Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
File: EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft (raw, json)
Hash identifier: UH61rzmaxPgOggA5BCAYy7KQMVAyyYCiAnp8K914scE=
Subject key identifier: EE:94:28:B5:4A:0F:18:EB:80:4D:1D:B0:A6:86:F9:4C:5A:AA:3D:AB
Authority key identifier: 10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8
Certificate issuer: /CN=10768d39f932791007a097209b0983fe85560cb8
Certificate serial: 019D382E0E14E154C01F0ADCC37E8CB5F074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 06:00:35 +0000
Manifest this update: Sun 29 Mar 2026 06:00:35 +0000
Manifest next update: Mon 30 Mar 2026 06:00:35 +0000
Files and hashes: 1: EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl (hash: JB9udq0v9fpsjM4M1RvLb+KTZ1PQXT0Om/10ds6ICi8=)
2: sqH83fgWI2QXk67gXVqCFnY0PdM.roa (hash: Fkz5KCAQSTZpnaesgT+1Nr19dyLfyU9fM4+AXXInAiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:0e:14:e1:54:c0:1f:0a:dc:c3:7e:8c:b5:f0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10768d39f932791007a097209b0983fe85560cb8
Validity
Not Before: Mar 29 06:00:35 2026 GMT
Not After : Mar 30 06:00:35 2026 GMT
Subject: CN=ee9428b54a0f18eb804d1db0a686f94c5aaa3dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:73:d8:68:3c:02:79:d8:9f:c1:f3:32:48:81:
1c:ed:4e:fe:cf:49:dc:82:8f:0a:79:19:c8:a6:71:
a9:f2:ce:84:c1:db:70:0d:05:a9:a4:2e:d3:0d:3e:
f9:f9:1c:7e:47:6c:cb:ac:aa:88:e1:0b:b3:cb:58:
c3:16:ce:d3:08:72:28:73:0f:d9:70:4f:5e:2d:06:
7f:4c:94:84:83:0e:ff:34:df:45:65:47:25:09:54:
da:b1:3b:9d:aa:8d:7b:dc:10:92:fc:33:15:06:2b:
13:71:65:fb:53:b1:6f:bb:67:32:70:7c:56:2b:1b:
68:3c:a2:e2:cf:33:0c:e9:f5:c4:a9:63:ac:76:e1:
88:b4:57:a7:46:69:04:f7:3a:63:70:d2:dc:83:21:
f9:ac:96:7c:72:7c:f4:ac:51:3d:72:5e:e4:01:8e:
54:a1:25:32:5d:b1:59:02:8f:f4:2c:59:46:82:99:
22:ec:5f:53:af:8d:93:d8:0f:27:62:aa:c5:42:7c:
50:34:ca:d6:41:ee:80:04:56:54:f9:c1:00:ac:2f:
1a:2c:63:a2:f2:f9:9c:b9:f6:7b:0b:65:56:c6:d7:
7b:68:6e:76:21:5c:bf:7b:e1:4f:56:3d:c3:cd:20:
c9:86:5d:80:54:85:e5:b4:d2:d7:f9:c7:02:9e:ab:
d6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:94:28:B5:4A:0F:18:EB:80:4D:1D:B0:A6:86:F9:4C:5A:AA:3D:AB
X509v3 Authority Key Identifier:
keyid:10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:72:51:71:c0:d9:9c:34:a5:5c:89:1d:f9:79:5a:b5:59:6a:
c1:96:a9:e3:e8:03:75:7e:63:7c:26:2e:e7:d5:74:43:36:8f:
c8:6b:d6:a7:aa:22:86:4f:7e:03:e0:45:96:e1:a8:8d:79:09:
5c:95:4d:f7:92:4e:ce:58:e8:74:64:d0:c2:19:29:75:32:72:
03:53:13:d2:d5:14:67:d5:3e:b9:ca:19:8d:ec:41:a5:8a:ed:
a1:a2:e4:20:33:08:b6:bd:02:6c:c0:32:07:44:20:ee:05:51:
5a:ff:0a:74:f4:c0:cc:8f:52:0c:26:2c:69:d8:de:d7:73:c4:
b1:c7:35:69:af:9e:d1:4f:8b:c6:e5:b0:fb:f7:e6:66:e8:1c:
28:8c:a7:7c:01:7c:3c:a2:29:d2:67:89:16:9c:b1:af:6c:85:
01:f9:c7:0d:7e:6f:b5:36:54:e5:83:52:68:26:bb:08:12:9a:
11:86:ad:f0:1b:0b:f9:80:43:47:01:63:26:a3:a3:8f:be:1d:
67:7d:1d:c4:ef:21:fc:7d:68:99:8d:4a:c7:9f:7e:da:01:11:
e7:b6:fc:b8:61:21:99:ef:17:3a:c4:91:9a:4b:83:da:06:48:
a0:f2:35:94:d6:e7:ac:33:86:f7:18:e4:3d:44:fd:67:7f:2e:
d4:48:db:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:22 2026 by rpki-client