Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
File: ehuwNttA15nYYRmKUkOzwD1Wwgo.mft (raw, json)
Hash identifier: 5+OvrZGxZQPUUiC+CGWqXM2097phLwtWrtI5YPt6dBs=
Subject key identifier: 27:2E:8C:F0:7C:6B:96:26:CF:5A:D5:E7:CB:DE:00:43:AE:7C:92:D9
Authority key identifier: 7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A
Certificate issuer: /CN=7a1bb036db40d799d861198a5243b3c03d56c20a
Certificate serial: 019CC7BEB55C84F7EC1E2A955BBEB603B293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
Manifest number: 039C
Signing time: Sat 07 Mar 2026 10:01:29 +0000
Manifest this update: Sat 07 Mar 2026 10:01:29 +0000
Manifest next update: Sun 08 Mar 2026 10:01:29 +0000
Files and hashes: 1: 2xwSBwS6RDNnNKRZKOi0MbfjwVc.roa (hash: RMcEguGLwOa0BQU2j27En5sOEwzBOElDccZLVB4NNcw=)
2: MRM-CoQOpNzOiMlv-SoepHZ_vkg.roa (hash: XmXaFQhLTQFHGNBv8hvjwKW9TmIBhDQDOsRTHRNNRp8=)
3: ehuwNttA15nYYRmKUkOzwD1Wwgo.crl (hash: e5GcmYBpbyaPE8cdIKOG0kCAF0JlCdPIyDc3hVmkW6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:be:b5:5c:84:f7:ec:1e:2a:95:5b:be:b6:03:b2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a1bb036db40d799d861198a5243b3c03d56c20a
Validity
Not Before: Mar 7 10:01:29 2026 GMT
Not After : Mar 8 10:01:29 2026 GMT
Subject: CN=272e8cf07c6b9626cf5ad5e7cbde0043ae7c92d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:01:e8:aa:77:83:27:a4:be:fd:69:a2:ea:b7:
95:73:54:e8:99:77:eb:4c:95:9e:4c:11:7c:24:c9:
8d:00:5e:f0:0a:44:e2:c0:d8:b6:8c:6b:66:1a:e2:
2b:f7:79:4a:66:cc:18:c8:7c:0c:c4:b4:07:40:49:
6e:88:12:a6:36:79:5f:49:85:eb:90:6d:19:36:d9:
cc:c1:0f:68:ee:5f:7a:26:f8:21:d5:49:cb:41:cf:
99:9f:a4:40:6d:f7:22:7e:b6:d7:00:5a:6f:25:35:
00:1d:5e:96:76:d9:93:9a:e1:b0:e8:5c:72:16:ef:
c0:96:f8:a4:3f:da:93:95:88:85:89:c8:43:48:88:
39:15:46:ae:d4:09:d6:62:c3:0b:ce:90:81:ca:0b:
ca:22:83:0b:42:ce:c4:8e:6f:94:2d:c2:8e:aa:00:
c4:f7:95:36:e0:ba:02:d4:63:a3:38:65:93:36:a5:
89:42:6c:e9:3d:b5:bf:aa:24:05:6f:8a:02:75:73:
ac:d2:8b:55:fd:ba:e5:1d:fa:a0:a2:50:e1:56:d3:
1d:02:60:3e:cd:2e:00:34:07:ab:81:2c:f9:0b:a2:
e7:46:3e:3a:28:7b:1f:7f:38:a1:b2:7e:60:3e:20:
83:62:22:ea:a9:b0:b6:a5:b7:bc:07:51:32:f9:31:
78:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2E:8C:F0:7C:6B:96:26:CF:5A:D5:E7:CB:DE:00:43:AE:7C:92:D9
X509v3 Authority Key Identifier:
keyid:7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:90:1b:db:d8:0b:f3:98:4e:94:66:82:29:95:6c:e4:8e:81:
fa:89:da:68:5e:21:c0:09:86:38:bd:4c:b3:10:40:d4:06:9f:
03:dc:01:8c:fb:21:d3:88:13:17:26:74:21:d1:22:ee:69:d4:
b7:8f:14:e0:02:12:bc:4f:3f:8f:f6:28:d7:1b:c7:4e:e2:6a:
f2:ad:08:68:72:33:1b:4f:ad:a9:11:3c:a1:23:d5:83:60:b8:
e4:b5:fe:77:3a:e5:b6:b6:ea:d7:79:c7:c5:cf:76:39:44:1d:
4b:57:1c:b5:ed:24:33:1f:ab:da:99:00:69:02:c6:ab:af:fe:
08:75:db:a2:b5:15:ba:46:33:4c:60:16:5b:5d:fc:c3:a1:c6:
d6:8d:99:9f:94:16:1f:35:21:3f:bf:62:ce:b6:b5:77:a2:d6:
ea:5e:ae:de:2e:98:82:3d:5a:d3:eb:62:5f:1a:c5:e4:d0:14:
aa:21:54:37:03:eb:d4:fe:a5:e0:60:74:51:3c:e4:3f:c4:8e:
26:7d:71:1b:1a:57:c2:41:88:d1:4e:51:2b:7f:c1:f8:58:97:
0b:13:8b:ed:ba:26:80:48:54:69:e8:ec:4b:e5:99:92:df:ec:
14:9e:09:d6:3f:76:3a:81:4c:49:bb:41:0d:f2:6b:87:3e:c5:
c6:35:2a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 21:03:32 2026 by rpki-client