Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
File: EharzETJqVVAzfWx3FQux9Ef4Ho.mft (raw, json)
Hash identifier: lX7mPcqoCXx1UN4qD8rZ/1Lf0YMgZeVBTlsZKzjFLAc=
Subject key identifier: 29:BA:54:54:3F:23:73:D8:DF:CE:16:17:30:9D:69:AE:FE:02:74:EF
Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
Certificate issuer: /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Certificate serial: 019CE2C7CA25A172CCBD7F710A4BC4C8D40F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
Manifest number: 037F
Signing time: Thu 12 Mar 2026 16:01:10 +0000
Manifest this update: Thu 12 Mar 2026 16:01:10 +0000
Manifest next update: Fri 13 Mar 2026 16:01:10 +0000
Files and hashes: 1: 9V3S7FKC66AOlqD78_S81truyog.roa (hash: zjtnM6n3Uet2Hry92cMihIwePJR9odotoqz4FTgtQpQ=)
2: EharzETJqVVAzfWx3FQux9Ef4Ho.crl (hash: NM/9+uxd/cSazja0lsNbVVHYwYkCHFP622hnfNcqVcU=)
3: Q89cC5EdEYVsTAR7wEMR5rmM-FA.roa (hash: IpAEUAQrDRw1Avy4gtoYvc+jdCy+th+rhrs9OezDlo8=)
4: R6vEKMp8XV0nRsp07cf4y7I04qo.roa (hash: nWBD/KxL+ZqMUbvdWaWo1r7/2jynLrCSHLN52H6UCwM=)
5: XGUIHnWF_LunuxvNcMmR57_WKzo.roa (hash: Gg+yICFewOrJllU9keGQjZ8+O9tNzguLLKLqMVLJpjs=)
6: b1NnfX82WWUKnDzO-T_p9BDnjPM.roa (hash: uuhxZnIOVP3yGkI2POwoZpysQSXnT6B0qJNkc7bJXFw=)
7: fYJN56gNpyjk6FeN9g2u8kda_Ck.roa (hash: 0Bz6iRQD5arZ6ysTUfpQvVjP86yHCsoWY8uCR19q2k4=)
8: iTrKyBgs_fihjw2gMNeMi35dTSA.roa (hash: zNTMLDdPTDqmLO0jhMMrsQBD6z1cOUxn49L1ph7eXpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:c7:ca:25:a1:72:cc:bd:7f:71:0a:4b:c4:c8:d4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Validity
Not Before: Mar 12 16:01:10 2026 GMT
Not After : Mar 13 16:01:10 2026 GMT
Subject: CN=29ba54543f2373d8dfce1617309d69aefe0274ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c9:33:29:ec:4a:05:4e:70:15:35:e8:fb:13:
b6:0c:31:65:ac:e2:c3:f3:6d:1d:5c:7d:1e:ff:1f:
af:11:c5:63:ee:d1:2e:ca:a4:dd:2b:bc:fb:b5:6b:
ca:be:68:6c:cc:78:d9:76:29:72:3f:8c:9a:a3:53:
9b:b4:5a:84:06:09:fa:a4:d0:19:87:92:7d:4f:37:
94:4e:21:6f:0e:37:15:df:17:64:df:c9:eb:2d:84:
a4:d8:99:c8:66:f3:32:ce:4a:7b:94:9f:f4:a0:6f:
0d:41:1c:1a:1a:b3:94:ac:94:fa:d4:d1:4f:a9:fe:
40:5a:36:2f:ed:e0:3d:62:36:f2:53:56:70:4c:a2:
8e:fc:cb:3e:8b:72:e4:97:33:14:45:38:fd:52:79:
ae:e6:6c:46:75:65:e0:69:cf:62:1b:66:79:78:82:
0e:d7:55:18:23:87:48:d0:14:9f:8e:49:7b:c5:dd:
97:a7:26:6b:fd:e3:66:0c:c3:d8:ad:9f:f4:5c:fe:
11:4a:be:04:45:a6:8a:6b:5e:eb:68:64:aa:1b:30:
fa:f1:89:41:d3:aa:d7:70:3b:0b:26:e7:28:a7:13:
86:e0:c2:96:b0:ed:40:9f:b7:f3:4d:f0:0e:29:96:
74:20:ea:00:6a:b7:9d:71:d1:9a:13:47:f3:f9:85:
05:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BA:54:54:3F:23:73:D8:DF:CE:16:17:30:9D:69:AE:FE:02:74:EF
X509v3 Authority Key Identifier:
keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:34:9e:7a:27:2e:00:ee:d5:3c:c0:8d:a0:0f:b2:b7:16:d1:
c1:38:39:27:9d:4e:5d:78:9d:ae:10:4c:be:d5:62:b2:ce:0a:
66:fe:a8:df:12:ff:bb:42:c7:fc:af:f2:65:a0:12:4e:66:af:
b2:f5:9b:59:4e:68:fc:ed:f9:46:16:9d:96:7a:a6:f5:8c:a6:
96:7f:ea:05:27:4a:ff:18:7d:e9:8b:50:11:8d:1f:e7:c5:02:
06:1c:0a:3c:f0:80:d7:c5:30:80:94:74:86:80:f9:b8:cf:12:
b0:81:b2:61:4c:b0:6c:1d:96:bc:8e:52:a2:8d:2d:8c:4c:44:
ae:95:fd:89:c6:e0:df:ff:d5:a2:5d:fa:a7:fc:48:ef:ed:a0:
3f:d3:01:db:bf:6a:a8:b4:64:c6:b9:cb:c0:07:58:47:0f:18:
60:99:6d:f4:58:99:bb:48:16:89:91:ae:1e:31:f2:5c:60:fb:
ff:25:f5:f6:2a:81:33:f5:3c:57:a7:39:9c:57:fc:82:7b:4d:
02:dd:a3:56:b9:07:e8:f9:d6:aa:c8:ed:12:9b:6c:49:c4:43:
52:73:be:c9:8a:cd:54:51:a4:15:07:be:ef:83:e3:e9:5e:96:
77:7f:7c:5e:ad:b6:c9:bf:c2:bd:70:b8:7f:5f:10:00:35:19:
95:b4:bc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:29:48 2026 by rpki-client