Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
File: EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft (raw, json)
Hash identifier: nEzuyWC0yi1Mo8dVNnDXnuttmyDth3TtLI/FqdRT9M8=
Subject key identifier: 0A:E3:5F:C6:B2:9C:D0:2C:BA:25:81:12:D1:7D:18:C7:AC:C6:E1:69
Authority key identifier: 10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8
Certificate issuer: /CN=10768d39f932791007a097209b0983fe85560cb8
Certificate serial: 01A14918025D8C990195E901D18D61A08DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
Manifest number: 1AA9
Signing time: Sat 17 Oct 2026 09:01:12 +0000
Manifest this update: Sat 17 Oct 2026 09:01:12 +0000
Manifest next update: Sun 18 Oct 2026 09:01:12 +0000
Files and hashes: 1: EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl (hash: mQjgUHcDFgISWiE+3vpLCvqWTaPlffGY4E/hsxRWLJQ=)
2: sqH83fgWI2QXk67gXVqCFnY0PdM.roa (hash: Fkz5KCAQSTZpnaesgT+1Nr19dyLfyU9fM4+AXXInAiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:18:02:5d:8c:99:01:95:e9:01:d1:8d:61:a0:8d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10768d39f932791007a097209b0983fe85560cb8
Validity
Not Before: Oct 17 09:01:12 2026 GMT
Not After : Oct 18 09:01:12 2026 GMT
Subject: CN=0ae35fc6b29cd02cba258112d17d18c7acc6e169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:67:d6:3f:af:6a:d4:15:9f:55:7a:2e:4e:00:
61:2a:3a:c1:16:9c:f3:a5:1e:65:f3:55:be:d8:86:
d3:e7:6d:4b:fe:0d:0d:f7:77:2c:7f:c4:96:8f:6f:
20:9e:3e:e0:da:0d:ed:be:80:0a:1a:d8:46:d9:db:
9c:a5:d0:eb:fc:f6:f4:55:b4:74:52:60:8b:d9:3a:
66:c2:65:ea:7f:27:df:b9:0c:0b:6c:fa:fc:16:0d:
af:3c:82:12:08:8e:2f:ed:0b:97:4b:13:ba:de:e3:
2d:63:1e:7b:5a:2e:19:9c:a0:12:d4:94:5f:ba:e7:
ae:a6:4e:1a:0f:12:e1:51:5f:14:41:55:4e:31:77:
02:be:82:f2:e3:52:b4:92:cd:76:67:63:6f:c3:a5:
dc:07:ee:98:f5:ec:c3:8e:18:c0:9f:b2:0e:d9:5d:
8f:8a:64:c3:c4:ff:93:f5:76:f3:d5:8d:7a:cd:c6:
bc:72:54:fa:d1:10:19:45:ca:69:c1:ba:29:85:2b:
ec:37:b3:26:7d:e5:c7:db:de:78:73:fa:8a:a2:3a:
38:f9:9a:d6:9a:6d:89:d1:a6:2b:4c:e7:6a:e7:e0:
46:4a:a9:29:b8:b8:cc:a3:b5:c0:9c:36:a4:91:52:
26:42:65:d7:25:b4:5e:c7:c2:95:28:3a:95:5d:cf:
1b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E3:5F:C6:B2:9C:D0:2C:BA:25:81:12:D1:7D:18:C7:AC:C6:E1:69
X509v3 Authority Key Identifier:
keyid:10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ff:4b:72:bb:dd:dd:d8:2b:d0:98:4b:07:f4:37:55:7d:27:
63:8b:b8:04:c8:35:95:fe:87:d2:77:cf:70:1e:af:87:b0:16:
