Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft
File: sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft (raw, json)
Hash identifier: vyXZ4q/1kPqs/zwejDAf1QdIKeyGTG8RGkyBW16GaEU=
Subject key identifier: F4:DC:ED:94:AF:4B:8D:58:59:88:44:8E:74:4F:3C:9D:CA:B5:A9:79
Authority key identifier: B0:43:E6:21:FE:10:09:70:1F:63:66:84:3C:0A:BC:41:E1:80:C1:44
Certificate issuer: /CN=b043e621fe1009701f6366843c0abc41e180c144
Certificate serial: 019FA0E0B758E1704E437F8BC4DDDA73FA69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft
Manifest number: 10B6
Signing time: Mon 27 Jul 2026 00:01:49 +0000
Manifest this update: Mon 27 Jul 2026 00:01:49 +0000
Manifest next update: Tue 28 Jul 2026 00:01:49 +0000
Files and hashes: 1: OgmO1-eTgD9dDZrWj316OjI4JBA.roa (hash: 2J65qaET21q0mAcovvv6olsnYJM+JIut2vJCZjhvWr4=)
2: sEPmIf4QCXAfY2aEPAq8QeGAwUQ.crl (hash: 0jLCO9tCFaJFCZ5+JbvFNQgGYYUbnGj7dh6f5v9GAKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:b7:58:e1:70:4e:43:7f:8b:c4:dd:da:73:fa:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b043e621fe1009701f6366843c0abc41e180c144
Validity
Not Before: Jul 27 00:01:49 2026 GMT
Not After : Jul 28 00:01:49 2026 GMT
Subject: CN=f4dced94af4b8d585988448e744f3c9dcab5a979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d4:26:01:49:81:19:20:a5:51:fe:c7:80:a3:
5c:92:5a:50:49:12:e8:f6:6c:44:b8:8f:9d:ce:46:
0a:4d:cf:d6:0f:71:cb:7a:2f:56:c0:83:cb:03:2d:
90:36:3e:e6:b7:b4:95:10:a6:4c:da:ca:e8:5e:27:
23:da:e2:68:b8:0f:8a:30:c8:9d:8c:62:8d:2b:7b:
ce:98:93:b3:b2:1d:b5:66:da:95:35:24:8b:92:b9:
80:b1:db:e1:8a:b6:0c:56:cd:98:f0:62:63:61:71:
62:60:b9:73:1d:21:e8:9d:44:f2:42:6e:a0:40:5a:
21:94:cf:d8:ea:b3:cb:26:94:bf:b7:2f:52:b3:2f:
6a:ff:68:01:42:b5:df:6b:20:e8:3a:dd:59:48:86:
64:d8:bc:c8:a6:6e:81:bc:28:0e:85:7b:cd:9f:9f:
31:bb:2d:fc:40:3c:86:b0:69:bf:95:7e:f7:d5:96:
26:86:6d:7f:4b:6d:39:ab:3e:f5:3c:d4:13:d5:86:
34:ad:13:00:95:1a:e9:58:40:15:81:40:6e:f8:5f:
44:da:3b:d0:b3:f8:a8:3d:74:5f:e7:a5:9c:e1:36:
5d:d1:7c:ea:0f:a2:0a:7a:c0:16:65:75:ee:29:d5:
92:42:91:c8:6d:19:de:30:35:dc:30:17:77:2b:06:
87:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DC:ED:94:AF:4B:8D:58:59:88:44:8E:74:4F:3C:9D:CA:B5:A9:79
X509v3 Authority Key Identifier:
keyid:B0:43:E6:21:FE:10:09:70:1F:63:66:84:3C:0A:BC:41:E1:80:C1:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:32:21:14:a6:ef:1d:47:b6:9d:e3:7c:51:74:a7:6b:cc:0f:
bd:31:22:dd:5e:f2:3a:58:84:13:36:e5:1d:8e:a3:09:37:39:
dc:88:df:ee:af:33:e3:b8:c1:85:d7:45:a6:b0:04:36:19:9f:
66:d3:ea:eb:78:e4:1c:fa:8e:35:15:35:37:c9:de:40:24:f9:
e5:b3:03:d2:5f:75:b5:70:a5:c6:50:ae:c2:6c:c5:a1:5b:e7:
ee:5c:cc:32:cb:59:7b:fb:67:de:b1:59:e6:04:7f:da:7c:9e:
9b:9f:d2:82:cc:01:49:7b:c7:c5:07:34:57:92:f4:41:ab:2c:
f6:3a:25:07:4f:90:07:39:0a:b6:cb:87:cc:80:8a:e9:24:84:
9f:4a:87:4b:97:d6:48:65:c2:19:6c:e2:ea:b0:9c:62:2e:0c:
3b:ad:b3:f3:5c:a7:f4:e3:06:48:1f:82:c1:43:ab:0c:63:cb:
cc:86:da:a8:de:19:b5:bd:ec:f2:0b:a4:45:16:7f:bd:19:4a:
d8:24:cc:b5:7b:cb:e1:00:76:92:c4:5c:3e:8f:74:9d:b6:e1:
8a:f5:47:87:d1:13:5a:54:b7:14:44:76:16:08:3b:98:8e:5a:
64:91:3c:dd:26:e3:84:19:14:c4:49:59:d7:13:99:14:ee:4b:
f0:9f:ad:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:09:38 2026 by rpki-client