Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
File: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft (raw, json)
Hash identifier: T8cnCQfnYCAmjDDkTUPOwnlc78SDvM2wpPibFD+5Biw=
Subject key identifier: 62:4D:93:66:F4:14:7F:B0:70:DE:8F:E1:E0:98:40:92:D9:68:6D:D5
Authority key identifier: 7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
Certificate issuer: /CN=7a17259a863c3d637d457e119b750df95e003fd6
Certificate serial: 01A08B9FA9267CD2C1D6DF87FBC04DFAEC4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
Manifest number: 1A47
Signing time: Thu 10 Sep 2026 14:01:31 +0000
Manifest this update: Thu 10 Sep 2026 14:01:31 +0000
Manifest next update: Fri 11 Sep 2026 14:01:31 +0000
Files and hashes: 1: 5tBrp55-EAXMGlNBrWNqj744wk4.roa (hash: rV+tN1f8sl1mzbaoUz6eUbNwGQ89OtRS1uDIueamB+M=)
2: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl (hash: ZaKgOStsMng19E8QDIw6/mi5hD2u0dpvfbpO7WhWgko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:a9:26:7c:d2:c1:d6:df:87:fb:c0:4d:fa:ec:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a17259a863c3d637d457e119b750df95e003fd6
Validity
Not Before: Sep 10 14:01:31 2026 GMT
Not After : Sep 11 14:01:31 2026 GMT
Subject: CN=624d9366f4147fb070de8fe1e0984092d9686dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6b:08:0d:79:bf:00:c4:5a:a8:72:b0:89:eb:
3f:e7:b6:e4:ee:f9:3e:36:0c:20:21:37:c6:e8:26:
e1:91:94:03:24:f2:0f:15:ad:62:38:c3:e6:1d:4c:
ee:70:cc:0b:81:e5:d8:4d:22:1a:c6:31:77:23:4d:
f0:fc:ed:d8:89:f3:38:d9:0a:85:b4:8c:a0:03:5b:
be:8f:98:2b:97:25:aa:11:64:ca:59:ad:ef:4b:08:
14:fa:94:af:77:a7:1b:3d:ca:88:6d:2d:71:50:f8:
c8:08:a9:00:88:39:37:b5:ca:0f:f5:fd:8d:d3:1a:
b5:cc:08:2d:ab:f6:8c:94:f0:9c:24:6d:3f:2c:f9:
65:33:e5:ac:98:76:77:ed:80:13:4f:bb:03:84:c3:
0e:3d:44:42:2c:04:12:41:5d:70:98:a5:1c:4e:ed:
d3:7f:a8:68:b9:ff:c5:e6:ea:2d:6a:0d:d4:56:91:
2f:a8:b5:84:7f:b0:f1:c8:eb:1d:3e:71:04:ee:09:
1c:d0:65:d0:d5:77:43:9e:72:1d:3c:28:12:1a:8d:
fb:a1:0d:9a:47:5b:79:f1:b9:e7:19:ec:7e:72:42:
ab:87:13:b6:12:cf:61:e6:be:ad:ec:1a:46:d5:56:
a6:6c:43:01:04:9e:2a:0f:76:27:ec:21:8c:19:53:
b3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4D:93:66:F4:14:7F:B0:70:DE:8F:E1:E0:98:40:92:D9:68:6D:D5
X509v3 Authority Key Identifier:
keyid:7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:11:85:d7:4c:7b:d5:ca:8d:e0:f8:97:a4:be:ae:58:f6:c2:
a4:25:32:ea:d5:77:bf:f4:9d:20:04:aa:81:7a:d6:4e:6b:04:
ec:cf:fb:2e:6d:fd:6a:5f:3b:c1:a7:cb:c6:1f:3d:ad:b0:d6:
65:93:11:db:93:95:03:8d:16:06:06:7b:3c:02:ab:8a:84:5e:
a0:1e:b7:57:8b:88:1d:92:58:b8:34:53:fe:1c:33:9b:2d:37:
3e:fa:d6:b7:3b:5a:7b:9b:4e:32:43:3e:3c:07:c5:b8:d1:b7:
4f:2d:aa:c6:a1:fd:c0:5c:6a:30:8a:ff:4f:4b:9d:8d:4f:4c:
d3:27:b4:86:33:54:9e:77:92:7b:53:c4:9e:4d:94:9e:cb:e1:
5b:49:a9:f0:60:b1:33:29:20:c1:63:43:4e:8d:8d:80:1f:e4:
13:6d:4e:bb:e9:a3:6d:94:fc:da:e9:8e:15:fd:cd:5f:ed:2d:
67:ec:18:b0:63:a4:95:4c:00:9e:c9:9a:2a:8c:50:c6:26:44:
35:fa:02:55:f3:28:50:e4:b5:43:16:28:df:cb:51:4e:fb:5e:
11:86:36:fa:50:e8:ed:cf:42:32:df:ce:51:77:97:c7:b9:45:
5f:a8:15:08:8f:12:b2:4d:d3:64:71:5a:78:bf:09:10:e1:a2:
f2:3f:ac:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:30:21 2026 by rpki-client