Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
File: EHQA5PCchADaMYvWywP9XFSqqfE.mft (raw, json)
Hash identifier: PQ6PkrebjuFSOJ6o2ltN5N+YAdg6pzW+HX0Sx8QGM+M=
Subject key identifier: F6:F2:EA:D5:5F:F1:B3:01:0E:96:3C:09:98:26:5F:13:E0:A3:09:03
Authority key identifier: 10:74:00:E4:F0:9C:84:00:DA:31:8B:D6:CB:03:FD:5C:54:AA:A9:F1
Certificate issuer: /CN=107400e4f09c8400da318bd6cb03fd5c54aaa9f1
Certificate serial: 019FA003E4B8E42A39DBD1244083499087CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
Manifest number: 022E
Signing time: Sun 26 Jul 2026 20:00:37 +0000
Manifest this update: Sun 26 Jul 2026 20:00:37 +0000
Manifest next update: Mon 27 Jul 2026 20:00:37 +0000
Files and hashes: 1: EHQA5PCchADaMYvWywP9XFSqqfE.crl (hash: rMk7e/kZ579FLXmqDC8AmGcTtuFl+mGspie62TQlF04=)
2: OGjeDErcHRCzEaNJIlL9WLO39x0.asa (hash: twryuu4Niufwid1brPkWkntu7TTmLytf1vNFmmKb5Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 15:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:03:e4:b8:e4:2a:39:db:d1:24:40:83:49:90:87:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107400e4f09c8400da318bd6cb03fd5c54aaa9f1
Validity
Not Before: Jul 26 20:00:37 2026 GMT
Not After : Jul 27 20:00:37 2026 GMT
Subject: CN=f6f2ead55ff1b3010e963c0998265f13e0a30903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f8:0f:70:10:be:9e:5c:02:97:ea:17:4f:18:
bc:af:2c:d9:0a:c6:92:cd:00:b9:4d:c4:8a:08:38:
63:33:93:57:df:49:bd:6e:71:47:b1:a0:7c:e5:e1:
6d:ea:f5:63:b2:88:82:d8:97:3e:b2:c2:c2:3d:29:
11:f9:8e:eb:75:6a:af:24:64:4d:d3:db:bb:75:2e:
df:03:5e:af:0a:51:c5:60:bd:37:e9:91:ea:b4:aa:
e1:2c:c7:9b:de:79:4f:be:e6:5b:3d:0c:8f:76:33:
97:db:b3:96:4d:fa:77:88:90:af:06:63:5a:9f:4f:
96:b5:c1:e3:ef:75:e9:d5:86:63:4e:4b:a9:df:13:
c6:a8:c0:27:dd:a2:2c:b9:20:05:3d:25:c2:23:d2:
f1:b1:6f:14:bb:01:d9:c8:ad:1f:58:f3:59:5f:15:
c1:31:54:b1:26:03:2a:17:5e:61:f8:c3:bd:c8:c2:
0b:86:18:7a:c3:af:67:95:ec:d5:a1:7c:29:3d:df:
1f:08:1a:93:b8:11:e5:ba:70:2f:f4:03:7d:e7:17:
1a:d7:bf:f2:a9:00:9a:ad:c0:7c:82:10:60:11:0e:
e9:87:2e:4a:f4:b0:65:83:4c:88:d6:61:34:a1:5e:
c1:0c:4d:11:c5:d1:74:cb:51:a6:98:d6:0b:08:c7:
98:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F2:EA:D5:5F:F1:B3:01:0E:96:3C:09:98:26:5F:13:E0:A3:09:03
X509v3 Authority Key Identifier:
keyid:10:74:00:E4:F0:9C:84:00:DA:31:8B:D6:CB:03:FD:5C:54:AA:A9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:5a:e4:48:a1:4e:c5:7a:ab:6e:87:97:03:41:2e:67:aa:e5:
52:62:93:fe:0a:71:16:c9:83:2d:93:f6:5f:e8:7b:53:e0:79:
f3:f6:67:be:29:b1:5e:34:de:9b:84:85:94:80:48:aa:b1:5c:
9e:a5:61:72:63:95:77:a2:d8:03:d4:24:45:54:49:1e:46:00:
8a:32:5f:61:08:eb:5f:3d:f8:bd:a9:1f:79:f2:a6:52:82:bd:
79:55:3e:00:81:18:4b:93:8a:ac:9f:57:51:d6:59:82:c5:57:
d9:82:7c:77:61:14:28:78:92:6c:35:55:83:ea:93:9f:cc:26:
35:33:6b:79:b3:7a:ca:ca:23:21:e4:e3:9b:12:77:ed:31:b0:
4e:09:08:7b:f2:71:38:b6:3f:0f:76:b0:79:55:03:80:f6:bd:
4b:1d:12:d5:a0:45:de:98:28:4c:af:20:a8:78:20:7e:4e:0f:
f2:bd:ca:4e:53:e5:03:31:52:47:93:1d:ff:52:f0:00:cc:e6:
81:41:b4:6e:98:99:f5:9d:db:37:83:ec:12:9b:90:0b:b6:87:
51:21:f8:14:64:aa:5a:a6:f8:d1:36:4b:f6:e1:28:57:b0:5c:
8f:62:27:6f:4c:7c:db:50:99:d6:97:25:42:fd:7f:aa:26:12:
1d:8d:61:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:32:45 2026 by rpki-client