Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
File: EHIerWpFdWQ8twMGLAlodV6Cges.mft (raw, json)
Hash identifier: Rs37O8XdUlN53JyqxNChDpnP3U9ypu7O50duKEVlUUc=
Subject key identifier: C0:E0:03:20:AE:32:6F:DA:A2:A5:0D:AF:52:74:5A:E6:77:0F:4F:AF
Authority key identifier: 10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
Certificate issuer: /CN=10721ead6a4575643cb703062c0968755e8281eb
Certificate serial: 019D37C0EB8A5A0A301786747B8DE032544E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
Manifest number: 1105
Signing time: Sun 29 Mar 2026 04:01:23 +0000
Manifest this update: Sun 29 Mar 2026 04:01:23 +0000
Manifest next update: Mon 30 Mar 2026 04:01:23 +0000
Files and hashes: 1: 1-rET-TrbL0N0PmSCeeqaK3f307A.roa (hash: 3mf7fKWr4vRI4ELzbIBegjtJk+mkQEPMj+4jcV/D7Z4=)
2: EHIerWpFdWQ8twMGLAlodV6Cges.crl (hash: oNeH4M8kp2s2RbS18p2Zum9L4iKGucskuB4Oiq+RAR8=)
3: OYfq_lWnAQ_tUxH83Vafk3m1hAU.roa (hash: jPa4kfq6v0aw3m5eHQ43ps6ZzHtlfC/2MPYqiPwryT8=)
4: OklpCWAYtSxGFSO6LoyURgrDbcQ.roa (hash: 1mSZtPwrR8rsCOpqJ4xfUkwL5UPo6V6cd8N6AZWROk0=)
5: adft9gClh_5cLRsjg_tIKsse5c8.roa (hash: mOJk0iIwfTDt5ixEea0GhZ9TZ+LmcfXcF0RkG7cTHPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:eb:8a:5a:0a:30:17:86:74:7b:8d:e0:32:54:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10721ead6a4575643cb703062c0968755e8281eb
Validity
Not Before: Mar 29 04:01:23 2026 GMT
Not After : Mar 30 04:01:23 2026 GMT
Subject: CN=c0e00320ae326fdaa2a50daf52745ae6770f4faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6a:0d:7f:b1:e5:ec:54:05:a3:eb:57:68:06:
ed:07:75:d9:10:07:f7:38:17:76:64:39:af:35:ab:
64:1d:67:f0:41:06:c2:34:ba:77:a9:2e:df:dd:5f:
f4:6a:f1:14:30:fb:91:7e:45:ff:12:b9:54:5b:eb:
bf:7e:ae:5a:99:09:f4:50:66:68:07:9e:9c:30:5b:
cc:d0:00:9f:d5:eb:39:83:83:b4:a1:3f:c8:5a:2b:
6f:4d:47:0c:43:78:38:83:82:92:04:de:30:cb:81:
d1:44:12:92:de:60:f9:bc:0d:4b:ab:f0:37:89:70:
93:56:4a:0a:60:cd:fc:d6:65:0e:d3:17:d9:55:51:
30:2a:fe:d8:b1:aa:d4:67:d3:45:26:6a:89:ba:46:
94:b4:1b:0c:31:1a:5a:e2:7e:bb:07:f2:20:21:fe:
a2:5a:ee:7c:31:d1:50:c4:53:3a:2e:20:f6:10:47:
35:47:06:39:1a:bc:7e:84:f3:64:a6:f4:d2:38:a0:
d7:9b:88:a3:39:db:34:cf:f4:b3:9c:c5:f0:45:b0:
1b:3a:a3:0a:50:77:3e:2f:cc:e6:c9:bd:ad:fd:4d:
b3:92:93:8a:42:43:b0:63:6f:dd:bd:d6:5a:38:f0:
89:bf:ef:c4:da:61:ec:9f:a1:7b:8a:73:e7:c2:ea:
68:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E0:03:20:AE:32:6F:DA:A2:A5:0D:AF:52:74:5A:E6:77:0F:4F:AF
X509v3 Authority Key Identifier:
keyid:10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:75:0d:eb:95:ef:1c:19:38:31:99:68:4d:fe:ad:4d:79:ff:
56:a2:e9:d1:bd:0d:6a:cc:b2:89:f9:c7:bc:5b:ca:6c:ed:b5:
46:ce:d0:f4:87:55:5a:0c:13:3a:d3:da:77:8f:c0:ad:9d:0d:
d7:a0:cd:9c:02:60:b6:d5:14:bf:5a:e7:69:4d:67:97:32:d2:
b5:a1:e1:5e:32:e1:62:a3:76:11:ff:c2:19:40:c7:cd:11:01:
84:a1:17:c0:ab:8e:ee:82:76:12:01:96:43:3a:57:40:f8:b0:
80:3d:d6:47:4e:01:54:14:78:87:f5:14:fe:34:e1:d3:36:77:
6a:51:c1:21:cc:4b:9a:ec:30:e8:89:77:0c:00:f6:ab:5c:34:
98:fb:05:32:29:d8:2c:19:fa:e5:cb:3c:60:78:86:2a:61:e2:
45:61:5b:a9:2b:ef:20:fe:e6:70:6a:fc:86:fd:aa:13:4a:74:
40:b4:72:2b:8b:bd:9c:85:5b:84:4e:8b:05:69:9a:20:7d:73:
a0:f9:92:66:ab:2a:d4:37:8f:2a:44:28:b6:9f:dc:78:29:c3:
94:f0:cb:11:50:d0:a1:b3:90:63:70:04:98:52:09:2a:c7:99:
dd:44:82:fd:d5:cc:73:b6:b9:69:e4:a5:60:31:a5:59:de:ca:
4a:72:2a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:56 2026 by rpki-client