Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
File: EdJ3EZBuQdC_164BvAo40-eeJgE.mft (raw, json)
Hash identifier: KKocjmdzFu09RFpsTMbU34UMiqSCg9B9hJYGhxHtbRg=
Subject key identifier: 77:44:A2:BD:33:D3:30:80:1B:1C:64:5E:21:17:05:C4:1B:DB:08:81
Authority key identifier: 11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01
Certificate issuer: /CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
Certificate serial: 01A182996FC9FAB8966D411189D4D7B6A2D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
Manifest number: 1ACB
Signing time: Wed 28 Oct 2026 13:00:56 +0000
Manifest this update: Wed 28 Oct 2026 13:00:56 +0000
Manifest next update: Thu 29 Oct 2026 13:00:56 +0000
Files and hashes: 1: EdJ3EZBuQdC_164BvAo40-eeJgE.crl (hash: jpHVYOXxPh8EsO0UEPs6PjM+qHEWkXLdx8rljcTpFp0=)
2: gXTGqs4LKJz0Vrtvliei4acD1Ew.roa (hash: p/wSJPqOIsg3ZzxrAAFzNgFBQSzliYRj4Gqn0szjKSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:99:6f:c9:fa:b8:96:6d:41:11:89:d4:d7:b6:a2:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
Validity
Not Before: Oct 28 13:00:56 2026 GMT
Not After : Oct 29 13:00:56 2026 GMT
Subject: CN=7744a2bd33d330801b1c645e211705c41bdb0881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:de:e4:1c:54:00:d4:53:6c:35:a7:08:b9:ed:
ed:fb:38:87:4d:64:f3:fd:8b:01:57:3a:86:bc:b6:
b6:5a:2e:33:b2:45:de:bf:20:fb:58:0b:1a:f8:6d:
5f:4f:65:99:80:08:f0:77:2b:6c:51:8f:f5:48:c7:
32:ce:f2:18:fa:f1:be:28:05:18:83:df:08:ca:aa:
27:2e:ee:c5:bf:49:1e:fc:3d:8e:2b:e8:cc:c2:40:
75:1b:5b:d0:b7:dd:7f:56:5f:57:f1:0a:74:8b:48:
66:4a:c9:6b:cd:cf:dd:90:1c:cf:74:a4:42:31:7e:
07:0a:60:98:a9:d2:9c:e8:3d:94:c1:bb:07:ca:85:
97:35:f4:4b:b0:05:7a:1d:cf:a6:b0:1e:1a:36:74:
e9:7c:83:cc:bf:ab:51:0e:6d:e9:38:78:72:1e:31:
75:9b:5d:42:e5:9f:81:8b:9a:8a:df:b2:17:8a:86:
06:0a:91:1f:f3:27:47:bf:5d:ca:dc:84:0a:33:61:
56:ee:97:dc:16:46:09:da:66:f1:f8:73:55:66:a8:
73:46:b9:f4:a2:d5:74:44:4c:f3:50:98:45:5c:6d:
56:da:2e:1d:18:72:68:35:c9:67:9b:c6:9f:46:36:
a4:17:ab:ea:88:f9:7f:bd:4d:82:d1:bc:16:98:6c:
fc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:44:A2:BD:33:D3:30:80:1B:1C:64:5E:21:17:05:C4:1B:DB:08:81
X509v3 Authority Key Identifier:
keyid:11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:86:7e:44:48:31:30:f2:8d:05:53:54:e2:64:f4:6e:38:e6:
7c:b8:6a:68:2f:01:b7:f2:8c:20:61:f3:49:be:34:c5:9d:bf:
