Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
File: EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json)
Hash identifier: 1JNH1dEOC3cXtu7mhKWdsbH06gvo52Z7A9K8h85fJ+8=
Subject key identifier: F0:2F:81:87:2F:8E:C5:62:81:7D:82:E5:D5:D0:3D:A4:F5:8F:33:4C
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 01A06D5DCC8B0A060EFCDE7DA290D462A331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
Manifest number: 1A42
Signing time: Fri 04 Sep 2026 17:00:58 +0000
Manifest this update: Fri 04 Sep 2026 17:00:58 +0000
Manifest next update: Sat 05 Sep 2026 17:00:58 +0000
Files and hashes: 1: 2UJnYkLlrBrsr-FiuY1t_mTWT4k.roa (hash: Xa61lzBRtSApWj6goAfzYPWzx5tHlOIe0rD8n3ZeiWM=)
2: 6SSFg2yTmoKjF6zDnreMbjMeibE.roa (hash: AXKKKuWwPyZUnqIrE5CjvILYke6ea5omdcN+j9qzetQ=)
3: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: bFX1gQGKt8nkSGGBOOtZKT2mVN3IGYXDwvawOQlXuCE=)
4: IL8deFD8PSOp3NWJSt_iFRSnHrw.roa (hash: q/v7MQox/nq9r/rZ534FmTQXSTW9buaaFYPj+WtYk78=)
5: Q5hESTZfbwdELtpLu27GaP7-Lno.roa (hash: ObHNDf8xA8n0C2IML/LhP97ggga61XCUWT978woHwn0=)
6: ZKLNMt3VfAzRkdvHr5Xd6gL_UHI.roa (hash: MwQzyqB63sngmzcWgEGwpFF72y7jC9kNOl+3Zg+6fcs=)
7: fKYfVT1YDQ8JUaTATaBTlPz4QNw.roa (hash: oYpajimnxUNbsLq6vnCVkRjpUdwX5aoikIaxhzhw2Vw=)
8: qK_PP9-atac9mTKlNBkq0IeVJSc.roa (hash: 7XIhv4ZG0yNjDke4N6v5k/ztyTTS+fsvn2uOI243g1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:5d:cc:8b:0a:06:0e:fc:de:7d:a2:90:d4:62:a3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Sep 4 17:00:58 2026 GMT
Not After : Sep 5 17:00:58 2026 GMT
Subject: CN=f02f81872f8ec562817d82e5d5d03da4f58f334c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fe:c1:21:79:13:b2:aa:8e:3b:b9:0c:4b:11:
ca:18:97:b6:c2:2a:73:3b:b7:54:34:c2:85:84:e3:
36:fa:5f:c6:20:c4:04:2a:6d:33:b0:62:09:c1:9d:
77:14:14:8e:84:89:40:1c:7f:4c:be:01:81:71:33:
32:82:68:5b:ed:b4:fc:3c:91:7c:1c:7e:42:1d:09:
15:0c:01:fb:39:1e:0a:20:ef:34:a9:0f:95:d4:ae:
66:bc:0a:0d:8d:fd:a1:43:f2:1b:71:03:01:87:04:
87:72:03:74:aa:09:5f:91:9a:d8:d6:ec:1c:97:4e:
97:4c:01:4c:f4:26:25:a0:9c:87:b2:e3:47:a7:c6:
d5:a1:06:52:25:9f:51:af:08:56:cb:ed:c1:19:f8:
cd:30:92:0b:88:72:19:7a:1c:e7:18:59:32:8e:18:
f6:1e:42:7e:3d:71:a8:22:0d:53:c3:42:0b:fb:9d:
59:33:5b:56:d0:f0:29:27:69:32:df:92:c5:56:2e:
0d:1d:4e:fb:00:96:97:1c:1f:1f:2f:d5:a3:9d:5f:
2e:b5:2b:90:ca:74:55:28:5c:44:16:da:99:6f:20:
2b:58:ed:59:5c:8f:bd:5f:3a:13:11:4c:95:40:8c:
e6:ff:10:c3:84:8f:d0:8e:62:3f:1c:b1:ae:ee:5b:
26:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2F:81:87:2F:8E:C5:62:81:7D:82:E5:D5:D0:3D:A4:F5:8F:33:4C
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:3d:af:97:d3:d9:c1:d3:c1:ab:f3:56:da:3f:1b:05:47:2d:
08:ed:6f:d2:8f:a5:0b:22:2d:4f:f0:aa:74:f5:72:14:8b:bc:
6d:ee:23:b7:a6:80:c5:d6:63:78:c3:47:3a:01:ab:3a:f4:8f:
99:06:8d:06:04:63:e2:b0:49:c6:17:c8:40:ae:81:9a:72:6d:
48:d6:c9:b6:99:95:2f:ca:c3:11:ed:92:d2:e4:c1:ed:f2:d4:
8c:d6:e5:6e:7b:c9:3b:9d:44:09:24:08:35:fb:14:e4:e7:06:
02:7e:19:d5:db:15:35:fc:bf:41:df:93:1f:c4:5f:0a:34:23:
83:01:7d:b7:24:6d:d0:97:e3:7f:b9:01:c7:9f:cf:cf:43:bf:
ab:89:4f:e2:aa:cc:32:50:20:39:e1:87:25:c5:ad:5e:13:f8:
57:a4:54:dd:97:93:d5:45:eb:69:e1:d6:e9:bc:b0:8d:37:8d:
41:d8:e0:2f:f0:e0:8c:69:10:be:c1:04:28:aa:0f:ad:b7:32:
34:ae:16:0b:52:cf:35:f8:27:59:0f:bd:49:eb:c7:ca:7b:f5:
41:f1:66:2e:21:6a:ce:e7:1f:cc:7d:36:27:14:66:24:98:5b:
a6:68:6b:3f:78:70:75:9b:4c:67:27:a5:f9:f4:76:91:19:29:
0a:39:cc:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBtXcyLCgYO/N59opDUYqMxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMTRhN2UyYThjNzAxMjMyNWFlOTczZWQxYTJiYmEwNWIy
YmI5YzEwHhcNMjYwOTA0MTcwMDU4WhcNMjYwOTA1MTcwMDU4WjAzMTEwLwYDVQQD
EyhmMDJmODE4NzJmOGVjNTYyODE3ZDgyZTVkNWQwM2RhNGY1OGYzMzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf7BIXkTsqqOO7kMSxHKGJe2wipz
O7dUNMKFhOM2+l/GIMQEKm0zsGIJwZ13FBSOhIlAHH9MvgGBcTMygmhb7bT8PJF8
HH5CHQkVDAH7OR4KIO80qQ+V1K5mvAoNjf2hQ/IbcQMBhwSHcgN0qglfkZrY1uwc
l06XTAFM9CYloJyHsuNHp8bVoQZSJZ9RrwhWy+3BGfjNMJILiHIZehznGFkyjhj2
HkJ+PXGoIg1Tw0IL+51ZM1tW0PApJ2ky35LFVi4NHU77AJaXHB8fL9WjnV8utSuQ
ynRVKFxEFtqZbyArWO1ZXI+9XzoTEUyVQIzm/xDDhI/QjmI/HLGu7lsmAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAvgYcvjsVigX2C5dXQPaT1jzNMMB8GA1UdIwQY
MBaAFBIUp+KoxwEjJa6XPtGiu6BbK7nBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQt
ZTljMzY0OWMxMjE4LzEvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQtZTljMzY0OWMxMjE4
LzEvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuT2vl9PZ
wdPBq/NW2j8bBUctCO1v0o+lCyItT/CqdPVyFIu8be4jt6aAxdZjeMNHOgGrOvSP
mQaNBgRj4rBJxhfIQK6BmnJtSNbJtpmVL8rDEe2S0uTB7fLUjNblbnvJO51ECSQI
NfsU5OcGAn4Z1dsVNfy/Qd+TH8RfCjQjgwF9tyRt0Jfjf7kBx5/Pz0O/q4lP4qrM
MlAgOeGHJcWtXhP4V6RU3ZeT1UXraeHW6bywjTeNQdjgL/DgjGkQvsEEKKoPrbcy
NK4WC1LPNfgnWQ+9SevHynv1QfFmLiFqzucfzH02JxRmJJhbpmhrP3hwdZtMZyel
+fR2kRkpCjnMAw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:22:45 2026 by rpki-client