Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
File: EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json)
Hash identifier: KpB13YAb/iingmqR7548UdiJjVK/C9/3G47nuzFY98Q=
Subject key identifier: 29:4B:BA:0D:EE:B9:5E:1F:1E:8B:B3:03:29:76:D7:A1:D1:47:BD:38
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 019DB16AEC28714FE1D8576FACAECCEDF734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
Manifest number: 18D7
Signing time: Tue 21 Apr 2026 19:01:07 +0000
Manifest this update: Tue 21 Apr 2026 19:01:07 +0000
Manifest next update: Wed 22 Apr 2026 19:01:07 +0000
Files and hashes: 1: 2UJnYkLlrBrsr-FiuY1t_mTWT4k.roa (hash: Xa61lzBRtSApWj6goAfzYPWzx5tHlOIe0rD8n3ZeiWM=)
2: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: 4pq8Jp4Ccwixj4Lq9qQ6wNQ3axeCKwYhAFvNpYAu2s0=)
3: IL8deFD8PSOp3NWJSt_iFRSnHrw.roa (hash: q/v7MQox/nq9r/rZ534FmTQXSTW9buaaFYPj+WtYk78=)
4: Q5hESTZfbwdELtpLu27GaP7-Lno.roa (hash: ObHNDf8xA8n0C2IML/LhP97ggga61XCUWT978woHwn0=)
5: ZKLNMt3VfAzRkdvHr5Xd6gL_UHI.roa (hash: MwQzyqB63sngmzcWgEGwpFF72y7jC9kNOl+3Zg+6fcs=)
6: fKYfVT1YDQ8JUaTATaBTlPz4QNw.roa (hash: oYpajimnxUNbsLq6vnCVkRjpUdwX5aoikIaxhzhw2Vw=)
7: qK_PP9-atac9mTKlNBkq0IeVJSc.roa (hash: 7XIhv4ZG0yNjDke4N6v5k/ztyTTS+fsvn2uOI243g1w=)
8: xd5IZiz1YB2PdB-q-VKoWUqlfWg.roa (hash: s14zG8n95cnLanJ2EGUmy/+O9/gNhrX1fm7XyiLB6RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:6a:ec:28:71:4f:e1:d8:57:6f:ac:ae:cc:ed:f7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Apr 21 19:01:07 2026 GMT
Not After : Apr 22 19:01:07 2026 GMT
Subject: CN=294bba0deeb95e1f1e8bb3032976d7a1d147bd38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a8:4d:4c:c1:94:c7:8d:6b:db:f6:c4:0e:bf:
ec:5a:84:32:d0:ef:31:c7:29:01:1e:4d:2c:f4:0d:
23:9c:7f:9f:2c:e2:83:84:bc:be:89:5a:c5:0f:36:
24:2f:a1:07:03:5c:8f:cf:16:38:9d:d5:a8:7e:92:
de:4c:12:98:09:64:c4:02:b1:b5:50:b6:c5:bd:e0:
07:d7:8d:f8:08:a8:42:1e:26:a1:89:e3:d8:af:bb:
3b:61:76:75:8b:f8:ee:f6:01:be:8a:39:fc:47:29:
35:b6:08:6c:a9:45:69:82:75:f5:42:57:73:a8:d9:
87:39:87:7f:92:73:38:c8:35:6e:7e:7f:ab:12:46:
52:94:5d:3f:a7:a0:9f:49:57:9a:0e:ac:ab:45:ac:
42:eb:e2:ef:e8:69:52:4a:2e:7c:86:12:ea:e7:fc:
9d:e7:69:3b:9d:90:ca:7e:4b:c3:a7:a9:b2:fb:a2:
8c:7d:09:43:17:fb:fe:69:e6:93:39:e7:7e:62:5c:
cf:5c:4e:4f:64:d1:9c:f0:11:ec:ca:dd:8c:1e:be:
a3:27:f5:de:e3:cd:8b:9c:09:28:f3:26:46:22:73:
09:66:6a:50:cf:9e:df:14:48:2d:ed:c1:ba:63:2e:
d1:c1:6c:0e:f1:48:ff:15:55:d7:fd:09:5b:08:60:
f1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4B:BA:0D:EE:B9:5E:1F:1E:8B:B3:03:29:76:D7:A1:D1:47:BD:38
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:fe:28:07:7d:29:17:6c:5c:4a:fd:ff:ad:25:7e:7f:dd:53:
da:fa:fe:26:72:5b:55:91:3d:66:b8:e7:1e:53:30:70:f3:f7:
36:0e:7e:7b:06:8c:c9:db:e3:18:42:8b:58:23:92:77:c7:40:
32:5d:97:e5:6b:6b:5b:7f:d5:a1:60:03:1f:f3:d6:35:25:df:
44:51:9d:a0:a4:1c:45:04:d4:4d:fe:ca:88:41:f7:2d:b8:b4:
c8:19:b3:34:cd:84:c1:03:ae:57:09:21:d3:99:20:53:4e:80:
1a:85:57:d9:5e:b8:7d:80:88:71:66:47:58:a3:89:3c:f6:45:
6d:fb:a6:72:6e:57:79:c1:ff:fb:52:3f:00:db:81:88:ff:be:
b7:62:40:c3:58:c5:d8:6a:f6:90:35:b2:db:34:6d:f5:54:60:
fc:6d:6d:01:9c:8f:f0:58:6d:e8:71:02:3f:5a:2b:f3:0e:39:
d3:ee:a8:cc:fe:c9:ad:af:ac:0d:59:8c:b7:54:67:47:e3:e1:
66:4f:13:57:a9:7b:f7:cc:5e:3c:1f:b7:02:0b:b9:46:8f:34:
fb:f4:76:30:5d:76:34:eb:8e:80:56:cc:76:00:2d:ae:f0:d4:
de:4b:00:fc:38:71:4d:aa:99:7c:26:28:7e:d7:95:63:d6:a0:
bf:41:f5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:07:52 2026 by rpki-client