Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
File: EHMSpQFqPNzAt-Ydx59V09Xss34.mft (raw, json)
Hash identifier: kGsBm6HSoq2hVytR82rx2KcR0mu+Vp7rfxbzoiuhoG0=
Subject key identifier: 21:02:43:77:02:B8:30:1B:CE:6E:A4:29:D1:77:82:2D:52:D7:D3:EE
Authority key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
Certificate issuer: /CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Certificate serial: 01A000C9EB886BE64ABA21A1310214588C39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
Manifest number: 170A
Signing time: Fri 14 Aug 2026 15:00:27 +0000
Manifest this update: Fri 14 Aug 2026 15:00:27 +0000
Manifest next update: Sat 15 Aug 2026 15:00:27 +0000
Files and hashes: 1: 9EbWOWRofqpIjBa4vozEsoLxjYM.roa (hash: x7SOGLYmI9OiM+ggvSbmLAxdesreHqxj6Es4xw9IiFM=)
2: EHMSpQFqPNzAt-Ydx59V09Xss34.crl (hash: paGMkaLxGba1e8I4QiC8isVQLHsk5TdWdtVALThsQDQ=)
3: bzC7j0omLj_YNcYGEgPw6KsNGos.roa (hash: JbFBMLyqogdNayBZyhkASdXp//+KG+bIXMjX3s0pjGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:c9:eb:88:6b:e6:4a:ba:21:a1:31:02:14:58:8c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Validity
Not Before: Aug 14 15:00:27 2026 GMT
Not After : Aug 15 15:00:27 2026 GMT
Subject: CN=2102437702b8301bce6ea429d177822d52d7d3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:57:2a:26:0c:59:7e:c6:60:e3:8d:d7:c2:b5:
2f:5c:64:18:93:e2:d2:a8:2e:16:4f:35:92:91:a3:
f8:78:b6:82:4b:8b:67:8d:13:19:1a:42:a4:14:e6:
ab:1b:92:d4:9b:3b:6f:fc:a7:0b:6a:bf:4c:19:6b:
44:4c:4b:9a:16:45:d9:b7:10:e0:b7:b2:7f:d1:37:
3c:ed:01:f7:61:6b:ea:d4:69:3a:43:50:2c:ce:97:
ab:b5:ea:df:8d:b4:b2:9b:21:a2:f6:89:83:2e:0a:
b8:94:c6:96:12:b7:fa:79:ea:3e:f3:ed:55:bf:69:
73:07:4a:df:78:a3:5e:45:37:ec:d0:eb:f8:39:0c:
b9:43:a9:8a:c7:6a:c0:ab:c9:3d:ef:36:45:95:ce:
e5:7d:c6:4d:8c:a7:28:94:a7:a2:15:ca:c9:69:24:
b6:7b:2e:1f:91:0b:ea:35:9f:2b:f7:f6:33:da:44:
b3:b3:f2:51:56:3f:64:09:0a:28:b7:f6:92:d9:b5:
d7:7b:07:a6:4d:1b:42:12:c0:51:49:bf:98:cc:5f:
80:77:26:4a:e8:0a:14:35:cc:f2:d7:a7:53:55:c3:
9c:10:19:8c:ac:09:32:b8:1f:00:bd:39:da:c4:9f:
22:a6:b3:18:63:0a:68:fb:21:ea:65:8f:bb:c4:b1:
bd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:02:43:77:02:B8:30:1B:CE:6E:A4:29:D1:77:82:2D:52:D7:D3:EE
X509v3 Authority Key Identifier:
keyid:10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:6a:b1:5d:20:28:76:d3:d1:a3:52:3a:70:c8:f0:8c:33:bc:
