Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
File: EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json)
Hash identifier: DDWRL6NzlWCvnmwCyQXg5HSE22/WWv4NwnZF1TD38p4=
Subject key identifier: B7:A4:48:EB:72:F1:84:01:F2:00:56:9E:0C:60:BD:90:96:11:F9:F5
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 019E9BF30730EF9396115663FCEA73304420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
Manifest number: 1951
Signing time: Sat 06 Jun 2026 08:00:55 +0000
Manifest this update: Sat 06 Jun 2026 08:00:55 +0000
Manifest next update: Sun 07 Jun 2026 08:00:55 +0000
Files and hashes: 1: 2UJnYkLlrBrsr-FiuY1t_mTWT4k.roa (hash: Xa61lzBRtSApWj6goAfzYPWzx5tHlOIe0rD8n3ZeiWM=)
2: 6SSFg2yTmoKjF6zDnreMbjMeibE.roa (hash: AXKKKuWwPyZUnqIrE5CjvILYke6ea5omdcN+j9qzetQ=)
3: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: El7r54LLaq1QXT6qjhQCYse4aKuzwk69V5aV6Q3HUCE=)
4: IL8deFD8PSOp3NWJSt_iFRSnHrw.roa (hash: q/v7MQox/nq9r/rZ534FmTQXSTW9buaaFYPj+WtYk78=)
5: Q5hESTZfbwdELtpLu27GaP7-Lno.roa (hash: ObHNDf8xA8n0C2IML/LhP97ggga61XCUWT978woHwn0=)
6: ZKLNMt3VfAzRkdvHr5Xd6gL_UHI.roa (hash: MwQzyqB63sngmzcWgEGwpFF72y7jC9kNOl+3Zg+6fcs=)
7: fKYfVT1YDQ8JUaTATaBTlPz4QNw.roa (hash: oYpajimnxUNbsLq6vnCVkRjpUdwX5aoikIaxhzhw2Vw=)
8: qK_PP9-atac9mTKlNBkq0IeVJSc.roa (hash: 7XIhv4ZG0yNjDke4N6v5k/ztyTTS+fsvn2uOI243g1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:f3:07:30:ef:93:96:11:56:63:fc:ea:73:30:44:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Jun 6 08:00:55 2026 GMT
Not After : Jun 7 08:00:55 2026 GMT
Subject: CN=b7a448eb72f18401f200569e0c60bd909611f9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:78:ba:74:58:81:da:f9:9d:df:e9:08:e2:43:
37:7e:c3:5d:21:25:89:7d:a9:d6:79:e7:4d:ab:47:
40:85:e5:2b:ee:eb:01:5c:b2:7b:16:52:42:4d:4f:
bc:62:74:ef:70:18:02:42:e5:bb:bd:c5:6f:ec:7d:
40:9b:1c:a3:04:28:92:24:07:d0:ea:e5:f3:96:8a:
d2:e7:e9:a6:ea:c8:24:f3:c0:8e:b3:04:cb:bd:ef:
be:67:40:c9:3a:19:ed:10:b0:f6:06:08:85:5c:e6:
3f:78:c1:33:a4:5e:e5:e2:31:5d:0f:12:47:96:f5:
de:e6:63:f7:ee:5e:c7:3c:f6:18:ea:15:00:d6:c5:
9f:75:bc:0f:3d:97:fc:4b:4d:3f:e4:7c:7f:21:b9:
b8:d7:a4:05:d5:9d:94:85:fe:8f:5e:dc:af:89:f4:
89:9f:6d:7a:92:40:67:c4:27:24:6f:5d:3d:71:72:
28:ae:93:1d:86:18:ec:4a:f9:01:c4:ca:f1:20:24:
98:07:0e:4b:9f:4e:1c:27:19:02:39:e4:21:31:50:
e9:40:e6:42:84:f4:44:6a:3f:b0:9b:f6:f5:5c:b9:
ac:b3:2d:a1:02:3c:e8:00:5d:ff:60:9c:42:d1:4b:
bd:60:0b:6d:47:d4:8f:14:56:9f:06:df:a9:c2:83:
78:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A4:48:EB:72:F1:84:01:F2:00:56:9E:0C:60:BD:90:96:11:F9:F5
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:bb:bb:ff:9a:85:0d:69:d8:16:65:66:ed:91:93:49:16:cf:
9b:7f:40:74:11:4a:9d:d5:3b:93:ad:71:f9:31:39:df:36:0f:
6f:37:98:f3:70:74:e5:33:48:bb:cd:06:bb:b5:89:03:c7:73:
2f:08:7b:7b:a9:b2:51:5c:1e:f5:30:b7:fd:7b:be:1e:04:33:
d4:81:cb:23:32:ae:13:d3:ce:8e:19:55:c6:ea:28:59:c5:cd:
a1:0e:4c:71:8c:cd:f9:60:41:b1:34:6b:d4:f7:4a:c6:57:4b:
cd:99:30:d9:77:a0:c9:e8:93:98:b7:07:b5:05:8a:19:56:0c:
e2:72:1d:ba:ec:00:47:45:1e:13:10:e2:a8:fe:2a:ef:95:39:
59:48:fc:6b:56:4e:7c:06:a9:ea:1b:2a:28:8b:07:d7:a8:9c:
ff:d6:9b:d0:ac:89:27:cb:2a:7c:fd:91:2f:19:e6:19:3b:2f:
ff:38:13:84:f3:4a:fe:d8:fd:72:c7:c2:24:df:e9:a4:be:eb:
d5:2e:0a:bb:dd:4a:60:1d:95:2d:74:31:1c:a0:1e:7f:8e:ee:
b9:23:54:aa:ef:c3:ef:69:4e:47:3b:0d:fb:4c:11:aa:60:c3:
2b:7c:aa:68:f9:cc:21:46:37:ad:c0:10:32:6a:94:31:bd:82:
86:33:70:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6b8wcw75OWEVZj/OpzMEQgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMTRhN2UyYThjNzAxMjMyNWFlOTczZWQxYTJiYmEwNWIy
YmI5YzEwHhcNMjYwNjA2MDgwMDU1WhcNMjYwNjA3MDgwMDU1WjAzMTEwLwYDVQQD
EyhiN2E0NDhlYjcyZjE4NDAxZjIwMDU2OWUwYzYwYmQ5MDk2MTFmOWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXi6dFiB2vmd3+kI4kM3fsNdISWJ
fanWeedNq0dAheUr7usBXLJ7FlJCTU+8YnTvcBgCQuW7vcVv7H1AmxyjBCiSJAfQ
6uXzlorS5+mm6sgk88COswTLve++Z0DJOhntELD2BgiFXOY/eMEzpF7l4jFdDxJH
lvXe5mP37l7HPPYY6hUA1sWfdbwPPZf8S00/5Hx/Ibm416QF1Z2Uhf6PXtyvifSJ
n216kkBnxCckb109cXIorpMdhhjsSvkBxMrxICSYBw5Ln04cJxkCOeQhMVDpQOZC
hPREaj+wm/b1XLmssy2hAjzoAF3/YJxC0Uu9YAttR9SPFFafBt+pwoN4lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLekSOty8YQB8gBWngxgvZCWEfn1MB8GA1UdIwQY
MBaAFBIUp+KoxwEjJa6XPtGiu6BbK7nBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQt
ZTljMzY0OWMxMjE4LzEvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQtZTljMzY0OWMxMjE4
LzEvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU7u7/5qF
DWnYFmVm7ZGTSRbPm39AdBFKndU7k61x+TE53zYPbzeY83B05TNIu80Gu7WJA8dz
Lwh7e6myUVwe9TC3/Xu+HgQz1IHLIzKuE9POjhlVxuooWcXNoQ5McYzN+WBBsTRr
1PdKxldLzZkw2XegyeiTmLcHtQWKGVYM4nIduuwAR0UeExDiqP4q75U5WUj8a1ZO
fAap6hsqKIsH16ic/9ab0KyJJ8sqfP2RLxnmGTsv/zgThPNK/tj9csfCJN/ppL7r
1S4Ku91KYB2VLXQxHKAef47uuSNUqu/D72lORzsN+0wRqmDDK3yqaPnMIUY3rcAQ
MmqUMb2ChjNwOQ==
-----END CERTIFICATE-----
Generated at Sat Jun 6 13:14:55 2026 by rpki-client