Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
File: EHTblkAv9c8YdWRWDqjxPu61_-s.mft (raw, json)
Hash identifier: dxN+Jo85nzrY4Ht23WmX0kPRtt12v7HzYR3B8b6r6dU=
Subject key identifier: 4D:76:40:C8:42:E3:E3:5B:76:E7:B0:7E:C1:DA:73:3B:E9:BD:4D:CD
Authority key identifier: 10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
Certificate issuer: /CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Certificate serial: 01A181BDDD1F4F8E8E7C60AB30AE6682DCA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
Manifest number: 1B09
Signing time: Wed 28 Oct 2026 09:01:06 +0000
Manifest this update: Wed 28 Oct 2026 09:01:06 +0000
Manifest next update: Thu 29 Oct 2026 09:01:06 +0000
Files and hashes: 1: EHTblkAv9c8YdWRWDqjxPu61_-s.crl (hash: RAxHOMugWWJb34PiPAmkVKMBGlL2FZgLNnQ/1IdxYQg=)
2: oGSX6Be2A4gMsymfO3IeIELxVGc.roa (hash: 9nynO0eaDCEM38Kekr3tOs/yAPJlXITpxT9ftUpbs/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:bd:dd:1f:4f:8e:8e:7c:60:ab:30:ae:66:82:dc:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Validity
Not Before: Oct 28 09:01:06 2026 GMT
Not After : Oct 29 09:01:06 2026 GMT
Subject: CN=4d7640c842e3e35b76e7b07ec1da733be9bd4dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:de:65:29:d5:62:b5:86:24:41:d9:e4:6f:53:
c2:11:fe:61:46:8a:f8:41:74:b9:8e:d7:e6:47:4a:
38:e2:ce:f7:c0:6c:4d:be:c8:2d:67:32:f9:40:10:
a7:10:d6:88:ff:bd:12:2c:06:12:b4:05:44:e1:21:
87:d3:d0:69:7b:53:38:31:cd:58:ee:19:cc:91:4e:
6e:e7:bc:14:1f:4d:a2:7d:bc:18:9d:25:1e:c2:0f:
46:9b:07:b0:52:9e:b8:e2:09:93:3d:ed:55:a2:f9:
e7:bf:3a:cd:69:67:74:23:c5:f4:e3:a4:db:00:bd:
85:60:b4:bb:13:9e:eb:65:58:4c:cb:64:30:ce:f4:
3a:48:51:08:1d:cd:42:d5:0f:00:04:23:6f:32:ea:
03:14:2f:66:4b:e8:88:5e:52:52:9d:65:b5:58:8a:
33:56:8a:f7:a7:9f:f6:08:1b:da:42:2f:a2:e5:88:
8a:c8:39:22:28:6a:16:ad:55:97:90:16:95:27:aa:
a7:43:b9:6d:2c:e0:e4:00:ef:35:7c:7b:fb:72:66:
0b:98:6e:6b:fb:ee:50:d1:79:c5:47:e5:b0:8b:01:
71:de:70:23:31:c8:63:c8:87:c0:32:2d:ce:5b:97:
0a:f1:27:6c:74:26:a1:d1:2a:a2:f5:e6:2a:e6:66:
3d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:76:40:C8:42:E3:E3:5B:76:E7:B0:7E:C1:DA:73:3B:E9:BD:4D:CD
X509v3 Authority Key Identifier:
keyid:10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:39:8a:46:57:bf:6c:60:d3:b5:fe:cb:63:49:f8:dc:8c:f2:
fa:0b:ca:8b:b0:4d:7d:c1:82:72:e7:9f:d0:6c:c8:55:c4:d7:
