Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
File: EH6W-USd78RwvMWpH5IXxigawbI.mft (raw, json)
Hash identifier: 5K/XoTC/nu4FT+HhUVV5XS0ik/FPZ5vL/XhPDlpmhL4=
Subject key identifier: CD:6F:21:A2:B7:18:04:8A:00:08:6B:88:6A:45:61:21:95:B8:B4:53
Authority key identifier: 10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2
Certificate issuer: /CN=107e96f9449defc470bcc5a91f9217c6281ac1b2
Certificate serial: 019D37893C89CD6C192939EB8DDDF3B31C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 03:00:33 +0000
Manifest this update: Sun 29 Mar 2026 03:00:33 +0000
Manifest next update: Mon 30 Mar 2026 03:00:33 +0000
Files and hashes: 1: EH6W-USd78RwvMWpH5IXxigawbI.crl (hash: o92Y3FSPnURI3jC8wIXi0xcBv8herCBwB/6ONTq8AHM=)
2: gv1GGCci0GYDu_oCzbbduhxzrWw.roa (hash: YOl1u3KuTTS65SS09VBRfvkXVdLfXku57oCCyc5onLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:3c:89:cd:6c:19:29:39:eb:8d:dd:f3:b3:1c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107e96f9449defc470bcc5a91f9217c6281ac1b2
Validity
Not Before: Mar 29 03:00:33 2026 GMT
Not After : Mar 30 03:00:33 2026 GMT
Subject: CN=cd6f21a2b718048a00086b886a45612195b8b453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:60:eb:2e:bd:8d:0c:d0:9c:12:01:57:1b:
15:23:7f:12:7f:fc:44:8e:4e:5d:d0:05:b1:fe:1b:
cf:6b:5d:d2:ca:73:2e:ba:7f:a3:e2:10:70:43:d7:
7c:a5:f2:23:ca:4f:45:dc:9c:89:b3:4b:51:cf:4f:
ab:47:14:26:0a:d0:34:1d:f3:5d:59:56:aa:b4:65:
3d:cc:1a:20:6a:f0:64:56:c0:bf:c3:0a:25:ad:7c:
57:75:fe:24:ae:84:23:12:10:e6:1c:c2:d4:c5:80:
65:62:0d:cc:61:7b:13:60:f1:9a:37:d1:ba:27:85:
7c:4b:8f:ea:53:63:0c:86:41:3e:e1:e3:33:f2:ed:
3e:84:3c:f8:05:a0:50:dd:22:fa:97:fe:ee:c9:85:
6b:62:da:6b:c4:a5:d8:f7:1f:05:8a:df:3c:fb:4c:
ab:41:b6:db:13:bc:dc:31:74:9f:b1:b5:0c:32:95:
ed:88:87:56:e7:aa:06:16:d1:dd:c1:f8:26:d5:d5:
33:56:a6:92:2f:eb:a0:09:21:07:d7:99:53:b8:79:
99:54:58:7f:6b:d2:47:d3:90:ac:bf:e2:79:47:fe:
fd:ab:63:eb:9d:48:ef:29:ed:19:0a:0b:10:15:9d:
df:6e:fe:a7:80:d6:b3:ce:8f:f4:06:78:de:80:cc:
17:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6F:21:A2:B7:18:04:8A:00:08:6B:88:6A:45:61:21:95:B8:B4:53
X509v3 Authority Key Identifier:
keyid:10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:fc:1e:7b:65:08:2b:10:59:40:be:08:45:39:6c:bb:12:b4:
bd:72:5a:0e:04:22:34:3f:79:45:12:7c:26:73:9f:3c:b5:27:
