Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
File: EHMSpQFqPNzAt-Ydx59V09Xss34.mft (raw, json)
Hash identifier: njLtVgww2sLroZde50LtT8kU24rS3J69VCBHo8Nr+Mk=
Subject key identifier: 00:02:9D:DB:CF:60:56:0D:65:16:1F:F8:E9:04:EF:DF:FC:54:F7:04
Authority key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
Certificate issuer: /CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Certificate serial: 01A13D817CF878AD6B17FDB8AAA9EAEB4B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
Manifest number: 17AE
Signing time: Thu 15 Oct 2026 03:00:58 +0000
Manifest this update: Thu 15 Oct 2026 03:00:58 +0000
Manifest next update: Fri 16 Oct 2026 03:00:58 +0000
Files and hashes: 1: 9EbWOWRofqpIjBa4vozEsoLxjYM.roa (hash: x7SOGLYmI9OiM+ggvSbmLAxdesreHqxj6Es4xw9IiFM=)
2: EHMSpQFqPNzAt-Ydx59V09Xss34.crl (hash: KBGOQkQPM/DYidl9ZhVyMIPRsX/Y/Ou9zRr4YKEaViA=)
3: bzC7j0omLj_YNcYGEgPw6KsNGos.roa (hash: JbFBMLyqogdNayBZyhkASdXp//+KG+bIXMjX3s0pjGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:7c:f8:78:ad:6b:17:fd:b8:aa:a9:ea:eb:4b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Validity
Not Before: Oct 15 03:00:58 2026 GMT
Not After : Oct 16 03:00:58 2026 GMT
Subject: CN=00029ddbcf60560d65161ff8e904efdffc54f704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1b:76:d3:73:8a:a2:5f:6b:f5:65:e1:f5:7f:
cf:5e:f6:cf:0d:23:94:0e:f4:4e:47:f2:85:b8:9d:
15:2e:e9:d5:eb:17:aa:62:5b:82:33:97:01:8f:ca:
8e:83:04:67:be:38:2a:26:22:24:aa:77:a1:97:91:
49:2b:f8:3f:4a:9e:08:d9:b7:86:f2:a7:99:3e:24:
00:fa:3f:80:9a:1f:99:77:d1:1b:f8:81:d7:c2:85:
bc:ad:f7:6d:84:50:84:a1:7a:93:16:23:33:da:38:
cb:bb:01:24:c4:0e:fe:bf:77:af:c8:e3:13:1a:f0:
a1:14:e7:5a:98:7b:a6:ef:9a:3c:fe:a9:bb:d7:af:
c1:e5:67:63:e4:15:88:ea:3a:a5:32:a2:31:7a:3e:
db:72:7b:8d:29:f8:10:3a:f7:0e:e4:aa:f5:3b:29:
36:fc:e9:cf:78:5e:43:6c:19:60:6e:f0:a2:c6:76:
cf:1e:78:89:71:12:bb:46:6a:ec:2a:f2:3f:91:12:
9a:71:db:15:2b:e4:cf:b3:40:ec:17:c7:4a:c1:86:
58:51:ab:7e:a1:8d:a9:35:9e:e0:cc:7d:99:59:6e:
d5:20:ec:f9:69:09:ea:17:c1:6f:63:0e:d4:f4:2c:
38:bd:41:22:59:d4:3d:55:15:b2:91:f9:87:06:f8:
00:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:02:9D:DB:CF:60:56:0D:65:16:1F:F8:E9:04:EF:DF:FC:54:F7:04
X509v3 Authority Key Identifier:
keyid:10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:a3:78:70:c6:ed:5d:e7:83:52:d7:2c:92:8c:07:00:57:8a:
46:59:ee:c2:46:11:4e:b0:3b:59:11:b8:2c:c8:d4:ad:a3:6d:
