Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
File: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft (raw, json)
Hash identifier: Cr0roaKdO+ABl81Vtw1eqZ7orVLTjvJnnp3l1/I73iU=
Subject key identifier: A0:68:87:59:88:6E:C7:9D:B2:63:7C:E7:1D:D6:3E:FD:0D:42:03:01
Authority key identifier: 7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
Certificate issuer: /CN=7a17259a863c3d637d457e119b750df95e003fd6
Certificate serial: 01A17D054E55FC5AED85CB73608213EA6929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
Manifest number: 1AC4
Signing time: Tue 27 Oct 2026 11:01:02 +0000
Manifest this update: Tue 27 Oct 2026 11:01:02 +0000
Manifest next update: Wed 28 Oct 2026 11:01:02 +0000
Files and hashes: 1: 5tBrp55-EAXMGlNBrWNqj744wk4.roa (hash: rV+tN1f8sl1mzbaoUz6eUbNwGQ89OtRS1uDIueamB+M=)
2: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl (hash: WqwRzB1DxaDZKdrPc59zm81BuAkGaIqUpqMp8NsMH7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:4e:55:fc:5a:ed:85:cb:73:60:82:13:ea:69:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a17259a863c3d637d457e119b750df95e003fd6
Validity
Not Before: Oct 27 11:01:02 2026 GMT
Not After : Oct 28 11:01:02 2026 GMT
Subject: CN=a0688759886ec79db2637ce71dd63efd0d420301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c9:49:29:92:0e:d6:f0:dc:c6:18:6a:43:b6:
be:b6:25:6f:00:dc:81:01:9e:f6:c1:d8:21:8a:b5:
06:e9:eb:7e:27:ab:ff:73:54:6c:fa:ea:2a:97:0b:
d0:04:95:13:95:d4:a1:55:23:5b:21:17:07:88:97:
49:8b:42:18:43:9e:8f:e3:2e:f2:63:42:ba:b0:9f:
9f:f4:95:a2:28:d0:bc:07:b2:8e:12:4d:97:89:5a:
74:67:61:5e:7c:6d:65:97:3e:84:bd:07:9d:b8:01:
be:af:64:fd:d8:ab:5a:a9:2a:de:4c:8e:92:59:66:
51:fc:12:65:2d:ec:a9:fb:45:ad:e2:68:59:7c:af:
66:80:48:cc:c2:25:f0:10:9a:00:7b:e7:08:cb:50:
92:a8:be:8f:1a:21:1b:cc:05:04:e3:44:93:c5:fe:
d1:96:a7:d2:31:68:24:3c:50:b8:2e:ee:e2:01:65:
e1:77:aa:79:4d:3f:ff:0e:b6:da:21:60:85:9d:5a:
31:c9:96:cc:f9:10:12:5f:61:d0:cf:17:86:9f:00:
fc:20:d0:58:a2:f1:0b:a2:aa:f0:c8:31:e8:87:7e:
2f:72:59:6a:62:38:c3:d5:00:f2:b9:ae:7a:4f:e5:
c7:38:63:85:5c:87:21:05:54:c9:5d:42:4f:e6:92:
1b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:68:87:59:88:6E:C7:9D:B2:63:7C:E7:1D:D6:3E:FD:0D:42:03:01
X509v3 Authority Key Identifier:
keyid:7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:3c:42:f2:5c:38:ed:2f:44:2f:5a:ac:50:b4:0b:0c:e8:33:
49:d4:8c:83:6e:39:79:2d:a5:ae:46:2b:88:44:b5:82:96:76:
30:b8:ce:8e:bb:49:ce:87:c6:14:02:9f:22:13:6a:14:20:a7:
97:04:96:6b:d6:b0:dc:eb:cf:6a:37:53:39:da:09:91:9e:38:
6a:41:56:c9:50:6c:96:cc:2c:74:2c:9b:30:8c:ea:42:00:f1:
fe:6b:0c:30:3c:37:11:aa:3c:6a:f6:17:8a:d1:5c:b7:0b:e6:
2f:d1:52:1d:72:6b:36:f6:8b:e4:8d:45:aa:f1:3c:06:26:66:
24:a7:96:75:d0:f5:57:59:da:79:25:3a:05:b4:56:e7:8c:9c:
4b:78:56:68:e2:f3:24:3f:46:4e:5e:81:8c:6a:31:8b:55:ac:
9a:14:6a:4f:12:3d:f5:3d:04:dd:fe:b6:99:f4:42:27:49:a7:
74:aa:b0:ba:4c:b8:dd:10:5c:dd:6b:86:e6:91:29:89:a1:12:
b1:9e:a4:05:af:02:24:5a:87:e1:e5:c8:3d:14:be:ce:5d:2d:
1c:cc:6b:0c:50:a0:1e:3e:80:be:69:94:b5:9f:0c:98:ec:33:
f6:b2:59:8d:58:ef:eb:c3:8a:d9:d5:0d:e9:13:4c:c0:89:e2:
d8:ee:c5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:32:09 2026 by rpki-client