Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
File: ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft (raw, json)
Hash identifier: EqfufVEet++2lp3Jco9ajNuS4L+8N+cB5ljHF5/jxyc=
Subject key identifier: 8D:64:7F:21:C2:8E:1F:6B:0F:85:B0:6C:8A:66:C2:46:F3:6D:C9:BD
Authority key identifier: 7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
Certificate issuer: /CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Certificate serial: 019F1BD6B8DF0A7F6F45E603915A60C84069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
Manifest number: 198A
Signing time: Wed 01 Jul 2026 04:01:24 +0000
Manifest this update: Wed 01 Jul 2026 04:01:24 +0000
Manifest next update: Thu 02 Jul 2026 04:01:24 +0000
Files and hashes: 1: Bi1pDCNkHaQHAemnse3wWLypO7k.roa (hash: lAsWeGFXffMfinXBeg3+QU6P9EnW1X8Od5LyXs53FsY=)
2: ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl (hash: 5yVNfiUdr4Qtv4vKYS8sPaCKBdoFMqhM9Le8cAd3cho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1b:d6:b8:df:0a:7f:6f:45:e6:03:91:5a:60:c8:40:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Validity
Not Before: Jul 1 04:01:24 2026 GMT
Not After : Jul 2 04:01:24 2026 GMT
Subject: CN=8d647f21c28e1f6b0f85b06c8a66c246f36dc9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:88:12:a4:4a:5d:f5:5a:78:30:8f:51:2f:72:
d1:fc:f4:1f:30:39:c0:61:57:cb:ab:b2:c7:85:04:
10:27:3a:ae:da:4a:30:bd:ed:1c:4d:a4:a0:ca:d1:
29:9e:46:60:73:0a:0b:d5:22:2a:be:23:08:f6:d7:
83:21:6b:df:6f:a0:c1:51:86:86:2a:31:3f:2d:90:
2e:8e:3c:23:fa:67:fd:16:60:c9:7a:13:02:08:00:
6c:c7:30:13:93:bc:30:9c:07:df:f8:c9:c5:f1:34:
6f:2e:2c:1d:62:83:86:f8:01:c9:e6:40:b2:cd:93:
f9:c3:11:72:07:49:44:35:96:af:f5:7c:fd:87:d2:
08:02:f1:03:b1:a7:33:98:c3:29:f3:7d:34:85:8a:
78:ee:1a:9c:f8:d5:8c:ab:04:2a:3e:81:69:50:c3:
43:af:5e:9f:6c:81:a8:46:62:7d:02:27:54:b7:62:
b0:47:4d:7d:0c:75:b3:79:a5:a3:a9:96:fc:6c:2e:
37:cc:f5:bf:a7:df:68:00:99:c5:18:46:e4:e9:aa:
21:b8:e8:07:b8:62:19:07:d0:19:eb:f7:8e:88:58:
f0:9c:82:bc:c0:e8:f7:9b:f9:9e:4c:b1:04:45:2d:
50:ba:8e:1e:41:67:35:88:4e:1d:dc:66:30:58:af:
40:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:64:7F:21:C2:8E:1F:6B:0F:85:B0:6C:8A:66:C2:46:F3:6D:C9:BD
X509v3 Authority Key Identifier:
keyid:7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:0b:9d:7d:fa:36:1e:ef:c4:b9:d9:6a:00:f4:5b:14:96:24:
09:93:eb:9c:d9:b9:5e:c8:fb:22:ed:b6:56:75:e9:90:3b:94:
bc:86:67:35:ca:67:ef:d9:ce:c5:39:d7:79:74:26:db:74:83:
a3:24:8c:98:00:ed:42:ea:bc:5f:e6:f8:23:39:d9:0c:68:ab:
40:4c:18:24:06:b6:5a:84:bf:a5:3a:c7:8e:ef:9d:31:fe:24:
67:97:54:1f:50:0d:bd:cf:bc:59:78:bf:51:90:49:2c:90:b5:
e6:74:7e:32:e8:92:6e:bf:53:f6:73:1c:4e:88:32:8f:ee:c8:
49:f6:e7:7c:45:0e:86:da:00:4a:91:94:27:8b:c4:33:83:17:
b9:ac:72:a1:2d:47:47:f7:5a:0d:fa:72:43:69:83:76:f1:cd:
3b:3e:40:21:15:56:36:3f:35:cb:4f:a3:03:49:b1:eb:5f:20:
7c:5c:69:66:ff:bf:70:4c:16:d7:ac:d7:9a:83:55:cf:d5:0c:
0e:77:13:f7:d6:2e:a5:b1:43:85:05:61:b1:76:19:41:9f:1b:
97:54:49:37:06:89:a7:7b:43:b9:ef:89:5a:f4:8f:02:94:62:
75:b9:53:f8:50:60:06:a9:40:dd:33:3c:ab:09:3b:9f:5a:27:
21:e9:0c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 09:02:54 2026 by rpki-client