Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
File: EharzETJqVVAzfWx3FQux9Ef4Ho.mft (raw, json)
Hash identifier: uJr0+4mG6sZYW9/W2B0RtbgjoA4YasyWtHJQR26QbzA=
Subject key identifier: C6:F5:16:3A:51:E8:86:67:6D:5E:1D:27:6A:84:0B:AE:DD:07:4B:42
Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
Certificate issuer: /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Certificate serial: 019DCE62ED6D8F44ADBD7EA6D82E5C01766A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
Manifest number: 03F9
Signing time: Mon 27 Apr 2026 10:01:22 +0000
Manifest this update: Mon 27 Apr 2026 10:01:22 +0000
Manifest next update: Tue 28 Apr 2026 10:01:22 +0000
Files and hashes: 1: 9V3S7FKC66AOlqD78_S81truyog.roa (hash: zjtnM6n3Uet2Hry92cMihIwePJR9odotoqz4FTgtQpQ=)
2: EharzETJqVVAzfWx3FQux9Ef4Ho.crl (hash: nvkXWfQ2DRcOJUt9KorRWL/pOPl1gOOdp9T+Bzq8YpA=)
3: Q89cC5EdEYVsTAR7wEMR5rmM-FA.roa (hash: IpAEUAQrDRw1Avy4gtoYvc+jdCy+th+rhrs9OezDlo8=)
4: R6vEKMp8XV0nRsp07cf4y7I04qo.roa (hash: nWBD/KxL+ZqMUbvdWaWo1r7/2jynLrCSHLN52H6UCwM=)
5: XGUIHnWF_LunuxvNcMmR57_WKzo.roa (hash: Gg+yICFewOrJllU9keGQjZ8+O9tNzguLLKLqMVLJpjs=)
6: b1NnfX82WWUKnDzO-T_p9BDnjPM.roa (hash: uuhxZnIOVP3yGkI2POwoZpysQSXnT6B0qJNkc7bJXFw=)
7: fYJN56gNpyjk6FeN9g2u8kda_Ck.roa (hash: 0Bz6iRQD5arZ6ysTUfpQvVjP86yHCsoWY8uCR19q2k4=)
8: iTrKyBgs_fihjw2gMNeMi35dTSA.roa (hash: zNTMLDdPTDqmLO0jhMMrsQBD6z1cOUxn49L1ph7eXpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:62:ed:6d:8f:44:ad:bd:7e:a6:d8:2e:5c:01:76:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Validity
Not Before: Apr 27 10:01:22 2026 GMT
Not After : Apr 28 10:01:22 2026 GMT
Subject: CN=c6f5163a51e886676d5e1d276a840baedd074b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:b4:66:04:72:54:2c:18:64:f6:07:2b:f7:
17:37:78:f8:a0:e7:12:a2:ff:94:0d:b1:b8:f0:bd:
4c:3a:91:43:29:b9:df:f7:70:68:0a:18:c8:49:9f:
1c:ac:72:8c:cd:d0:9d:7b:8a:bd:74:81:69:de:c2:
77:b5:06:fb:15:d2:5c:26:fc:fb:75:7b:2d:15:49:
71:c1:27:f6:94:d9:1a:1c:ea:12:69:94:d3:77:c4:
0c:7c:b5:02:64:bb:fc:cc:25:ac:df:39:c0:46:72:
9a:c9:46:58:ec:4f:95:4c:de:b7:b2:69:92:c2:51:
15:c0:8f:22:00:6a:a6:b4:4f:c0:62:82:46:c8:0e:
36:fd:d5:a4:c9:8a:bd:40:6d:ba:de:9e:38:09:89:
8b:e9:38:7e:bc:af:d7:d4:81:c0:a3:f6:62:13:d3:
ea:1b:ac:d7:fa:3c:1b:de:4d:c3:a5:99:f6:e5:a3:
98:f8:d1:ed:a0:ca:98:81:ae:eb:34:ec:93:bb:ef:
9e:bc:43:81:7d:6e:6a:09:1b:7e:29:15:31:03:a1:
cd:54:d9:91:06:f8:35:fa:c7:eb:00:78:af:b9:b1:
0a:a3:0c:3f:15:32:65:9e:34:72:8c:8f:89:54:40:
7f:fc:9f:34:29:31:5a:bd:e0:76:fa:64:4d:ec:3e:
bc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F5:16:3A:51:E8:86:67:6D:5E:1D:27:6A:84:0B:AE:DD:07:4B:42
X509v3 Authority Key Identifier:
keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:33:89:74:76:38:94:f2:05:88:36:cc:d2:96:d0:08:b9:f9:
74:05:0c:e2:62:dc:87:67:79:5c:0f:c0:ea:21:f8:a0:7f:05:
ae:39:a1:58:27:61:9c:0c:ac:0f:05:7e:8c:8d:04:e9:cc:d6:
60:ff:c9:71:83:c7:f6:05:d3:44:2b:3b:49:79:a4:df:b7:e5:
32:34:a8:2f:0f:6d:60:73:28:79:d7:7e:a3:37:1c:3f:4b:2a:
a7:e0:f9:f8:2f:01:24:de:4d:15:21:16:47:3b:76:b7:29:16:
70:4e:bb:ce:78:2d:09:87:f5:3c:c4:a1:6e:88:18:cf:19:05:
eb:30:45:3f:b9:1f:eb:57:6a:ef:76:24:3f:13:cd:e0:a5:e6:
b6:c6:3f:41:93:ae:a3:0a:26:30:5c:b9:19:95:3a:9f:3f:3c:
ca:3b:4b:fd:cc:b6:69:3b:bf:c1:4c:24:d5:8b:95:0f:f8:7e:
d4:3f:14:05:c4:50:9e:37:d8:c2:5c:f2:91:6a:53:0f:7e:db:
eb:76:1f:ad:37:ab:98:f7:f5:bc:b6:d0:69:60:b5:83:36:12:
6a:28:d7:2b:5c:cf:3c:28:39:77:6b:c8:ed:8c:a7:37:89:ed:
0f:f5:ca:c6:20:b0:f9:37:f2:a3:ae:4f:9b:b9:04:67:b1:d4:
80:0a:ad:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:41:51 2026 by rpki-client