b0:83:9e:8a:ed:36:de:9c:a1:f3:e3:4e:62:a5:cd:cd:0c:5f:
69:19:92:8c:96:b6:b2:f0:4b:e4:8c:ad:80:1e:ea:65:1d:50:
97:5f:1b:a3:16:32:d1:d3:14:89:b7:b6:b7:12:76:f5:2e:86:
6e:84:00:52:c6:ff:aa:54:f4:b8:2f:01:46:a7:10:69:31:fd:
55:ac:81:91:b6:d1:6b:4c:7f:98:9f:66:5a:96:97:98:56:00:
0d:67:81:79:ab:d0:28:7a:ad:c5:90:73:b9:09:f6:78:5a:32:
ce:11:5d:63:85:b8:6d:a9:c6:a1:6a:3c:1d:f0:b1:46:85:92:
8c:18:05:0f:cf:5b:bc:63:b8:c1:e3:bf:ae:f2:63:a7:08:6f:
7f:db:08:db:c5:f9:74:f6:d2:9f:63:13:78:da:31:1e:33:20:
35:10:6d:70:72:7a:1b:e4:d5:b8:d2:b1:d5:62:64:07:99:3f:
b2:a5:ff:0c:59:2f:57:09:45:a5:ca:7b:5b:66:44:bd:de:cc:
78:7d:80:dd:fb:3a:ec:ad:09:a7:98:22:5b:e2:45:ae:27:91:
4a:4b:b5:c9:cb:ae:9f:11:d2:ed:17:f9:ab:34:d9:35:e4:6f:
4d:09:d4:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAyeuIa+ZKuiGhMQIUWIw5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzMxMmE1MDE2YTNjZGNjMGI3ZTYxZGM3OWY1NWQzZDVl
Y2IzN2UwHhcNMjYwODE0MTUwMDI3WhcNMjYwODE1MTUwMDI3WjAzMTEwLwYDVQQD
EygyMTAyNDM3NzAyYjgzMDFiY2U2ZWE0MjlkMTc3ODIyZDUyZDdkM2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1cqJgxZfsZg443XwrUvXGQYk+LS
qC4WTzWSkaP4eLaCS4tnjRMZGkKkFOarG5LUmztv/KcLar9MGWtETEuaFkXZtxDg
t7J/0Tc87QH3YWvq1Gk6Q1AszperterfjbSymyGi9omDLgq4lMaWErf6eeo+8+1V
v2lzB0rfeKNeRTfs0Ov4OQy5Q6mKx2rAq8k97zZFlc7lfcZNjKcolKeiFcrJaSS2
ey4fkQvqNZ8r9/Yz2kSzs/JRVj9kCQoot/aS2bXXewemTRtCEsBRSb+YzF+AdyZK
6AoUNczy16dTVcOcEBmMrAkyuB8AvTnaxJ8iprMYYwpo+yHqZY+7xLG90QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCECQ3cCuDAbzm6kKdF3gi1S19PuMB8GA1UdIwQY
MBaAFBBzEqUBajzcwLfmHcefVdPV7LN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhNU3BRRnFQTnpBdC1ZZHg1OVYwOVhzczM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC85OWY1YzMtNmI3NS00OGJjLWE4YWEt
M2ZkYmE5NzY5MzAyLzEvRUhNU3BRRnFQTnpBdC1ZZHg1OVYwOVhzczM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC85OWY1YzMtNmI3NS00OGJjLWE4YWEtM2ZkYmE5NzY5MzAy
LzEvRUhNU3BRRnFQTnpBdC1ZZHg1OVYwOVhzczM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2qxXSAo
dtPRo1I6cMjwjDO8sIOeiu023pyh8+NOYqXNzQxfaRmSjJa2svBL5IytgB7qZR1Q
l18boxYy0dMUibe2txJ29S6GboQAUsb/qlT0uC8BRqcQaTH9VayBkbbRa0x/mJ9m
WpaXmFYADWeBeavQKHqtxZBzuQn2eFoyzhFdY4W4banGoWo8HfCxRoWSjBgFD89b
vGO4weO/rvJjpwhvf9sI28X5dPbSn2MTeNoxHjMgNRBtcHJ6G+TVuNKx1WJkB5k/
sqX/DFkvVwlFpcp7W2ZEvd7MeH2A3fs67K0Jp5giW+JFrieRSku1ycuunxHS7Rf5
qzTZNeRvTQnUXg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:30 2026 by rpki-client