Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
File: ehuwNttA15nYYRmKUkOzwD1Wwgo.mft (raw, json)
Hash identifier: v0t5DvvrsJBCLPygHnM3hLHkQ6skO0K/4VKxk36drFs=
Subject key identifier: 3F:DF:98:9E:63:34:59:8B:B3:48:51:96:3B:E5:85:C1:7D:17:80:25
Authority key identifier: 7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A
Certificate issuer: /CN=7a1bb036db40d799d861198a5243b3c03d56c20a
Certificate serial: 019DB16B324B6B00C2EEDA018FE4646194D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
Manifest number: 0415
Signing time: Tue 21 Apr 2026 19:01:25 +0000
Manifest this update: Tue 21 Apr 2026 19:01:25 +0000
Manifest next update: Wed 22 Apr 2026 19:01:25 +0000
Files and hashes: 1: 2xwSBwS6RDNnNKRZKOi0MbfjwVc.roa (hash: RMcEguGLwOa0BQU2j27En5sOEwzBOElDccZLVB4NNcw=)
2: MRM-CoQOpNzOiMlv-SoepHZ_vkg.roa (hash: XmXaFQhLTQFHGNBv8hvjwKW9TmIBhDQDOsRTHRNNRp8=)
3: ehuwNttA15nYYRmKUkOzwD1Wwgo.crl (hash: pJe4d+34IMp3Z3pMKcjC1qsynMrONsUiekzkFtHm3c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:6b:32:4b:6b:00:c2:ee:da:01:8f:e4:64:61:94:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a1bb036db40d799d861198a5243b3c03d56c20a
Validity
Not Before: Apr 21 19:01:25 2026 GMT
Not After : Apr 22 19:01:25 2026 GMT
Subject: CN=3fdf989e6334598bb34851963be585c17d178025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:00:d1:2d:05:ac:1c:2b:99:06:4a:12:bc:43:
d1:c5:f2:af:0a:82:e7:03:93:cc:39:0e:b9:e0:25:
16:85:a0:4d:34:0e:1e:31:e6:19:c7:12:0a:93:20:
4b:a4:d5:42:d1:47:6a:bf:bb:42:05:da:db:29:b3:
6e:4e:8a:fc:9d:a3:e1:f2:e5:08:bf:d5:3a:3f:5a:
d8:4f:37:55:0a:db:2e:9f:64:fc:6c:02:aa:cd:96:
f9:68:b4:45:e8:8b:7a:6a:b1:d1:6c:37:6a:af:df:
2e:53:37:f0:42:0b:e3:ff:9d:68:c0:c2:fe:44:56:
1f:e8:0d:23:a0:11:36:fd:1a:79:fc:2e:64:e2:5b:
9a:65:7b:d1:c3:fe:87:27:7d:01:a3:cd:57:21:27:
e0:b1:db:9a:bc:2c:27:c0:b0:75:8c:c8:57:49:be:
66:0f:2c:57:93:df:4f:8d:5d:db:a7:79:2d:b3:ac:
ce:a4:1e:17:7e:7a:85:7f:ed:75:ec:21:9a:9d:cf:
d2:e7:95:9b:39:6d:e2:b6:3d:a1:ee:69:f7:30:03:
bd:0d:f1:06:df:be:df:53:17:30:f1:da:0b:35:8c:
ca:e2:09:29:7a:7a:6c:fd:b8:8b:ff:4c:ce:ad:57:
c4:b0:82:55:83:da:d5:7d:a2:f2:d3:b7:cf:5e:dc:
95:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DF:98:9E:63:34:59:8B:B3:48:51:96:3B:E5:85:C1:7D:17:80:25
X509v3 Authority Key Identifier:
keyid:7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e8:17:71:e6:28:56:9e:97:72:e7:c6:b3:98:7d:0a:63:19:
6d:6b:8c:72:b5:5e:9d:a9:8c:8b:cd:e5:6c:da:a4:46:fb:31:
35:c5:68:df:32:df:43:b6:8e:37:66:f2:18:03:4c:58:29:fb:
52:fd:3d:02:3a:c2:68:ba:13:bd:99:99:ae:ef:38:45:de:12:
63:c7:aa:93:61:e9:76:2e:3b:db:c4:27:02:1f:25:3f:0a:07:
27:7e:80:1c:48:78:94:3d:6b:3b:8d:c5:59:53:1f:ab:f5:af:
18:b0:57:2b:96:56:75:10:65:14:12:b5:e8:e7:63:af:a1:90:
e4:41:7d:ea:54:ce:08:05:19:40:a5:01:e1:1a:d8:e3:90:64:
2c:5e:5f:f9:ed:1d:1b:09:e2:88:fc:44:4e:b0:0e:e4:8f:eb:
54:05:39:20:6e:92:74:54:81:6c:ae:76:e9:45:d8:3e:ab:0f:
c8:7a:cc:9a:d3:d5:24:69:0c:14:7f:61:99:e1:02:d9:35:be:
d4:86:de:e8:d3:6a:40:c2:0c:b8:ac:dc:bb:47:49:f0:eb:04:
a3:8c:83:6f:d9:04:1d:12:27:5c:fd:b0:05:14:c2:70:52:9e:
1c:f4:95:31:fd:ce:11:0b:65:de:53:3d:28:e6:8c:00:92:4c:
f4:15:b5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 01:43:03 2026 by rpki-client