Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
File: ehJ9Y84cnzVXOQryH8BhBypSX04.mft (raw, json)
Hash identifier: SD+innOZ5foVSmssCSL3EK8FsFSkTFgdREP0AeDqAFc=
Subject key identifier: 2D:D9:C4:A2:86:C7:B6:96:4A:F1:74:58:31:56:CE:03:37:B3:69:4F
Authority key identifier: 7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
Certificate issuer: /CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Certificate serial: 019EB8B399AEA9912434CE2564F12D301ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
Manifest number: 04AD
Signing time: Thu 11 Jun 2026 22:00:38 +0000
Manifest this update: Thu 11 Jun 2026 22:00:38 +0000
Manifest next update: Fri 12 Jun 2026 22:00:38 +0000
Files and hashes: 1: ehJ9Y84cnzVXOQryH8BhBypSX04.crl (hash: uxTQWxUMStBeYelooABiPRU3kShXTZPK5++oHbaL23E=)
2: mryfSMsiVc0yv4FSUpt7qiqcwh4.roa (hash: 0IMb7oddMwh/zy5T4EnTss9mtPc9VXAUaEOcmqL1xfU=)
3: o_rtVjzkw0KDuX61bKwdi27cJvI.roa (hash: /gFVliPW+JCCvNfNfgkacSugBlyQGtqR4HbJDxkhEjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b3:99:ae:a9:91:24:34:ce:25:64:f1:2d:30:1e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Validity
Not Before: Jun 11 22:00:38 2026 GMT
Not After : Jun 12 22:00:38 2026 GMT
Subject: CN=2dd9c4a286c7b6964af174583156ce0337b3694f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ee:f6:a6:92:dd:8e:aa:92:4f:43:12:fc:18:
28:e0:98:e8:4b:a1:a6:dc:55:f9:f2:76:63:4e:f6:
da:2a:79:8d:c7:ea:27:03:45:c9:b8:8c:da:e2:c8:
6c:49:20:5b:06:19:31:b7:31:43:c8:07:ca:ad:88:
87:25:8b:b6:43:bf:cd:71:3d:50:c1:82:d3:ea:ae:
35:ed:6a:46:cc:7e:8d:3c:25:e5:be:be:9f:50:2a:
ba:6f:17:cf:17:e3:b3:c4:5c:18:e2:83:d7:37:26:
14:46:d9:d6:fb:16:71:f9:24:b9:61:2e:ce:26:69:
46:3b:40:0e:c1:ca:93:92:c6:fd:da:48:17:55:6c:
b3:14:5a:ec:be:c9:42:55:1d:3c:5c:fe:14:b3:af:
b7:cc:f6:d4:c3:f2:a7:e7:13:37:a8:31:41:5d:58:
70:97:44:f6:35:5d:ef:1a:24:00:c6:dd:80:cb:14:
e8:03:2f:5e:1d:15:59:a2:55:5d:5c:92:e8:0e:b6:
c5:b3:7e:39:2f:43:3c:01:cd:a7:73:69:d9:94:4b:
88:fd:e4:9c:32:59:48:cf:8e:07:c2:9a:c8:48:a8:
09:d9:a8:16:07:81:52:e5:ec:6c:8e:97:18:e8:74:
db:e7:00:68:ea:c0:47:06:36:2c:e6:ae:2e:11:4f:
0e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D9:C4:A2:86:C7:B6:96:4A:F1:74:58:31:56:CE:03:37:B3:69:4F
X509v3 Authority Key Identifier:
keyid:7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:92:67:37:1f:50:a1:46:a5:69:26:b3:1f:a1:0f:b9:84:67:
