Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
File: EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json)
Hash identifier: MHl5ol2H0K0eRgqWcc183GOcuaYbyfMQIpYTNFB8cQ0=
Subject key identifier: EF:5A:C5:59:E2:7A:E4:25:6C:10:09:6A:F9:20:A5:41:86:32:79:EA
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 019E9DE16C394864B5667F594D7F87EFB632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
Manifest number: 1952
Signing time: Sat 06 Jun 2026 17:00:56 +0000
Manifest this update: Sat 06 Jun 2026 17:00:56 +0000
Manifest next update: Sun 07 Jun 2026 17:00:56 +0000
Files and hashes: 1: 2UJnYkLlrBrsr-FiuY1t_mTWT4k.roa (hash: Xa61lzBRtSApWj6goAfzYPWzx5tHlOIe0rD8n3ZeiWM=)
2: 6SSFg2yTmoKjF6zDnreMbjMeibE.roa (hash: AXKKKuWwPyZUnqIrE5CjvILYke6ea5omdcN+j9qzetQ=)
3: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: 4EdmBJBwXITEAHDHGGo2as32lZA4iQTceZrzkDia3oQ=)
4: IL8deFD8PSOp3NWJSt_iFRSnHrw.roa (hash: q/v7MQox/nq9r/rZ534FmTQXSTW9buaaFYPj+WtYk78=)
5: Q5hESTZfbwdELtpLu27GaP7-Lno.roa (hash: ObHNDf8xA8n0C2IML/LhP97ggga61XCUWT978woHwn0=)
6: ZKLNMt3VfAzRkdvHr5Xd6gL_UHI.roa (hash: MwQzyqB63sngmzcWgEGwpFF72y7jC9kNOl+3Zg+6fcs=)
7: fKYfVT1YDQ8JUaTATaBTlPz4QNw.roa (hash: oYpajimnxUNbsLq6vnCVkRjpUdwX5aoikIaxhzhw2Vw=)
8: qK_PP9-atac9mTKlNBkq0IeVJSc.roa (hash: 7XIhv4ZG0yNjDke4N6v5k/ztyTTS+fsvn2uOI243g1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9d:e1:6c:39:48:64:b5:66:7f:59:4d:7f:87:ef:b6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Jun 6 17:00:56 2026 GMT
Not After : Jun 7 17:00:56 2026 GMT
Subject: CN=ef5ac559e27ae4256c10096af920a541863279ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a4:f0:5e:fb:c3:26:88:22:22:ab:c5:c2:9d:
be:e5:47:98:62:df:fe:ad:00:d7:05:c9:17:2e:a9:
c7:5f:f3:f5:69:40:4e:5f:f3:d0:8e:0f:c3:97:d6:
fa:6e:29:de:ee:f4:6d:de:3f:44:50:c9:c6:0d:db:
0b:01:d0:4e:4a:52:2b:00:0c:fa:25:a9:3f:57:26:
fc:07:c6:7c:3a:6b:04:b7:17:df:c4:60:6b:73:3d:
44:8c:2a:fb:70:51:91:4a:47:85:e4:35:e9:fd:a0:
a4:7b:ef:fc:10:70:1a:af:80:cf:01:d1:a8:fe:bc:
18:ee:43:40:da:e4:01:e5:9a:9f:d8:3e:8c:59:20:
f4:87:cc:58:9c:58:ce:ad:27:2e:06:e9:58:91:c9:
df:80:67:56:da:20:40:36:79:46:91:bd:30:44:51:
b6:5d:f7:d3:4a:8e:04:d7:76:ed:2c:c9:e0:e8:f3:
db:69:6c:f6:14:9c:7f:03:8c:ab:e4:b1:a4:e9:68:
64:c3:37:41:19:21:b1:6e:75:d2:01:09:fb:1e:55:
22:6b:8f:f5:aa:72:4b:4a:1b:87:08:c3:22:0a:b2:
17:40:90:10:2f:ce:76:90:2d:b3:70:42:0f:aa:5d:
cd:d6:8b:9a:2e:50:6d:61:a5:9a:e4:b9:c1:51:aa:
09:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5A:C5:59:E2:7A:E4:25:6C:10:09:6A:F9:20:A5:41:86:32:79:EA
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:09:5d:b4:a0:c8:69:1a:3d:10:5f:5d:6d:99:d9:d4:13:48:
a2:cb:87:43:35:1d:6c:54:1c:81:06:bf:76:05:12:34:61:a6:
34:40:2b:7e:4d:50:77:38:a1:ee:03:89:46:d3:c3:e5:48:97:
18:85:cd:4a:55:9a:cd:69:96:b7:e8:bf:e2:9d:bf:f2:b2:dc:
69:9b:95:5e:b1:cd:25:65:9e:b5:c9:c3:b6:ae:16:05:02:2e:
fe:29:dc:44:05:76:0d:94:ed:b3:1a:3d:a6:59:8b:1c:5f:33:
ae:ba:01:c5:fb:10:7d:15:c3:a3:7a:5a:8a:a6:f6:cf:d5:5a:
66:a5:c1:13:8d:62:fd:d7:1d:6a:83:81:33:c2:f3:55:b4:99:
78:3d:1b:38:73:39:43:8d:1f:37:20:43:56:fc:a6:b4:99:bb:
fa:8b:4e:a9:d0:21:7b:31:88:28:c4:17:4b:b2:c8:f9:27:f0:
66:8f:2d:3c:72:4a:7b:e7:ad:03:95:2f:3e:12:7d:d3:b8:90:
3d:40:d4:c1:80:7d:14:31:75:36:c4:16:41:fe:c1:b8:ab:f4:
12:fa:5b:2e:b9:61:c8:1c:57:c1:d1:95:da:b7:4f:5c:f8:ef:
ae:1e:8c:07:bb:94:8d:f3:29:b1:55:27:98:fe:e6:91:55:c5:
89:5b:c4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 19:47:17 2026 by rpki-client