:ff:1b:8b:df:94:09:10:dd:00:a9:d3:f3:
7a:7d:f0:8a:f0:fb:c3:f1:8b:97:30:c4:9c:65:73:
57:a6:95:cc:d7:b7:55:88:3c:06:b0:dd:63:d0:30:
0d:ae:ff:34:a8:7a:20:8a:2a:cc:d1:77:70:fb:36:
7c:45:9e:7f:b1:23:39:2a:9e:a2:8b:19:25:ff:aa:
38:c0:3c:cb:c6:8b:01:09:a0:6b:35:b3:b4:ea:09:
cb:cd:87:37:dc:90:23:e9:06:41:2b:9c:13:6c:ab:
27:f9:ff:4f:e0:3f:35:dd:a3:60:44:ce:b2:22:34:
7d:48:eb:ec:53:54:f2:f5:44:27:83:31:91:eb:95:
bf:6a:57:42:cf:e8:88:35:ef:5c:67:46:82:b0:ae:
41:33:f0:a0:45:bb:d4:e8:4a:03:7f:1a:40:ba:54:
b4:9d:fa:88:1b:39:b8:28:a8:2f:a1:60:54:44:fb:
50:52:f4:5b:c6:9b:06:9e:3c:56:42:b8:a5:ff:c7:
22:f1:98:0a:36:38:4e:bb:5f:eb:7c:82:ff:25:dc:
0f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8F:2B:3F:D2:69:06:16:68:B7:61:7A:20:18:20:5A:CE:36:27:A3
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:07:f6:4c:aa:73:76:49:f9:0b:81:bf:5a:e5:2b:6e:d1:9d:
11:45:71:7a:ef:40:bb:64:53:99:96:7e:3b:dd:5f:fa:fb:e8:
f3:bf:5f:da:bc:dc:4c:ed:be:5c:85:14:81:1c:25:ec:b1:65:
f5:43:8b:47:ea:35:40:f6:eb:0e:1d:2c:e2:42:ad:a6:07:4d:
db:d6:f2:ca:22:de:dc:e1:50:57:47:95:21:9c:06:cf:e2:59:
77:27:66:73:eb:b4:ab:a6:e8:21:64:f2:be:4a:73:dc:a0:44:
c8:40:f4:7f:eb:8f:e0:29:08:53:7b:f2:cf:62:24:9a:54:56:
49:d7:7a:17:5e:42:53:66:60:aa:d8:ee:a4:24:3c:3a:4f:6f:
13:8f:da:6a:3c:6c:b4:16:7e:fe:ce:6a:2e:cc:64:f3:94:f7:
f5:fe:e2:3e:bc:76:8d:e0:76:e7:ef:d4:76:a2:a3:15:2d:fa:
e7:d3:8b:cc:fd:7e:7b:13:51:93:78:32:34:04:67:96:1f:27:
f5:f3:28:b0:47:f8:b3:f2:94:4c:d0:8f:c1:ee:cb:c5:bb:c6:
50:57:d5:15:83:dd:83:ed:76:66:78:0f:0c:e3:5f:8e:2e:14:
d6:1b:d3:ee:c9:14:09:ae:f7:78:ff:05:e3:22:39:94:c1:3d:
8e:43:1d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 17:12:33 2026 by rpki-client