
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
File: ehuwNttA15nYYRmKUkOzwD1Wwgo.mft (raw, json)
Hash identifier: kCSpH3tcHkgRBmed8nVl7hZcleeevWA2A+hfwOJxHYs=
Subject key identifier: F1:6B:6F:C5:E6:2E:E6:7D:73:1F:06:F1:9E:04:9E:C4:5B:F1:3E:18
Authority key identifier: 7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A
Certificate issuer: /CN=7a1bb036db40d799d861198a5243b3c03d56c20a
Certificate serial: 01A06E70BD79E370808FC8018E5BE0DC6927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
Manifest number: 0580
Signing time: Fri 04 Sep 2026 22:01:17 +0000
Manifest this update: Fri 04 Sep 2026 22:01:17 +0000
Manifest next update: Sat 05 Sep 2026 22:01:17 +0000
Files and hashes: 1: 2xwSBwS6RDNnNKRZKOi0MbfjwVc.roa (hash: RMcEguGLwOa0BQU2j27En5sOEwzBOElDccZLVB4NNcw=)
2: MRM-CoQOpNzOiMlv-SoepHZ_vkg.roa (hash: XmXaFQhLTQFHGNBv8hvjwKW9TmIBhDQDOsRTHRNNRp8=)
3: ehuwNttA15nYYRmKUkOzwD1Wwgo.crl (hash: Eqnfpsu344xY8tv+QfoshoB9OjZh7zklH4P1t/8OXUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:bd:79:e3:70:80:8f:c8:01:8e:5b:e0:dc:69:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a1bb036db40d799d861198a5243b3c03d56c20a
Validity
Not Before: Sep 4 22:01:17 2026 GMT
Not After : Sep 5 22:01:17 2026 GMT
Subject: CN=f16b6fc5e62ee67d731f06f19e049ec45bf13e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:76:63:10:73:a6:ba:e2:ab:ff:48:4d:64:a8:
50:9c:48:c2:8f:f4:7e:0d:0c:ae:c7:ce:06:36:09:
02:41:4d:fd:15:73:ec:b5:0f:2d:0f:ba:64:f1:83:
00:47:69:d6:1b:44:1c:af:48:51:e3:b1:23:17:9b:
98:6a:43:73:c1:f3:e3:37:ab:4f:cb:cc:98:b7:a7:
2a:ac:72:75:fb:ae:8d:7c:99:08:88:84:b2:58:41:
c6:13:a8:62:1d:d0:ee:fc:67:55:c4:af:1a:63:37:
ba:dc:a1:f8:ee:0c:47:15:a2:e9:c7:ec:4f:a0:0a:
e8:5a:cb:bd:16:a3:e1:27:a4:a3:33:88:f2:a2:8d:
81:da:94:6f:47:73:23:53:5c:db:79:e2:ad:1d:a2:
69:ce:f7:bd:51:dd:e1:e4:5e:41:c2:6f:c8:02:32:
6f:57:06:f7:4e:b3:97:b2:b0:e6:33:22:3c:4e:d8:
8f:7e:97:04:cc:fd:c1:8c:c3:f8:60:eb:0c:d3:a0:
7b:b0:0c:7d:38:22:82:17:b8:9c:35:2d:e6:49:ed:
92:8d:3b:41:78:31:bd:a4:84:5b:4f:28:09:9a:fb:
6a:3d:4f:3d:01:65:6f:12:77:b6:4a:da:26:3b:16:
eb:ca:7c:3a:da:c7:6f:0f:98:0e:d7:94:da:de:d3:
07:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6B:6F:C5:E6:2E:E6:7D:73:1F:06:F1:9E:04:9E:C4:5B:F1:3E:18
X509v3 Authority Key Identifier:
keyid:7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:58:7b:a5:01:01:37:56:fc:6c:c0:b2:d7:a5:f6:f0:b3:8e:
1d:d1:71:69:6c:98:4f:38:5f:34:57:a7:0e:cf:ac:f6:68:c0:
8c:cb:d0:41:ce:74:0c:38:84:53:52:37:51:e6:a0:6b:50:17:
87:50:dd:e6:2f:48:d9:f8:c9:8f:3a:5f:69:44:59:6e:44:4d:
c4:d9:32:8d:94:82:fa:45:20:58:9c:56:4e:5a:d2:73:c5:96:
96:80:c8:19:e3:dc:40:fe:7f:fa:40:f8:66:b5:5a:56:6c:f8:
00:d6:08:05:7e:0f:4f:a0:72:2d:19:24:12:8b:cd:9a:7e:ab:
b5:17:ba:1f:0d:b2:6e:2a:19:6f:21:e0:7d:f7:26:22:80:2a:
d2:01:72:d9:b1:ce:75:c9:cf:9a:20:d5:6c:ce:1f:13:00:2b:
b9:5b:29:f8:40:e6:67:6c:74:1b:77:e6:1c:e3:d0:48:3c:a8:
e3:12:2e:eb:60:7d:7e:e9:40:2c:53:2d:24:4a:3e:39:84:ac:
0f:d3:d8:a5:7e:a3:48:88:01:a3:8d:4f:81:a5:0c:58:90:92:
4e:88:a1:0d:19:56:5a:36:c7:0d:97:be:91:d5:b7:84:71:51:
9b:62:86:00:0a:79:88:fb:09:b6:e7:a1:5d:9c:86:37:11:ef:
82:b3:7d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:37:59 2026 by rpki-client