Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
File: EharzETJqVVAzfWx3FQux9Ef4Ho.mft (raw, json)
Hash identifier: Eho7giAIBeljE9Kv2UsGe7wLNq1RqBTY1l88CPzgaKU=
Subject key identifier: 27:73:ED:D7:8F:72:4C:F3:43:02:CD:8C:38:C3:54:B6:B7:BB:23:B2
Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
Certificate issuer: /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Certificate serial: 019EB80E6D87EFEBC67B9EAC814FB191B149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
Manifest number: 0472
Signing time: Thu 11 Jun 2026 19:00:13 +0000
Manifest this update: Thu 11 Jun 2026 19:00:13 +0000
Manifest next update: Fri 12 Jun 2026 19:00:13 +0000
Files and hashes: 1: 9V3S7FKC66AOlqD78_S81truyog.roa (hash: zjtnM6n3Uet2Hry92cMihIwePJR9odotoqz4FTgtQpQ=)
2: EharzETJqVVAzfWx3FQux9Ef4Ho.crl (hash: 8s4J48DLzpDH6q6C94AOh9HsLoK3ow/IMk9ERJD3r2I=)
3: Q89cC5EdEYVsTAR7wEMR5rmM-FA.roa (hash: IpAEUAQrDRw1Avy4gtoYvc+jdCy+th+rhrs9OezDlo8=)
4: R6vEKMp8XV0nRsp07cf4y7I04qo.roa (hash: nWBD/KxL+ZqMUbvdWaWo1r7/2jynLrCSHLN52H6UCwM=)
5: XGUIHnWF_LunuxvNcMmR57_WKzo.roa (hash: Gg+yICFewOrJllU9keGQjZ8+O9tNzguLLKLqMVLJpjs=)
6: b1NnfX82WWUKnDzO-T_p9BDnjPM.roa (hash: uuhxZnIOVP3yGkI2POwoZpysQSXnT6B0qJNkc7bJXFw=)
7: fYJN56gNpyjk6FeN9g2u8kda_Ck.roa (hash: 0Bz6iRQD5arZ6ysTUfpQvVjP86yHCsoWY8uCR19q2k4=)
8: iTrKyBgs_fihjw2gMNeMi35dTSA.roa (hash: zNTMLDdPTDqmLO0jhMMrsQBD6z1cOUxn49L1ph7eXpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0e:6d:87:ef:eb:c6:7b:9e:ac:81:4f:b1:91:b1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Validity
Not Before: Jun 11 19:00:13 2026 GMT
Not After : Jun 12 19:00:13 2026 GMT
Subject: CN=2773edd78f724cf34302cd8c38c354b6b7bb23b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6b:f6:c1:5d:c9:10:45:f6:8a:17:04:af:1f:
d2:8e:83:73:4a:ad:71:48:9c:dd:38:74:37:b5:e2:
77:fc:79:fb:24:72:94:56:4d:67:b4:d7:4c:1f:2d:
39:8a:27:c7:40:78:47:02:80:46:ec:b3:1a:71:3e:
a8:0d:20:e2:c5:74:1f:a0:15:0a:51:a2:1f:6e:95:
55:5f:52:2e:84:66:16:51:62:31:c8:62:c5:1c:74:
dd:64:84:c4:a7:37:ed:9d:3c:53:1a:a9:50:86:a6:
57:3b:40:22:74:51:f2:18:49:77:4c:5e:7a:78:fa:
20:1c:75:aa:cb:42:a3:7c:55:ed:b5:55:fd:7b:31:
9e:c1:2b:63:05:44:6a:9d:e2:cc:57:6e:f1:17:aa:
d3:3e:49:e4:39:21:e6:ed:14:ce:ed:99:3a:20:63:
ce:eb:21:16:85:fc:4c:c4:e3:67:e6:34:01:b7:e9:
f0:07:86:df:9a:71:ca:16:64:de:2c:2e:4a:24:4d:
e4:21:58:e2:ae:3f:87:5a:c8:47:de:33:3e:18:37:
48:81:9c:21:4d:cc:78:30:91:13:24:92:65:62:34:
b7:3b:ed:ef:c5:5e:18:be:0d:bb:1a:6c:04:62:30:
00:3e:93:df:2a:76:49:4d:b4:ef:aa:db:64:8e:dc:
ce:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:73:ED:D7:8F:72:4C:F3:43:02:CD:8C:38:C3:54:B6:B7:BB:23:B2
X509v3 Authority Key Identifier:
keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:12:08:31:f3:c2:b0:9b:f8:c5:9c:81:98:3a:e6:2d:38:78:
2a:73:7a:5b:43:27:33:45:1d:a0:d5:72:0e:bf:23:b0:64:e7:
99:c7:41:f5:91:84:19:3a:d7:9f:90:7c:03:d6:99:14:52:af:
58:d3:a3:bd:2d:76:4a:cc:98:d6:f0:b1:44:82:07:5b:46:0c:
30:54:87:c6:99:c0:ff:30:5e:8b:6a:0c:8a:bb:6e:4c:c6:95:
a1:9f:bb:ff:67:8c:04:0d:89:a7:cc:0d:2c:fc:1c:1a:ae:0d:
ba:3c:66:a3:8d:98:5f:4d:0c:52:68:f5:6d:88:38:2d:8d:8c:
9b:ad:7b:51:f6:e3:47:3f:c1:60:1a:74:9f:f4:29:89:52:5e:
ba:dd:73:83:44:9b:f3:9a:3c:14:21:25:38:54:92:ca:24:f4:
d7:ee:b3:f3:be:f4:04:27:b7:96:f6:52:2c:76:12:da:54:f8:
d5:dc:26:33:e5:87:0d:c3:12:d8:81:6f:2a:e8:f1:21:80:41:
2e:aa:5a:77:bd:07:c0:d5:ea:ac:46:46:b0:29:27:91:13:76:
6b:63:79:4b:b7:e6:d0:d6:c6:b4:8f:cc:be:c8:2c:d2:ab:19:
d4:4a:f1:f4:4f:77:73:63:21:0e:e1:be:5b:91:12:0c:eb:9f:
3f:09:39:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:47:33 2026 by rpki-client