Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
File: EPm9HHFv0ulaydYQddcJYhroBgA.mft (raw, json)
Hash identifier: sZftSNIQg8eEmKkLj5HQ+TERsSYsmZGDJLYEifNQ5pk=
Subject key identifier: 0F:FD:6B:CA:5F:4C:25:B6:B9:C1:63:B3:33:37:AE:22:62:FB:CD:63
Authority key identifier: 10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00
Certificate issuer: /CN=10f9bd1c716fd2e95ac9d61075d709621ae80600
Certificate serial: 019D3941057C36BDD4E28AA19635F8003DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
Manifest number: 0ACE
Signing time: Sun 29 Mar 2026 11:00:55 +0000
Manifest this update: Sun 29 Mar 2026 11:00:55 +0000
Manifest next update: Mon 30 Mar 2026 11:00:55 +0000
Files and hashes: 1: EPm9HHFv0ulaydYQddcJYhroBgA.crl (hash: WfzKcb+JD2tAD96XlKtJbgg+roEc+mug0d8Rs/pgcpU=)
2: yfoSU4MQI1IIA9Yj3zamcPUf7K4.roa (hash: fzqLa9/pLczJAubnxnbiM1yIch9oKlX3jK2XbY433q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:05:7c:36:bd:d4:e2:8a:a1:96:35:f8:00:3d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f9bd1c716fd2e95ac9d61075d709621ae80600
Validity
Not Before: Mar 29 11:00:55 2026 GMT
Not After : Mar 30 11:00:55 2026 GMT
Subject: CN=0ffd6bca5f4c25b6b9c163b33337ae2262fbcd63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e5:75:50:3f:72:b1:76:13:cb:22:35:a9:e2:
db:b6:97:bc:48:5d:91:33:55:33:66:fa:7b:64:35:
96:a4:45:dc:1c:b6:6c:f5:52:12:e1:20:53:6c:e4:
d5:22:95:02:34:5a:35:f4:3e:6e:7f:d7:25:91:a2:
3d:a0:86:8a:c4:3c:c6:58:5b:e0:50:26:f8:0e:3e:
66:5d:02:d4:b2:7d:7b:58:19:9f:b2:61:42:e2:be:
bd:0b:ef:85:2c:7b:02:f5:fa:0e:f9:b3:ed:1d:38:
70:28:82:c2:9c:7e:bf:e0:4c:ee:75:25:a4:d1:96:
a8:d3:71:e8:74:0c:20:04:0c:42:02:0f:47:41:52:
a2:07:9a:ee:ce:0e:b5:05:0b:4e:bd:eb:61:de:65:
6b:ac:ec:5b:1d:cc:0e:d9:1d:86:ca:f0:1a:c6:ed:
e4:70:62:98:8e:48:bd:ba:d8:7e:b1:c4:76:ac:e6:
f6:d0:72:55:98:92:6a:8d:6e:23:23:dd:85:00:41:
01:14:ab:52:30:56:d0:e5:d4:ad:37:c7:55:01:a5:
cd:4f:58:2e:3e:33:8d:c9:ea:ac:03:a8:17:c1:35:
40:d6:56:8f:da:7f:39:39:8c:07:65:59:1e:22:04:
0b:e0:fb:2d:d3:83:d0:2e:fa:83:03:30:33:a5:be:
a1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FD:6B:CA:5F:4C:25:B6:B9:C1:63:B3:33:37:AE:22:62:FB:CD:63
X509v3 Authority Key Identifier:
keyid:10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a8:37:ce:3e:5f:7f:11:3e:d9:30:5c:c7:28:6e:41:d9:06:
c0:b2:90:85:58:f4:5c:c5:ef:2f:ec:47:54:93:da:56:85:5b:
41:81:e2:f8:18:f1:fe:df:1f:ac:43:a5:58:c4:7d:d8:18:4a:
ca:78:9c:c2:85:7a:65:53:95:82:b0:93:0d:31:ab:40:c1:55:
c3:4d:95:13:ad:37:b0:e1:70:2b:51:c2:aa:0f:c9:61:b1:cd:
08:9f:18:b5:3f:8f:6e:ef:4c:db:a6:71:2c:c6:28:c6:72:ed:
52:a2:21:ad:24:72:7b:9e:60:e9:88:02:29:72:99:cc:a1:5b:
57:41:73:a6:3f:93:6b:77:6f:ac:74:01:cc:a6:ee:7d:cf:da:
33:3f:cd:4a:0f:e9:2a:ba:a5:9c:a9:30:0d:73:56:4f:00:4e:
9e:62:76:51:1d:19:a3:33:40:45:6a:52:7d:71:06:00:0f:69:
c3:39:7f:0e:27:7c:dd:04:b6:ae:2e:d5:ac:e9:cb:8b:11:17:
15:36:a1:5b:19:9c:cd:5c:5f:3b:4b:a3:a7:c2:6f:51:6f:7f:
3a:4a:2a:a9:21:53:b6:9b:24:01:18:b6:56:67:4c:8c:c2:37:
78:09:cb:b7:fa:aa:7a:98:bf:e3:f5:c0:0a:a6:c6:f0:f7:bf:
bd:e7:b5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:21 2026 by rpki-client