df:64:7d:82:95:9f:7d:69:d4:65:ac:48:23:e7:59:3d:da:be:
aa:80:7f:d5:b0:68:ca:0b:83:4b:54:97:0c:69:55:8f:8e:6d:
71:dd:d2:d0:21:c7:6e:d9:5e:78:4e:50:f4:e4:ce:fe:32:34:
7c:67:ce:46:97:23:69:02:ea:3f:48:17:b5:b9:37:17:92:d9:
35:a2:e0:8a:22:d8:55:55:07:37:50:26:4d:42:2b:ce:f4:69:
90:e7:c9:c5:e4:ad:4b:69:ff:e8:77:d9:b6:99:bc:1b:9d:1b:
28:4e:ea:d3:b2:13:32:ac:2f:9c:57:cb:ea:14:f3:9f:fd:10:
e9:31:54:7a:2c:6f:0c:55:75:71:eb:e9:c9:a2:6e:a9:b9:ad:
d7:16:26:92:e5:3c:58:1e:59:c5:f2:24:c9:df:8f:77:0f:47:
0f:03:3a:d3:4f:35:66:61:a8:e6:fc:2a:79:dd:cb:44:bb:fd:
ce:06:d6:38:1b:a7:83:6a:ee:71:19:99:78:80:67:8a:f1:43:
20:bf:e0:c8:d8:15:c0:de:83:94:8d:fc:b8:4e:58:37:3e:5a:
f2:9a:50:b0:6a:43:5c:ce:c1:7d:bd:c8:ec:38:7f:f5:c2:19:
67:22:e7:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64s5muqZEkNM4lZPEtMB7PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMTI3ZDYzY2UxYzlmMzU1NzM5MGFmMjFmYzA2MTA3MmE1
MjVmNGUwHhcNMjYwNjExMjIwMDM4WhcNMjYwNjEyMjIwMDM4WjAzMTEwLwYDVQQD
EygyZGQ5YzRhMjg2YzdiNjk2NGFmMTc0NTgzMTU2Y2UwMzM3YjM2OTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoe72ppLdjqqST0MS/Bgo4JjoS6Gm
3FX58nZjTvbaKnmNx+onA0XJuIza4shsSSBbBhkxtzFDyAfKrYiHJYu2Q7/NcT1Q
wYLT6q417WpGzH6NPCXlvr6fUCq6bxfPF+OzxFwY4oPXNyYURtnW+xZx+SS5YS7O
JmlGO0AOwcqTksb92kgXVWyzFFrsvslCVR08XP4Us6+3zPbUw/Kn5xM3qDFBXVhw
l0T2NV3vGiQAxt2AyxToAy9eHRVZolVdXJLoDrbFs345L0M8Ac2nc2nZlEuI/eSc
MllIz44HwprISKgJ2agWB4FS5exsjpcY6HTb5wBo6sBHBjYs5q4uEU8OAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3ZxKKGx7aWSvF0WDFWzgM3s2lPMB8GA1UdIwQY
MBaAFHoSfWPOHJ81VzkK8h/AYQcqUl9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82OWU1M2YtYTQ4Yy00OWIwLTkwZTQt
OGQyNDgxNmQ5N2RlLzEvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC82OWU1M2YtYTQ4Yy00OWIwLTkwZTQtOGQyNDgxNmQ5N2Rl
LzEvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJJnNx9Q
oUalaSazH6EPuYRn32R9gpWffWnUZaxII+dZPdq+qoB/1bBoyguDS1SXDGlVj45t
cd3S0CHHbtleeE5Q9OTO/jI0fGfORpcjaQLqP0gXtbk3F5LZNaLgiiLYVVUHN1Am
TUIrzvRpkOfJxeStS2n/6HfZtpm8G50bKE7q07ITMqwvnFfL6hTzn/0Q6TFUeixv
DFV1cevpyaJuqbmt1xYmkuU8WB5ZxfIkyd+Pdw9HDwM60081ZmGo5vwqed3LRLv9
zgbWOBung2rucRmZeIBnivFDIL/gyNgVwN6DlI38uE5YNz5a8ppQsGpDXM7Bfb3I
7Dh/9cIZZyLnpQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:54:58 2026 by rpki-client