
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
File: EPm9HHFv0ulaydYQddcJYhroBgA.mft (raw, json)
Hash identifier: mJ5yOxmI+psdnihs5Gp2BqRCf7nLil79ZdQXwULa2j0=
Subject key identifier: 09:22:A1:6D:88:36:A7:8A:29:BC:E8:43:9E:03:62:1E:FA:22:E5:94
Authority key identifier: 10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00
Certificate issuer: /CN=10f9bd1c716fd2e95ac9d61075d709621ae80600
Certificate serial: 01A14A2A185C5F6B4ED00615BBE6442F6D96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
Manifest number: 0CE9
Signing time: Sat 17 Oct 2026 14:00:34 +0000
Manifest this update: Sat 17 Oct 2026 14:00:34 +0000
Manifest next update: Sun 18 Oct 2026 14:00:34 +0000
Files and hashes: 1: EPm9HHFv0ulaydYQddcJYhroBgA.crl (hash: syaZboc7vZIk4rl7MGen0VaOwdDsSuQan8EGvFZh7bw=)
2: yfoSU4MQI1IIA9Yj3zamcPUf7K4.roa (hash: fzqLa9/pLczJAubnxnbiM1yIch9oKlX3jK2XbY433q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:2a:18:5c:5f:6b:4e:d0:06:15:bb:e6:44:2f:6d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f9bd1c716fd2e95ac9d61075d709621ae80600
Validity
Not Before: Oct 17 14:00:34 2026 GMT
Not After : Oct 18 14:00:34 2026 GMT
Subject: CN=0922a16d8836a78a29bce8439e03621efa22e594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:5b:cf:98:d0:2a:d8:9d:82:df:11:0e:fe:
c2:a2:8f:29:50:a7:0e:00:9a:86:6d:f6:b7:97:b1:
9a:72:f4:39:81:4b:2f:1b:a1:b9:8b:20:6e:cc:a6:
e4:04:dd:c9:52:f0:27:9d:10:51:87:89:5d:a0:3b:
d8:58:9e:69:5e:b5:c1:be:3c:3d:32:61:b3:be:d9:
80:35:eb:e5:58:cc:13:38:ad:c4:07:ff:d8:bd:3e:
db:52:26:b9:5b:63:f9:b9:1c:3a:16:48:48:61:fa:
73:3d:7c:fe:d6:7c:7c:cc:ab:ec:57:3e:b9:f9:56:
59:3e:87:14:1c:d7:c7:26:df:b7:0f:f4:7d:a7:d5:
4f:96:18:fb:21:8b:04:6d:9a:3f:e3:ef:af:45:aa:
c7:72:39:84:be:55:1a:fe:4c:6c:f4:87:a1:bd:2c:
4c:70:84:8c:ce:47:52:e7:10:66:0f:52:47:43:a4:
54:a0:55:43:d9:7f:a5:6b:db:22:f6:5e:0f:46:76:
fe:56:8a:20:2d:f8:6b:81:07:14:f6:78:08:2e:c7:
95:7c:df:cc:ac:5a:f5:be:01:47:e3:34:61:00:2f:
d8:10:7c:f4:12:c6:ae:30:c6:93:5f:51:e5:89:d3:
a1:00:66:63:6b:02:3b:50:76:5f:a7:0d:87:78:2c:
b0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:22:A1:6D:88:36:A7:8A:29:BC:E8:43:9E:03:62:1E:FA:22:E5:94
X509v3 Authority Key Identifier:
keyid:10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:0d:07:ff:99:79:12:46:1c:f7:f6:c3:c5:f5:39:48:5b:cd:
f2:50:d6:1e:b4:5e:f3:5f:37:c0:52:f4:e3:b4:dc:45:76:62:
ca:be:af:c3:a5:27:38:43:4c:f2:8c:f5:b7:d7:5e:6f:18:6c:
c2:9f:2e:03:57:04:05:94:c9:70:2d:c8:96:13:f9:3f:d1:a8:
59:88:e7:4d:cb:5c:ac:da:7d:f9:f1:b7:a9:ee:4f:9b:ba:18:
8f:3e:25:44:b4:95:10:2c:c4:8a:ad:56:63:b9:fc:41:94:58:
85:dd:76:84:62:88:bd:1a:e2:6a:27:62:cb:d7:f8:2b:4a:16:
61:8f:c3:a8:4b:e9:a3:74:1b:de:15:de:41:bf:da:7e:aa:2f:
39:4e:a5:1b:43:6e:cd:9d:53:3a:d5:b4:e0:60:79:d7:b9:07:
cb:25:1e:8e:e3:43:82:b2:19:6b:b8:45:ae:72:58:08:c9:41:
4f:7f:02:38:61:e1:dd:65:c7:b7:ba:e4:c9:1d:7d:01:88:03:
10:61:0b:68:11:4a:d7:51:fa:86:5e:64:56:8a:c7:af:53:f3:
7d:c7:48:b9:60:39:dd:b0:2d:bd:e6:0c:a5:9a:16:f2:13:3e:
94:12:94:4a:cb:7f:44:01:4b:fb:66:a6:7a:d0:e0:e3:d6:d8:
5f:a7:3a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 22:29:13 2026 by rpki-client