b9:f5:a1:3c:8f:df:3f:8c:da:a7:6b:79:57:58:c7:e1:46:fb:
94:c2:8d:f2:5d:3b:5a:f2:06:01:9a:8f:d7:f3:9b:33:6b:64:
73:2a:70:a5:6f:11:54:38:42:08:66:69:0d:d0:0f:4f:f2:99:
44:f3:73:c5:f6:49:59:ee:36:a0:10:65:67:93:54:32:a8:b2:
95:9f:22:00:f0:4d:07:bf:aa:f4:a5:a2:c2:a9:e8:13:64:70:
96:47:2c:e8:c6:8b:ce:f7:d2:cd:2e:34:4e:5c:68:3e:04:f7:
30:9a:53:52:a0:c5:33:d0:ba:76:16:15:4e:c0:0c:10:9a:e8:
03:68:13:0a:28:18:cd:24:13:56:9e:99:81:2c:fa:32:bf:43:
fc:fb:f5:39:b3:3e:36:f6:ad:5b:13:51:3a:10:dd:6f:30:68:
d9:cd:b5:0f:fc:18:3a:9f:6e:fd:6d:9e:a1:29:eb:ef:1c:5a:
5a:c5:70:9d:5d:76:f3:fb:97:4b:be:d8:6e:74:48:ee:eb:6e:
b8:3e:14:bb:34:df:a5:a7:b4:c6:2c:db:ec:ea:76:74:eb:ed:
ec:ce:8b:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFJGAJdjJkBlekB0Y1hoI2xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzY4ZDM5ZjkzMjc5MTAwN2EwOTcyMDliMDk4M2ZlODU1
NjBjYjgwHhcNMjYxMDE3MDkwMTEyWhcNMjYxMDE4MDkwMTEyWjAzMTEwLwYDVQQD
EygwYWUzNWZjNmIyOWNkMDJjYmEyNTgxMTJkMTdkMThjN2FjYzZlMTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWfWP69q1BWfVXouTgBhKjrBFpzz
pR5l81W+2IbT521L/g0N93csf8SWj28gnj7g2g3tvoAKGthG2ducpdDr/Pb0VbR0
UmCL2TpmwmXqfyffuQwLbPr8Fg2vPIISCI4v7QuXSxO63uMtYx57Wi4ZnKAS1JRf
uueupk4aDxLhUV8UQVVOMXcCvoLy41K0ks12Z2Nvw6XcB+6Y9ezDjhjAn7IO2V2P
imTDxP+T9Xbz1Y16zca8clT60RAZRcppwbophSvsN7MmfeXH2954c/qKojo4+ZrW
mm2J0aYrTOdq5+BGSqkpuLjMo7XAnDakkVImQmXXJbRex8KVKDqVXc8b8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArjX8aynNAsuiWBEtF9GMesxuFpMB8GA1UdIwQY
MBaAFBB2jTn5MnkQB6CXIJsJg/6FVgy4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhhTk9ma3llUkFIb0pjZ213bURfb1ZXRExnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85M2MxN2UtODQ5MC00ZTkxLTk4MTUt
NzJjMzNkYWYzMTU2LzEvRUhhTk9ma3llUkFIb0pjZ213bURfb1ZXRExnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy85M2MxN2UtODQ5MC00ZTkxLTk4MTUtNzJjMzNkYWYzMTU2
LzEvRUhhTk9ma3llUkFIb0pjZ213bURfb1ZXRExnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgf9Lcrvd
3dgr0JhLB/Q3VX0nY4u4BMg1lf6H0nfPcB6vh7AWufWhPI/fP4zap2t5V1jH4Ub7
lMKN8l07WvIGAZqP1/ObM2tkcypwpW8RVDhCCGZpDdAPT/KZRPNzxfZJWe42oBBl
Z5NUMqiylZ8iAPBNB7+q9KWiwqnoE2Rwlkcs6MaLzvfSzS40TlxoPgT3MJpTUqDF
M9C6dhYVTsAMEJroA2gTCigYzSQTVp6ZgSz6Mr9D/Pv1ObM+NvatWxNROhDdbzBo
2c21D/wYOp9u/W2eoSnr7xxaWsVwnV128/uXS77YbnRI7utuuD4UuzTfpae0xizb
7Op2dOvt7M6Lvg==
-----END CERTIFICATE-----
Generated at Sat Oct 17 12:15:36 2026 by rpki-client