Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
File: EhUb9X9TFrLdXNij95hSfqwUt3Q.mft (raw, json)
Hash identifier: 30Y4DSg0CJsd3ANhQ9Eok9gwXIteINjSRX6agTaIIlY=
Subject key identifier: 08:9A:0F:0F:9A:AB:2E:E7:99:9D:B8:03:F1:F3:F5:4F:4F:14:96:30
Authority key identifier: 12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
Certificate issuer: /CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Certificate serial: 01A17D05B81DA052D7067ECCED2419CB96E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
Manifest number: 1A58
Signing time: Tue 27 Oct 2026 11:01:29 +0000
Manifest this update: Tue 27 Oct 2026 11:01:29 +0000
Manifest next update: Wed 28 Oct 2026 11:01:29 +0000
Files and hashes: 1: EhUb9X9TFrLdXNij95hSfqwUt3Q.crl (hash: qRz0vXp1+OUV1eh+g4o8KDFW/0XCF5684NXpTvtKqWc=)
2: cgx3Y5niHaURRA_j2XVnH5snZqE.roa (hash: wvI3PVCUphqU2rq2ZXh+5+5Blo4y6rgwv7y5x6vRtSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:b8:1d:a0:52:d7:06:7e:cc:ed:24:19:cb:96:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Validity
Not Before: Oct 27 11:01:29 2026 GMT
Not After : Oct 28 11:01:29 2026 GMT
Subject: CN=089a0f0f9aab2ee7999db803f1f3f54f4f149630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:aa:da:ef:c8:bf:8d:9f:50:25:87:1e:dc:47:
d4:1a:83:27:2a:24:4b:2c:db:70:08:3c:db:4c:6e:
79:38:cc:5f:92:61:d6:8b:7a:1d:78:45:9f:cb:80:
2d:0a:bd:52:cd:38:d2:f6:24:ed:25:43:4c:02:71:
60:c1:8a:ee:8f:f5:a2:65:4c:be:0b:d2:a3:db:92:
9e:87:25:a7:e6:fb:e6:23:ad:9b:0d:a4:86:99:78:
86:c2:70:73:d4:91:d8:8f:0f:95:39:31:b1:4a:fe:
74:ab:94:74:67:50:5f:b8:98:b1:54:70:82:42:2a:
a6:98:49:94:ee:7d:cd:cc:35:94:b5:c7:23:b8:5a:
c7:ed:36:8d:16:7c:62:5c:c2:c8:27:2d:89:4f:88:
53:7d:87:01:cc:7f:4f:af:df:50:be:98:90:79:00:
3b:d5:db:5a:2f:56:f1:30:3b:9b:25:59:43:1d:94:
dd:93:f4:35:50:fe:35:56:8b:37:44:c8:df:b3:e3:
83:7c:76:b0:a3:a8:44:c0:06:f9:20:cb:d3:9a:63:
7f:e0:05:88:3e:f2:9f:e6:be:80:2b:a2:4c:d3:be:
9b:61:f9:41:33:0e:4a:c9:b9:74:44:1b:92:3c:c8:
c3:ca:75:9b:f5:3e:02:02:54:de:b3:13:5f:18:ff:
0c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9A:0F:0F:9A:AB:2E:E7:99:9D:B8:03:F1:F3:F5:4F:4F:14:96:30
X509v3 Authority Key Identifier:
keyid:12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:01:6a:99:6d:f4:d9:98:ed:5f:b4:3b:8f:6c:d3:84:2a:f4:
4d:b9:39:cb:9a:0e:57:da:7c:fb:16:f9:0e:07:e3:79:70:83:
74:40:b5:63:a6:6b:48:e8:58:53:48:75:a1:08:52:5c:f0:10:
ad:4c:f1:ba:15:81:9e:ec:74:b1:3a:aa:02:05:35:11:23:0e:
6e:cd:9a:3f:4b:6b:71:97:7a:7d:45:78:03:53:9f:0c:13:97:
39:d5:29:1d:c6:dc:aa:ab:34:07:e1:97:f8:d8:35:35:fc:4a:
29:4c:85:9a:e6:9f:cd:79:40:27:a0:d7:5c:49:f2:57:0f:7f:
7e:ce:88:fe:8e:89:5d:11:21:5f:72:dd:82:99:12:f1:f3:c7:
82:e3:b4:0f:75:b6:fa:4b:d3:45:75:5b:e0:46:09:84:de:19:
cb:30:63:db:e8:5a:8c:cb:3e:9b:8b:ad:37:e4:d8:44:98:f6:
25:05:f8:a3:ff:e0:4e:f6:b8:11:15:a7:47:f7:dd:08:89:f4:
dc:f8:37:1a:72:63:a6:f1:55:0c:2d:7c:22:f3:2a:c1:e4:c2:
73:eb:f6:e0:74:b6:d3:94:13:5f:71:52:95:fc:c9:84:b7:8e:
b6:a8:e8:13:45:6b:c9:8a:a7:9d:bd:a9:55:1d:77:71:e1:bc:
c6:ef:1b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:33:29 2026 by rpki-client