Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
File: EharzETJqVVAzfWx3FQux9Ef4Ho.mft (raw, json)
Hash identifier: fEXcdVXcUI0yCERpFAO8etDUD1yu03D/ndAkXS9qSpM=
Subject key identifier: E3:AA:59:6E:30:B3:1F:04:36:CA:40:A1:03:CA:C5:AD:F8:E9:18:BF
Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
Certificate issuer: /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Certificate serial: 019FA1BBC02AEFA5F1DD8356C215C0F9DCCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
Manifest number: 04EB
Signing time: Mon 27 Jul 2026 04:01:03 +0000
Manifest this update: Mon 27 Jul 2026 04:01:03 +0000
Manifest next update: Tue 28 Jul 2026 04:01:03 +0000
Files and hashes: 1: 9V3S7FKC66AOlqD78_S81truyog.roa (hash: zjtnM6n3Uet2Hry92cMihIwePJR9odotoqz4FTgtQpQ=)
2: EharzETJqVVAzfWx3FQux9Ef4Ho.crl (hash: SLHqGXFBTYobfy7Er7Nm1Q0SIOa9Vv5lhxJDjHMAuYE=)
3: Q89cC5EdEYVsTAR7wEMR5rmM-FA.roa (hash: IpAEUAQrDRw1Avy4gtoYvc+jdCy+th+rhrs9OezDlo8=)
4: R6vEKMp8XV0nRsp07cf4y7I04qo.roa (hash: nWBD/KxL+ZqMUbvdWaWo1r7/2jynLrCSHLN52H6UCwM=)
5: XGUIHnWF_LunuxvNcMmR57_WKzo.roa (hash: Gg+yICFewOrJllU9keGQjZ8+O9tNzguLLKLqMVLJpjs=)
6: b1NnfX82WWUKnDzO-T_p9BDnjPM.roa (hash: uuhxZnIOVP3yGkI2POwoZpysQSXnT6B0qJNkc7bJXFw=)
7: fYJN56gNpyjk6FeN9g2u8kda_Ck.roa (hash: 0Bz6iRQD5arZ6ysTUfpQvVjP86yHCsoWY8uCR19q2k4=)
8: iTrKyBgs_fihjw2gMNeMi35dTSA.roa (hash: zNTMLDdPTDqmLO0jhMMrsQBD6z1cOUxn49L1ph7eXpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:c0:2a:ef:a5:f1:dd:83:56:c2:15:c0:f9:dc:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Validity
Not Before: Jul 27 04:01:03 2026 GMT
Not After : Jul 28 04:01:03 2026 GMT
Subject: CN=e3aa596e30b31f0436ca40a103cac5adf8e918bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:aa:3b:e5:1b:d2:4a:b0:f3:3e:e3:fd:65:ee:
7e:65:2e:01:11:4b:63:40:d8:5d:0d:04:84:c0:0b:
5b:b9:84:0a:09:91:b0:85:8b:85:13:47:bd:06:a8:
b3:f8:02:d4:a8:d0:3e:d6:1d:3b:60:36:0c:76:b1:
f7:6f:35:ff:60:88:bf:3f:e8:f7:10:a4:59:e5:ac:
b6:5f:4b:1f:8c:22:16:1b:aa:6d:0a:65:e5:01:cf:
53:43:ac:d6:7f:d3:e4:96:c0:08:7d:ac:7d:1b:60:
10:ad:1f:9d:b8:d2:fc:26:88:cf:ac:57:b0:f1:39:
54:47:04:7c:c9:d7:b3:90:c5:d1:7d:fa:92:55:e4:
20:9e:7e:6f:e8:8c:a7:2b:45:99:f2:43:ce:11:a0:
72:e0:8c:e9:d7:c6:f5:7f:0a:15:7e:53:17:10:e4:
da:ad:f4:55:04:0d:7d:80:dd:58:f6:15:8f:fa:50:
02:8a:39:10:58:96:db:60:80:30:ab:96:df:72:7b:
8b:26:3f:f4:f3:2f:82:1b:45:0a:ba:2d:29:16:f4:
68:59:ff:02:5c:c9:df:90:6b:24:e5:d0:19:74:98:
0d:53:a5:60:ad:5a:05:c3:b0:08:12:d6:8c:31:7f:
5a:e3:f6:ce:bf:aa:b5:be:89:f7:3a:e0:e8:e8:b1:
48:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AA:59:6E:30:B3:1F:04:36:CA:40:A1:03:CA:C5:AD:F8:E9:18:BF
X509v3 Authority Key Identifier:
keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:04:29:0e:6e:8b:79:14:9d:33:09:56:52:7b:a3:47:89:3b:
c6:a6:b8:20:0b:c1:17:52:0e:38:8b:c5:f2:14:8c:aa:84:5a:
e0:e7:17:ed:bc:2d:f4:b2:87:33:37:a0:9e:31:c7:41:b6:08:
74:d4:67:ff:8a:1b:3e:bb:ac:b3:9e:1f:d2:bb:ee:91:e5:a2:
74:57:f6:aa:70:db:37:f6:a8:62:60:ab:f3:25:8f:1e:7b:2f:
6a:86:da:d3:d2:a3:fe:22:ac:a4:a8:27:13:1c:69:3f:eb:4c:
b6:0c:de:1f:35:aa:08:04:f9:b1:00:02:2b:ea:76:5c:f0:8b:
03:7d:40:fc:a9:3e:4d:e0:ec:be:b5:c6:c5:92:51:de:9a:d7:
b7:2b:5c:c8:8d:3e:03:18:6e:f2:76:c4:7d:c8:36:ff:bb:33:
f7:c8:5e:9a:2b:49:5f:a8:70:1f:fc:cc:cd:4b:1d:40:ca:ae:
e0:58:64:3f:0d:7e:6b:d7:77:0f:9b:65:25:59:68:3e:bc:58:
aa:bb:e0:2e:d2:8a:cf:29:a8:17:35:ca:ee:f2:97:a3:47:ce:
93:3e:66:17:fe:02:a8:fe:3d:e1:ff:42:31:f7:91:6e:3d:ef:
d7:18:9f:ef:92:12:61:d5:33:46:cf:89:d8:aa:3d:88:45:9e:
bb:12:36:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:48:56 2026 by rpki-client