Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
File: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft (raw, json)
Hash identifier: sVMQbK3ig96OIGLJmmMpjk8pLAdk9B6qvoRbxBcuNuY=
Subject key identifier: 30:23:2D:41:B7:83:E9:50:72:4A:2C:94:25:AC:BC:B4:A4:91:82:EF
Authority key identifier: 7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
Certificate issuer: /CN=7a17259a863c3d637d457e119b750df95e003fd6
Certificate serial: 019FA1F1F91E16D4987B7410E0FC085AD848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
Manifest number: 19CE
Signing time: Mon 27 Jul 2026 05:00:17 +0000
Manifest this update: Mon 27 Jul 2026 05:00:17 +0000
Manifest next update: Tue 28 Jul 2026 05:00:17 +0000
Files and hashes: 1: 5tBrp55-EAXMGlNBrWNqj744wk4.roa (hash: rV+tN1f8sl1mzbaoUz6eUbNwGQ89OtRS1uDIueamB+M=)
2: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl (hash: 6vgce8FvbWH9eNB5NIJCywO+L7rAqnvLz/fGaCuqNiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f1:f9:1e:16:d4:98:7b:74:10:e0:fc:08:5a:d8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a17259a863c3d637d457e119b750df95e003fd6
Validity
Not Before: Jul 27 05:00:17 2026 GMT
Not After : Jul 28 05:00:17 2026 GMT
Subject: CN=30232d41b783e950724a2c9425acbcb4a49182ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d4:70:08:63:e0:6a:fd:4d:27:d0:20:a5:e0:
f8:fb:9c:9d:ea:b7:c7:66:c9:e9:d2:15:7b:8b:d4:
87:66:00:0e:d6:38:39:40:80:5f:5a:45:61:f7:af:
db:26:f1:e0:db:a0:9f:91:f3:25:b8:dc:bb:51:be:
af:10:6f:ae:c4:fa:17:6b:a7:b3:64:0b:4e:82:82:
0a:36:8c:aa:7a:71:3f:18:f0:ce:0a:de:4b:d0:02:
20:d2:9a:07:73:70:b2:20:56:62:55:3a:8b:68:f0:
16:f6:f6:9f:e5:d7:07:1e:43:a3:89:b5:c1:ba:02:
41:7e:6d:32:6d:45:c8:e8:ec:8d:f2:52:0a:00:d0:
67:7d:38:68:f8:2d:4b:ff:7f:ee:e9:3c:36:e6:fc:
a7:18:68:be:63:29:b4:70:d9:7e:06:14:f8:c7:74:
21:42:fa:a0:3b:8b:51:fd:14:e9:36:ed:3a:f9:94:
57:96:0a:08:b3:0c:51:f2:39:ed:f8:99:0f:49:04:
04:a8:08:ed:50:e5:2a:66:5e:0a:80:57:3e:17:50:
60:6a:18:ca:3b:12:a9:12:40:a1:e7:38:5f:69:a3:
5b:d0:2b:7e:b8:cc:33:84:20:4b:57:ce:7b:59:dc:
cd:c3:fa:60:01:8a:8e:59:fb:d9:87:7f:51:a6:96:
c5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:23:2D:41:B7:83:E9:50:72:4A:2C:94:25:AC:BC:B4:A4:91:82:EF
X509v3 Authority Key Identifier:
keyid:7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:70:c2:d4:58:72:06:53:fd:49:4f:01:4e:df:30:10:9b:07:
d0:91:bf:a0:c6:6b:ef:66:46:db:60:df:8a:78:43:cd:28:8b:
