
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
File: EHIerWpFdWQ8twMGLAlodV6Cges.mft (raw, json)
Hash identifier: EPti/1BwAMvV2sT9iKhoa8m9boZ4Xif4IyXGmsD+Mvs=
Subject key identifier: 04:B3:3C:31:02:91:08:B5:89:4F:20:45:8F:2C:45:D2:AC:6C:C1:23
Authority key identifier: 10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
Certificate issuer: /CN=10721ead6a4575643cb703062c0968755e8281eb
Certificate serial: 01A0005CB2943EADFB064837C6F07E83DD1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
Manifest number: 1276
Signing time: Fri 14 Aug 2026 13:01:09 +0000
Manifest this update: Fri 14 Aug 2026 13:01:09 +0000
Manifest next update: Sat 15 Aug 2026 13:01:09 +0000
Files and hashes: 1: 1-rET-TrbL0N0PmSCeeqaK3f307A.roa (hash: 3mf7fKWr4vRI4ELzbIBegjtJk+mkQEPMj+4jcV/D7Z4=)
2: EHIerWpFdWQ8twMGLAlodV6Cges.crl (hash: 8hUsm0rglSsLFXjOdxYbpDgjoeqplOzlQQsKrBlNPqQ=)
3: OYfq_lWnAQ_tUxH83Vafk3m1hAU.roa (hash: jPa4kfq6v0aw3m5eHQ43ps6ZzHtlfC/2MPYqiPwryT8=)
4: OklpCWAYtSxGFSO6LoyURgrDbcQ.roa (hash: 1mSZtPwrR8rsCOpqJ4xfUkwL5UPo6V6cd8N6AZWROk0=)
5: adft9gClh_5cLRsjg_tIKsse5c8.roa (hash: mOJk0iIwfTDt5ixEea0GhZ9TZ+LmcfXcF0RkG7cTHPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:b2:94:3e:ad:fb:06:48:37:c6:f0:7e:83:dd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10721ead6a4575643cb703062c0968755e8281eb
Validity
Not Before: Aug 14 13:01:09 2026 GMT
Not After : Aug 15 13:01:09 2026 GMT
Subject: CN=04b33c31029108b5894f20458f2c45d2ac6cc123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:37:24:9d:94:0e:d8:d3:32:47:83:17:5d:29:
c9:aa:14:81:2f:e3:05:eb:d4:fb:c3:98:09:6b:ee:
ed:97:0e:30:fd:4b:9f:aa:a0:7e:88:65:ec:d6:41:
2c:12:f7:47:8c:ed:7c:d0:37:1d:d4:35:2d:19:e6:
80:80:0d:7b:2d:da:84:38:da:66:d5:52:17:5f:8a:
bc:10:09:fc:f7:24:9f:99:9b:1c:dc:b5:21:d0:86:
f3:bf:ff:c3:66:63:70:18:63:ab:5f:b6:ef:42:b3:
bc:9e:75:95:e6:66:1f:5f:30:4e:64:2f:fc:8f:ee:
a9:bb:b4:a1:e9:21:00:98:e9:17:f9:ab:c1:be:80:
97:1b:c0:6f:4b:50:45:41:7c:8b:41:4d:9d:b5:40:
d4:ac:31:4f:f8:71:32:f0:1a:20:f7:a5:c8:de:aa:
20:d4:1c:f4:8d:c6:6b:15:53:dc:9a:60:69:84:33:
20:79:7a:d6:13:48:d3:e9:04:89:14:d0:d0:20:a3:
58:7a:a9:79:b2:34:80:1d:be:94:4a:d3:84:5e:05:
2e:eb:40:93:66:d5:71:ce:16:75:0d:ff:f1:87:9f:
49:cd:31:49:ce:e3:56:84:73:d7:20:a8:b8:e1:17:
00:8e:c7:12:26:c0:46:d2:6f:62:fa:66:fe:f3:ec:
4a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B3:3C:31:02:91:08:B5:89:4F:20:45:8F:2C:45:D2:AC:6C:C1:23
X509v3 Authority Key Identifier:
keyid:10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:27:82:cc:0c:37:cc:c8:a8:ed:80:41:6e:73:1f:1c:87:41:
55:13:e5:e3:3e:6b:8e:6c:1a:91:94:4c:93:38:f9:0d:c9:d9:
ed:8b:4f:7b:9e:e8:02:64:9f:48:0e:41:a2:3d:71:dd:ba:a7:
6d:d5:ec:34:f8:3e:01:8d:e4:55:4a:d1:b3:be:1d:24:8b:a6:
d6:09:2f:cf:33:8f:26:3e:6a:78:7e:a3:db:f6:1a:c5:4e:f1:
26:eb:32:b8:d0:1c:db:62:8a:74:6f:56:2b:02:2f:22:e1:7c:
05:77:9d:e2:c6:d3:16:c9:ea:a3:95:89:9b:ee:53:bf:40:d7:
e3:a6:45:ff:3f:bc:8b:91:62:7a:a9:92:d5:e1:12:db:50:61:
44:2d:ff:56:42:f8:c8:83:18:29:e8:99:1e:fb:44:36:4f:ac:
c1:ea:ce:e7:dd:24:21:96:7d:ee:e2:6b:14:7f:60:26:6d:15:
79:51:ad:f5:83:b0:a3:c1:33:a0:a3:da:3b:8f:70:02:79:04:
6b:20:54:49:10:85:a5:44:33:ad:f6:8e:bf:a8:3c:07:6b:3e:
80:66:a4:17:68:5a:97:18:b8:65:16:ff:20:f2:9a:19:e2:33:
e0:cc:ed:39:c6:db:d1:9b:43:ee:fb:b4:ab:a5:95:8a:6b:1b:
d4:9b:32:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:36 2026 by rpki-client