ad:7e:90:2c:bd:47:86:38:23:f5:4f:cf:9a:0c:79:7d:a0:db:
f9:5a:6a:b0:89:cf:07:5d:22:48:73:be:8e:1a:54:f5:be:5e:
4d:6d:50:6e:a5:08:c7:8f:e3:d5:7d:05:55:68:d1:e2:54:12:
61:47:62:8a:1a:ea:e4:fc:dc:3e:02:48:b8:c2:3e:fd:7e:31:
13:52:9b:36:7e:3c:81:5c:71:bc:fe:68:6b:5c:12:37:97:5c:
c9:25:95:c5:80:c3:37:08:62:6f:eb:e1:02:ba:bd:e3:74:a3:
74:d2:16:8a:71:c3:e2:b7:f9:15:28:64:57:e1:ca:cc:04:11:
98:9a:0a:70:d3:db:a9:85:83:ec:b3:5a:35:17:11:36:57:73:
70:27:51:a6:99:ea:06:f1:0c:30:1d:a4:c7:fb:ea:58:ec:37:
df:d6:06:52:98:41:4d:a4:52:8c:d1:09:16:26:3d:12:dd:0c:
59:39:fb:c7:10:49:95:c7:c1:e6:7a:90:69:8c:a6:6d:fd:4a:
d8:1f:99:93:d6:eb:94:aa:e2:7e:9a:78:7a:fc:f2:b8:bf:b8:
0f:f9:c6:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iTyJzWwZKTnrjd3zsxySMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwN2U5NmY5NDQ5ZGVmYzQ3MGJjYzVhOTFmOTIxN2M2Mjgx
YWMxYjIwHhcNMjYwMzI5MDMwMDMzWhcNMjYwMzMwMDMwMDMzWjAzMTEwLwYDVQQD
EyhjZDZmMjFhMmI3MTgwNDhhMDAwODZiODg2YTQ1NjEyMTk1YjhiNDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTFg6y69jQzQnBIBVxsVI38Sf/xE
jk5d0AWx/hvPa13SynMuun+j4hBwQ9d8pfIjyk9F3JyJs0tRz0+rRxQmCtA0HfNd
WVaqtGU9zBogavBkVsC/wwolrXxXdf4kroQjEhDmHMLUxYBlYg3MYXsTYPGaN9G6
J4V8S4/qU2MMhkE+4eMz8u0+hDz4BaBQ3SL6l/7uyYVrYtprxKXY9x8Fit88+0yr
QbbbE7zcMXSfsbUMMpXtiIdW56oGFtHdwfgm1dUzVqaSL+ugCSEH15lTuHmZVFh/
a9JH05Csv+J5R/79q2PrnUjvKe0ZCgsQFZ3fbv6ngNazzo/0BnjegMwXcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1vIaK3GASKAAhriGpFYSGVuLRTMB8GA1UdIwQY
MBaAFBB+lvlEne/EcLzFqR+SF8YoGsGyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUg2Vy1VU2Q3OFJ3dk1XcEg1SVh4aWdhd2JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jZjE0ODQtZjk2MS00MDM3LWJkYmYt
NjZhNzE1YWQzNzgzLzEvRUg2Vy1VU2Q3OFJ3dk1XcEg1SVh4aWdhd2JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9jZjE0ODQtZjk2MS00MDM3LWJkYmYtNjZhNzE1YWQzNzgz
LzEvRUg2Vy1VU2Q3OFJ3dk1XcEg1SVh4aWdhd2JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqvwee2UI
KxBZQL4IRTlsuxK0vXJaDgQiND95RRJ8JnOfPLUnrX6QLL1Hhjgj9U/Pmgx5faDb
+VpqsInPB10iSHO+jhpU9b5eTW1QbqUIx4/j1X0FVWjR4lQSYUdiihrq5PzcPgJI
uMI+/X4xE1KbNn48gVxxvP5oa1wSN5dcySWVxYDDNwhib+vhArq943SjdNIWinHD
4rf5FShkV+HKzAQRmJoKcNPbqYWD7LNaNRcRNldzcCdRppnqBvEMMB2kx/vqWOw3
39YGUphBTaRSjNEJFiY9Et0MWTn7xxBJlcfB5nqQaYymbf1K2B+Zk9brlKrifpp4
evzyuL+4D/nGOQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:43 2026 by rpki-client