60:c7:5a:1c:ab:2c:6a:53:55:78:06:eb:93:0d:c4:5c:d7:3d:
db:63:bc:c4:68:e9:5d:11:db:09:03:ae:9a:eb:32:16:e5:0c:
f4:ed:ff:fe:a7:0c:af:1b:98:b6:92:6b:0d:51:fe:c2:9e:c9:
96:dd:ba:8f:f7:54:39:29:e3:32:a9:c4:c6:cd:e7:0e:53:b4:
5b:94:cf:fe:58:9f:8e:92:ef:04:38:d1:3f:fe:57:90:04:8f:
91:21:dc:ed:94:d1:cc:16:79:c3:cb:84:19:b8:06:25:4b:1b:
9c:5a:b4:5a:19:6f:4a:4d:50:c8:77:7a:fa:57:a1:96:8b:88:
bb:c5:8e:72:5e:ae:ae:1d:22:8f:a2:d5:b6:53:4e:7f:a7:9c:
79:20:4a:13:0b:1c:c1:1c:89:bc:56:0d:cc:d8:90:a1:9d:86:
a7:b4:fc:55:b9:18:82:91:25:6c:b4:ae:c3:bd:d6:65:d1:a6:
e4:23:bb:36:68:7d:cc:84:c5:13:8b:9d:38:f0:ec:20:8a:5e:
56:18:74:d6:21:f8:01:f1:00:b6:13:bb:4b:97:8d:04:fd:2f:
1d:47:96:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9gXz4eK1rF/24qqnq60sbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzMxMmE1MDE2YTNjZGNjMGI3ZTYxZGM3OWY1NWQzZDVl
Y2IzN2UwHhcNMjYxMDE1MDMwMDU4WhcNMjYxMDE2MDMwMDU4WjAzMTEwLwYDVQQD
EygwMDAyOWRkYmNmNjA1NjBkNjUxNjFmZjhlOTA0ZWZkZmZjNTRmNzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xt203OKol9r9WXh9X/PXvbPDSOU
DvROR/KFuJ0VLunV6xeqYluCM5cBj8qOgwRnvjgqJiIkqnehl5FJK/g/Sp4I2beG
8qeZPiQA+j+Amh+Zd9Eb+IHXwoW8rfdthFCEoXqTFiMz2jjLuwEkxA7+v3evyOMT
GvChFOdamHum75o8/qm716/B5Wdj5BWI6jqlMqIxej7bcnuNKfgQOvcO5Kr1Oyk2
/OnPeF5DbBlgbvCixnbPHniJcRK7RmrsKvI/kRKacdsVK+TPs0DsF8dKwYZYUat+
oY2pNZ7gzH2ZWW7VIOz5aQnqF8FvYw7U9Cw4vUEiWdQ9VRWykfmHBvgAvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAACndvPYFYNZRYf+OkE79/8VPcEMB8GA1UdIwQY
MBaAFBBzEqUBajzcwLfmHcefVdPV7LN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhNU3BRRnFQTnpBdC1ZZHg1OVYwOVhzczM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC85OWY1YzMtNmI3NS00OGJjLWE4YWEt
M2ZkYmE5NzY5MzAyLzEvRUhNU3BRRnFQTnpBdC1ZZHg1OVYwOVhzczM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC85OWY1YzMtNmI3NS00OGJjLWE4YWEtM2ZkYmE5NzY5MzAy
LzEvRUhNU3BRRnFQTnpBdC1ZZHg1OVYwOVhzczM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0KN4cMbt
XeeDUtcskowHAFeKRlnuwkYRTrA7WRG4LMjUraNtYMdaHKssalNVeAbrkw3EXNc9
22O8xGjpXRHbCQOumusyFuUM9O3//qcMrxuYtpJrDVH+wp7Jlt26j/dUOSnjMqnE
xs3nDlO0W5TP/lifjpLvBDjRP/5XkASPkSHc7ZTRzBZ5w8uEGbgGJUsbnFq0Whlv
Sk1QyHd6+lehlouIu8WOcl6urh0ij6LVtlNOf6eceSBKEwscwRyJvFYNzNiQoZ2G
p7T8VbkYgpElbLSuw73WZdGm5CO7Nmh9zITFE4udOPDsIIpeVhh01iH4AfEAthO7
S5eNBP0vHUeWeA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 12:34:43 2026 by rpki-client