Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
File: EHQA5PCchADaMYvWywP9XFSqqfE.mft (raw, json)
Hash identifier: Y2RNnfukob2rDkgnT4oKNmeFyebBUDj6wMSbVNKsQAc=
Subject key identifier: BC:B1:48:4C:F7:F7:3A:13:04:FA:B0:8B:4D:BC:36:CA:9E:D8:47:51
Authority key identifier: 10:74:00:E4:F0:9C:84:00:DA:31:8B:D6:CB:03:FD:5C:54:AA:A9:F1
Certificate issuer: /CN=107400e4f09c8400da318bd6cb03fd5c54aaa9f1
Certificate serial: 01A08B9F7DD06889001493286DB5E32D6E9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
Manifest number: 02A8
Signing time: Thu 10 Sep 2026 14:01:20 +0000
Manifest this update: Thu 10 Sep 2026 14:01:20 +0000
Manifest next update: Fri 11 Sep 2026 14:01:20 +0000
Files and hashes: 1: EHQA5PCchADaMYvWywP9XFSqqfE.crl (hash: Bq25ZSOI6dhRF22Yxeju0v+PmgnkajY/KBcUZIxzmCY=)
2: OGjeDErcHRCzEaNJIlL9WLO39x0.asa (hash: twryuu4Niufwid1brPkWkntu7TTmLytf1vNFmmKb5Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:7d:d0:68:89:00:14:93:28:6d:b5:e3:2d:6e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107400e4f09c8400da318bd6cb03fd5c54aaa9f1
Validity
Not Before: Sep 10 14:01:20 2026 GMT
Not After : Sep 11 14:01:20 2026 GMT
Subject: CN=bcb1484cf7f73a1304fab08b4dbc36ca9ed84751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6e:fe:7a:96:d1:97:0a:7b:27:da:ba:df:cf:
f1:20:04:a3:35:0b:90:5d:0c:0d:bc:2f:05:c8:a4:
bf:13:49:c4:e1:3a:a7:d7:c1:13:06:7f:5a:51:7e:
a7:61:11:7b:8f:88:65:b5:b8:21:27:14:57:22:08:
3f:f9:49:29:69:69:04:d2:c6:fa:e3:43:68:46:fd:
c3:31:7a:3f:24:b9:22:a4:d4:29:5d:2c:f7:d8:4e:
d1:bc:e3:5e:fa:e1:1c:7a:2d:ca:d8:48:fd:25:d8:
58:f0:7a:54:bd:f8:58:b6:c8:5e:aa:28:58:dc:6c:
25:43:6a:26:46:1d:e9:78:44:03:eb:bf:4a:6b:aa:
d7:94:d2:7a:94:4e:3b:1a:10:46:5d:6d:6b:66:e1:
d2:c6:ae:a0:11:a2:80:de:3d:c2:96:42:e2:b7:66:
23:65:49:a0:96:17:7e:64:dc:dc:3e:1a:90:e6:54:
9c:fd:f8:5a:48:56:30:f6:f3:de:92:4b:1b:ee:19:
5a:c8:03:17:b9:8a:4b:a1:d4:65:49:3c:e1:fc:d2:
ff:db:5c:f0:6c:9c:81:d1:20:b9:44:80:9c:99:61:
39:24:0c:57:32:0a:70:a7:d0:cd:60:93:74:26:8c:
9d:f4:a1:0e:2b:db:90:a4:94:ea:f5:19:e1:20:0b:
3c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B1:48:4C:F7:F7:3A:13:04:FA:B0:8B:4D:BC:36:CA:9E:D8:47:51
X509v3 Authority Key Identifier:
keyid:10:74:00:E4:F0:9C:84:00:DA:31:8B:D6:CB:03:FD:5C:54:AA:A9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:54:52:40:a3:45:56:70:fd:dd:d8:2b:49:0d:83:00:ae:9e:
89:36:76:9c:85:f3:d3:b2:45:18:5f:e0:43:92:22:5e:8f:2a:
d9:c5:60:83:8d:69:57:a3:00:44:65:40:ff:e4:c8:54:6c:50:
e1:a1:42:5a:55:bb:ac:1d:0d:40:b2:df:aa:ce:b9:32:f8:98:
cb:b4:19:37:a8:c6:67:b0:a5:44:e6:d4:a6:db:c8:a3:5f:25:
9e:84:89:68:c2:44:1e:68:ea:f7:d4:f8:4b:8d:e6:20:94:ef:
99:ce:6f:f3:c6:c8:43:eb:b1:d4:3d:bc:45:fb:76:b7:d8:2a:
43:9a:39:9a:6e:00:0b:62:04:30:a1:c6:34:d9:e7:e4:e9:eb:
b0:9a:e9:27:5c:3e:58:91:c2:be:96:04:af:ff:c5:e5:d8:a8:
23:83:36:32:31:0a:02:ff:c1:a8:8c:5b:5d:10:d9:4f:07:a1:
cd:6d:9e:13:28:8b:78:7f:32:ba:17:a6:9b:99:e1:2f:78:64:
32:c9:d2:ed:20:7d:01:ee:a1:f3:48:43:20:82:7e:7b:8e:25:
2c:86:cc:54:90:77:50:a7:5d:1d:47:75:78:e2:e5:93:6f:f9:
76:ba:4c:c4:40:14:ce:17:4b:56:cb:aa:fc:17:53:0c:76:c5:
2e:c3:9a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:01:25 2026 by rpki-client