80:b5:ee:ec:c4:38:a2:d6:6d:f6:46:6d:e3:7e:7e:f8:a4:14:
d7:50:fd:87:95:a8:8b:89:02:b7:f1:00:23:63:35:ec:71:ef:
2e:1e:69:fc:be:84:a7:f5:0d:45:ce:a8:b3:11:1b:6f:12:7b:
6b:65:26:29:b2:8b:d3:e3:aa:1b:48:a7:b4:58:fd:19:ba:c0:
3d:db:f4:65:bd:af:67:d7:00:aa:fc:0e:44:19:94:d5:25:17:
78:31:65:9f:d5:05:21:b0:47:84:dc:78:31:2e:79:79:fd:59:
e4:77:e2:68:12:e6:26:cc:a6:ee:84:68:6c:d1:f3:ae:e7:c9:
3d:74:77:e7:6e:24:1c:66:95:9b:df:75:a9:c5:81:da:c2:58:
e0:eb:30:9e:40:77:40:21:4f:a9:7d:61:50:ca:3f:09:6a:52:
39:39:5c:40:dd:82:e6:20:40:d4:86:e4:b6:dd:b3:97:2f:68:
37:bb:d6:8b:04:07:b8:40:30:b5:b0:c0:b4:c4:ad:80:3b:bb:
3a:1b:b4:f6:54:e7:5e:20:a4:e4:29:d3:a2:ab:2b:99:56:63:
3f:b9:c1:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGCmW/J+riWbUERidTXtqLWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZDI3NzExOTA2ZTQxZDBiZmQ3YWUwMWJjMGEzOGQzZTc5
ZTI2MDEwHhcNMjYxMDI4MTMwMDU2WhcNMjYxMDI5MTMwMDU2WjAzMTEwLwYDVQQD
Eyg3NzQ0YTJiZDMzZDMzMDgwMWIxYzY0NWUyMTE3MDVjNDFiZGIwODgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxt7kHFQA1FNsNacIue3t+ziHTWTz
/YsBVzqGvLa2Wi4zskXevyD7WAsa+G1fT2WZgAjwdytsUY/1SMcyzvIY+vG+KAUY
g98IyqonLu7Fv0ke/D2OK+jMwkB1G1vQt91/Vl9X8Qp0i0hmSslrzc/dkBzPdKRC
MX4HCmCYqdKc6D2UwbsHyoWXNfRLsAV6Hc+msB4aNnTpfIPMv6tRDm3pOHhyHjF1
m11C5Z+Bi5qK37IXioYGCpEf8ydHv13K3IQKM2FW7pfcFkYJ2mbx+HNVZqhzRrn0
otV0REzzUJhFXG1W2i4dGHJoNclnm8afRjakF6vqiPl/vU2C0bwWmGz8mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdEor0z0zCAGxxkXiEXBcQb2wiBMB8GA1UdIwQY
MBaAFBHSdxGQbkHQv9euAbwKONPnniYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWRKM0VaQnVRZENfMTY0QnZBbzQwLWVlSmdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi83NWFkNjctNmY0OC00OWM1LWJmNGEt
ZmFhNzQxMjdkYzc4LzEvRWRKM0VaQnVRZENfMTY0QnZBbzQwLWVlSmdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi83NWFkNjctNmY0OC00OWM1LWJmNGEtZmFhNzQxMjdkYzc4
LzEvRWRKM0VaQnVRZENfMTY0QnZBbzQwLWVlSmdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIZ+REgx
MPKNBVNU4mT0bjjmfLhqaC8Bt/KMIGHzSb40xZ2/gLXu7MQ4otZt9kZt435++KQU
11D9h5Woi4kCt/EAI2M17HHvLh5p/L6Ep/UNRc6osxEbbxJ7a2UmKbKL0+OqG0in
tFj9GbrAPdv0Zb2vZ9cAqvwORBmU1SUXeDFln9UFIbBHhNx4MS55ef1Z5HfiaBLm
Jsym7oRobNHzrufJPXR3524kHGaVm991qcWB2sJY4OswnkB3QCFPqX1hUMo/CWpS
OTlcQN2C5iBA1Ibktt2zly9oN7vWiwQHuEAwtbDAtMStgDu7Ohu09lTnXiCk5CnT
oqsrmVZjP7nBJw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 21:45:26 2026 by rpki-client