Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
File: EhUb9X9TFrLdXNij95hSfqwUt3Q.mft (raw, json)
Hash identifier: 7GorIfA5v6QIyFFWKsm07LwKaVJ+hAcJstA5XHKsW14=
Subject key identifier: 18:F6:5C:CD:D3:88:9E:0F:94:BA:95:6F:CF:D2:8C:56:81:99:15:3A
Authority key identifier: 12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
Certificate issuer: /CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Certificate serial: 01A08B9F7EF98E2B373F0A2D250A4BD5573C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
Manifest number: 19DB
Signing time: Thu 10 Sep 2026 14:01:20 +0000
Manifest this update: Thu 10 Sep 2026 14:01:20 +0000
Manifest next update: Fri 11 Sep 2026 14:01:20 +0000
Files and hashes: 1: EhUb9X9TFrLdXNij95hSfqwUt3Q.crl (hash: +HVFHHLyRhUWn5V2QLf0TIrIdN4CZMJGVpzi35+zS3s=)
2: cgx3Y5niHaURRA_j2XVnH5snZqE.roa (hash: wvI3PVCUphqU2rq2ZXh+5+5Blo4y6rgwv7y5x6vRtSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:7e:f9:8e:2b:37:3f:0a:2d:25:0a:4b:d5:57:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Validity
Not Before: Sep 10 14:01:20 2026 GMT
Not After : Sep 11 14:01:20 2026 GMT
Subject: CN=18f65ccdd3889e0f94ba956fcfd28c568199153a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e8:96:c5:07:fa:49:2e:71:52:a0:e4:dc:5f:
20:92:11:2d:6d:d6:77:b7:d5:f2:7f:ed:6e:66:2e:
65:f7:c6:d5:2d:b0:46:79:c5:00:66:07:e8:45:cf:
b1:0e:30:e6:a0:37:4c:6f:b8:3e:2f:8c:16:e8:70:
c8:7a:0b:73:78:bf:14:72:63:18:33:fd:7e:e3:2e:
47:78:99:dd:c2:ae:d2:09:47:0b:75:1c:8f:4f:12:
0c:2e:72:a9:40:80:81:6b:b5:48:31:99:45:d9:6b:
02:57:45:ce:f7:28:47:6c:95:a0:e2:b8:7c:1d:68:
70:78:91:44:25:16:f1:77:50:90:bd:e2:3f:fe:ab:
a4:d9:37:a5:ca:ff:6c:67:4d:8d:18:fa:72:d9:22:
74:a8:fe:e9:d2:d8:e9:ed:94:28:40:48:1c:65:11:
c9:fb:9b:01:e4:f3:91:7f:e3:14:5e:85:8c:4e:89:
78:1b:bb:66:4c:d6:3a:a9:3b:2b:a3:99:dc:1e:53:
dd:81:db:f5:ae:38:e7:59:33:47:a5:4b:d6:d8:cf:
e0:b7:fa:5d:53:6a:2a:6e:72:ba:b7:cf:cc:af:5a:
57:3a:9a:d0:3f:8f:91:dd:13:fc:28:8b:98:c4:b2:
b3:b1:9f:1f:e5:4b:a8:10:65:b2:f1:7a:bd:47:a0:
d2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F6:5C:CD:D3:88:9E:0F:94:BA:95:6F:CF:D2:8C:56:81:99:15:3A
X509v3 Authority Key Identifier:
keyid:12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:30:ff:96:81:92:c5:33:94:5b:2b:71:cd:01:98:4d:7a:32:
6d:cc:75:ab:6b:5f:96:6f:32:66:bc:e3:45:d0:44:11:92:41:
43:1d:a7:6c:36:4b:ba:b4:f3:aa:fc:f9:7a:2a:77:1f:22:aa:
0a:da:6a:d7:b7:dc:5f:d0:07:99:ec:f9:d3:66:9e:e4:17:1b:
94:de:0e:56:be:81:4f:e5:f1:90:ff:20:94:11:8b:f6:e0:f4:
90:77:27:a1:63:cc:7d:9c:a1:d1:f2:e5:8b:94:07:f4:7e:63:
71:cc:a6:53:30:12:d1:40:12:a3:5a:d5:f6:a2:5b:c8:e7:06:
8d:28:64:fc:c2:84:e7:b4:64:dc:fe:b3:63:e6:43:97:4b:e8:
f1:8b:62:30:23:75:ed:10:42:49:da:24:35:12:18:aa:a7:1c:
b6:66:c9:db:db:7e:ba:cd:ab:28:68:48:87:0d:81:e0:59:af:
fe:55:14:03:fd:fc:88:69:70:51:ff:ed:2e:d6:f0:2b:64:e8:
f8:d7:55:aa:be:f5:d6:23:a3:51:76:a2:59:a8:90:23:01:56:
3b:9f:66:32:88:4a:75:f8:dd:80:c9:d2:3a:60:ac:26:71:b8:
95:4c:2a:61:04:38:71:ed:dd:8a:1b:f1:9f:0a:a6:92:aa:b0:
23:0d:81:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:29:00 2026 by rpki-client