5f:89:d3:29:4b:5f:a2:f3:1a:34:3c:0d:5b:32:c4:48:17:c8:
8a:7e:b6:0c:f5:49:38:28:a5:0f:36:42:dd:13:18:7e:ff:ee:
40:62:fb:4c:d4:d3:f1:97:5b:c5:07:79:26:21:47:ff:01:6c:
7a:bd:42:a9:fd:ba:b0:54:18:6c:90:6c:a7:c8:a0:fc:70:ee:
e0:a6:97:32:e8:f9:b0:4e:0e:ac:6a:0b:81:fa:d6:e2:bb:8f:
13:51:14:55:33:8c:2b:dd:3d:a7:f0:64:31:b5:4a:4c:33:cc:
1c:78:0a:80:8e:eb:b0:a2:18:25:e8:5f:d4:6d:b7:65:b8:b7:
fe:07:37:aa:77:4a:f7:54:51:e0:57:23:b9:27:36:c5:83:c4:
2f:73:cf:0e:37:42:21:f0:18:a2:ea:fc:f7:71:97:7a:2a:65:
a2:f6:f5:29:fe:a5:95:7e:8d:63:0c:22:9c:3d:ed:74:12:2a:
2c:a1:b5:e3:56:d1:dd:d0:79:e0:cc:5c:eb:25:78:3e:76:7c:
26:7c:d7:c7:99:fc:14:96:0d:49:25:79:07:b7:95:e4:70:dd:
34:81:52:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGBvd0fT46OfGCrMK5mgtykMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzRkYjk2NDAyZmY1Y2YxODc1NjQ1NjBlYThmMTNlZWVi
NWZmZWIwHhcNMjYxMDI4MDkwMTA2WhcNMjYxMDI5MDkwMTA2WjAzMTEwLwYDVQQD
Eyg0ZDc2NDBjODQyZTNlMzViNzZlN2IwN2VjMWRhNzMzYmU5YmQ0ZGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA795lKdVitYYkQdnkb1PCEf5hRor4
QXS5jtfmR0o44s73wGxNvsgtZzL5QBCnENaI/70SLAYStAVE4SGH09Bpe1M4Mc1Y
7hnMkU5u57wUH02ifbwYnSUewg9GmwewUp644gmTPe1VovnnvzrNaWd0I8X046Tb
AL2FYLS7E57rZVhMy2QwzvQ6SFEIHc1C1Q8ABCNvMuoDFC9mS+iIXlJSnWW1WIoz
Vor3p5/2CBvaQi+i5YiKyDkiKGoWrVWXkBaVJ6qnQ7ltLODkAO81fHv7cmYLmG5r
++5Q0XnFR+WwiwFx3nAjMchjyIfAMi3OW5cK8SdsdCah0Sqi9eYq5mY96QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE12QMhC4+NbduewfsHaczvpvU3NMB8GA1UdIwQY
MBaAFBB025ZAL/XPGHVkVg6o8T7utf/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhUYmxrQXY5YzhZZFdSV0RxanhQdTYxXy1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8xZTFkNjktMGJmZC00MGFmLTg4YjEt
YWI0MGI1OGEyODkyLzEvRUhUYmxrQXY5YzhZZFdSV0RxanhQdTYxXy1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8xZTFkNjktMGJmZC00MGFmLTg4YjEtYWI0MGI1OGEyODky
LzEvRUhUYmxrQXY5YzhZZFdSV0RxanhQdTYxXy1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVzmKRle/
bGDTtf7LY0n43Izy+gvKi7BNfcGCcuef0GzIVcTXX4nTKUtfovMaNDwNWzLESBfI
in62DPVJOCilDzZC3RMYfv/uQGL7TNTT8ZdbxQd5JiFH/wFser1Cqf26sFQYbJBs
p8ig/HDu4KaXMuj5sE4OrGoLgfrW4ruPE1EUVTOMK909p/BkMbVKTDPMHHgKgI7r
sKIYJehf1G23Zbi3/gc3qndK91RR4FcjuSc2xYPEL3PPDjdCIfAYour893GXeipl
ovb1Kf6llX6NYwwinD3tdBIqLKG141bR3dB54Mxc6yV4PnZ8JnzXx5n8FJYNSSV5
B7eV5HDdNIFS4g==
-----END CERTIFICATE-----
Generated at Wed Oct 28 12:30:14 2026 by rpki-client