Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
File: EHMSpQFqPNzAt-Ydx59V09Xss34.mft (raw, json)
Hash identifier: PRsUn+WcC3ccU1dtqBbBdKGo7Bc1FeQqtufFmW2MkCs=
Subject key identifier: 1D:CA:0A:99:8C:B7:15:12:33:CD:2C:66:FD:8D:DE:27:5B:9D:4E:59
Authority key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
Certificate issuer: /CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Certificate serial: 019CE7128B70BFAE7CF108A4086DA9BC307A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
Manifest number: 156E
Signing time: Fri 13 Mar 2026 12:01:18 +0000
Manifest this update: Fri 13 Mar 2026 12:01:18 +0000
Manifest next update: Sat 14 Mar 2026 12:01:18 +0000
Files and hashes: 1: 9EbWOWRofqpIjBa4vozEsoLxjYM.roa (hash: x7SOGLYmI9OiM+ggvSbmLAxdesreHqxj6Es4xw9IiFM=)
2: EHMSpQFqPNzAt-Ydx59V09Xss34.crl (hash: cJdEOx/Tzm504cCBDsdPLlMSHjAB26mIoqCB3JfaJGE=)
3: uNs7lPFNPshEKIeKrT9kYzvj6PU.roa (hash: 1d4TVLPu2hGqSAh+/9a4WZpxJbG8fGNAEg4csKG4Azw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:12:8b:70:bf:ae:7c:f1:08:a4:08:6d:a9:bc:30:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Validity
Not Before: Mar 13 12:01:18 2026 GMT
Not After : Mar 14 12:01:18 2026 GMT
Subject: CN=1dca0a998cb7151233cd2c66fd8dde275b9d4e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:9b:a0:11:41:99:f9:d5:6c:88:d5:d2:0f:
c2:03:fe:87:cb:0c:fe:44:e4:33:e3:d8:48:e6:b2:
5e:03:73:5d:9b:d8:29:e8:80:81:88:f4:18:0c:37:
31:15:45:d9:9a:cd:68:e3:ee:e7:56:52:b3:e9:05:
66:23:78:fc:66:4e:f7:2e:3b:64:1d:5c:93:ad:92:
eb:af:9c:0b:31:0a:7a:a4:cf:44:4a:b5:25:85:7d:
fa:7b:a8:1b:ea:11:de:0d:e8:f7:3f:62:15:57:59:
7e:63:d4:9d:e1:b9:c9:e8:1d:b6:74:47:c8:5c:57:
5a:af:31:01:12:b2:44:10:f0:69:34:93:51:f6:58:
79:47:44:a6:62:78:dc:a6:1c:4c:c5:85:23:0f:89:
b2:7b:21:3f:1b:ac:1f:50:b3:61:7f:d2:b1:4c:64:
26:2b:4a:46:f3:50:32:6d:48:e4:cf:3f:a5:c3:8d:
f6:5c:74:00:f5:23:fc:1f:d7:5e:a5:34:85:47:25:
b4:47:5b:b0:58:cd:4d:0d:fc:e6:ef:94:03:86:fc:
c3:48:99:da:a4:eb:67:9a:09:14:81:71:53:83:2f:
c5:37:ee:5f:4f:9e:b3:16:d3:9e:cb:9b:af:31:ec:
47:db:af:f7:4c:d1:31:5c:1e:34:c5:c1:e1:47:a6:
0c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CA:0A:99:8C:B7:15:12:33:CD:2C:66:FD:8D:DE:27:5B:9D:4E:59
X509v3 Authority Key Identifier:
keyid:10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f7:1d:3b:a6:69:cc:76:45:be:ca:31:52:a5:51:06:39:fd:
3b:37:0c:a9:d8:4b:c3:5d:58:35:66:7f:b6:d6:7a:fb:dd:5e:
60:62:a4:9a:1f:85:b0:82:e4:45:bf:be:c7:dc:52:25:0e:ef:
05:88:a2:61:a7:a0:15:42:b5:30:f4:c4:e8:48:52:f6:e2:c3:
8b:81:f4:1c:41:b9:27:4a:b6:84:9a:49:6a:01:a1:5a:12:41:
cf:f6:58:ca:5f:fc:e8:a1:c7:de:e3:88:b2:7c:d5:b5:15:b7:
c1:a2:74:0a:e7:ee:19:cb:a9:51:88:f9:68:f7:ee:d0:d6:b6:
0b:20:45:14:1b:b6:0b:e0:13:02:d8:a9:3b:a3:4e:d5:1a:04:
e6:3a:d3:50:4b:5b:1d:44:98:85:3f:76:69:6a:67:c3:d4:89:
8d:0d:6f:52:2f:d9:18:bc:d0:01:fa:19:41:d9:2c:0e:3b:cd:
96:85:a1:06:89:6e:01:08:6b:8c:94:f7:68:59:39:16:27:e0:
bd:14:00:df:fd:9f:1b:f9:3a:df:0c:b7:ad:73:6e:f1:3f:66:
61:7a:05:be:fc:e7:c5:a3:45:e8:d4:6d:12:55:43:1a:1c:ab:
65:cd:58:8a:06:18:50:4b:7f:43:c3:17:33:04:2e:25:2b:0e:
ff:1f:54:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 18:55:59 2026 by rpki-client