8b:1a:1b:45:b7:0f:b2:1d:7c:26:71:2b:f9:0b:8e:d4:77:11:
3c:04:3c:90:e3:b4:50:8b:ec:dc:f2:1b:e5:9d:e0:79:99:30:
18:e8:f5:c4:c0:76:1e:b1:d7:3a:05:97:27:16:f9:9c:ec:6b:
8e:82:d4:87:3a:1b:19:90:0f:c7:ac:31:be:25:ba:14:90:65:
b4:11:73:23:ec:1d:f2:6e:cb:25:e0:37:47:2d:39:8a:bd:b4:
0d:44:69:33:44:bd:b4:27:94:d5:fc:8c:74:54:81:25:3a:b3:
8c:d1:7f:81:b0:51:4a:73:b9:ba:2a:43:f6:cc:c5:a8:5e:5d:
00:8a:25:aa:55:eb:61:00:3d:a4:13:c0:d2:85:90:65:89:7c:
24:da:2d:32:15:07:ba:46:0e:c8:42:e3:85:0c:02:46:30:d6:
c1:c8:18:d8:5c:96:11:8f:eb:98:04:3a:00:38:36:12:2b:5f:
2b:6e:f4:e4:66:01:5f:64:fd:50:ec:44:04:33:1e:0a:fa:11:
37:b0:dc:e4:f9:98:4a:3a:89:56:dd:08:23:24:81:f0:5b:76:
f4:71:d5:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+h8fkeFtSYe3QQ4PwIWthIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMTcyNTlhODYzYzNkNjM3ZDQ1N2UxMTliNzUwZGY5NWUw
MDNmZDYwHhcNMjYwNzI3MDUwMDE3WhcNMjYwNzI4MDUwMDE3WjAzMTEwLwYDVQQD
EygzMDIzMmQ0MWI3ODNlOTUwNzI0YTJjOTQyNWFjYmNiNGE0OTE4MmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9RwCGPgav1NJ9AgpeD4+5yd6rfH
Zsnp0hV7i9SHZgAO1jg5QIBfWkVh96/bJvHg26CfkfMluNy7Ub6vEG+uxPoXa6ez
ZAtOgoIKNoyqenE/GPDOCt5L0AIg0poHc3CyIFZiVTqLaPAW9vaf5dcHHkOjibXB
ugJBfm0ybUXI6OyN8lIKANBnfTho+C1L/3/u6Tw25vynGGi+Yym0cNl+BhT4x3Qh
QvqgO4tR/RTpNu06+ZRXlgoIswxR8jnt+JkPSQQEqAjtUOUqZl4KgFc+F1BgahjK
OxKpEkCh5zhfaaNb0Ct+uMwzhCBLV857WdzNw/pgAYqOWfvZh39RppbFhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAjLUG3g+lQckoslCWsvLSkkYLvMB8GA1UdIwQY
MBaAFHoXJZqGPD1jfUV+EZt1DfleAD/WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWhjbG1vWThQV045Ulg0Um0zVU4tVjRBUDlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wMDg0OWUtZDhlNi00YmIxLWFkMzAt
YWQ4YmM4YmM3OTY3LzEvZWhjbG1vWThQV045Ulg0Um0zVU4tVjRBUDlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8wMDg0OWUtZDhlNi00YmIxLWFkMzAtYWQ4YmM4YmM3OTY3
LzEvZWhjbG1vWThQV045Ulg0Um0zVU4tVjRBUDlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnDC1Fhy
BlP9SU8BTt8wEJsH0JG/oMZr72ZG22DfinhDzSiLixobRbcPsh18JnEr+QuO1HcR
PAQ8kOO0UIvs3PIb5Z3geZkwGOj1xMB2HrHXOgWXJxb5nOxrjoLUhzobGZAPx6wx
viW6FJBltBFzI+wd8m7LJeA3Ry05ir20DURpM0S9tCeU1fyMdFSBJTqzjNF/gbBR
SnO5uipD9szFqF5dAIolqlXrYQA9pBPA0oWQZYl8JNotMhUHukYOyELjhQwCRjDW
wcgY2FyWEY/rmAQ6ADg2EitfK2705GYBX2T9UOxEBDMeCvoRN7Dc5PmYSjqJVt0I
IySB8Ft29HHVoQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 13:57:43 2026 by rpki-client