Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/epHmw2HvM-JQ3YijH32Sfq03Xtk.mft
File: epHmw2HvM-JQ3YijH32Sfq03Xtk.mft (raw, json)
Hash identifier: DbrMWOm6RovdZ+efUvghgaus46frk9oYQN/4oVZD7us=
Subject key identifier: C9:3E:4F:F4:78:27:FB:C5:C3:B8:EA:7F:42:9C:A0:EB:21:32:DD:BB
Authority key identifier: 7A:91:E6:C3:61:EF:33:E2:50:DD:88:A3:1F:7D:92:7E:AD:37:5E:D9
Certificate issuer: /CN=7a91e6c361ef33e250dd88a31f7d927ead375ed9
Certificate serial: 019D386652784C832033E45935B0825A127F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epHmw2HvM-JQ3YijH32Sfq03Xtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/epHmw2HvM-JQ3YijH32Sfq03Xtk.mft
Manifest number: 080B
Signing time: Sun 29 Mar 2026 07:02:03 +0000
Manifest this update: Sun 29 Mar 2026 07:02:03 +0000
Manifest next update: Mon 30 Mar 2026 07:02:03 +0000
Files and hashes: 1: epHmw2HvM-JQ3YijH32Sfq03Xtk.crl (hash: xgqQXFp91Vv/QSiQpzLSeoFvBEl1sH9WwqXEtFhy5+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/epHmw2HvM-JQ3YijH32Sfq03Xtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/epHmw2HvM-JQ3YijH32Sfq03Xtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/epHmw2HvM-JQ3YijH32Sfq03Xtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:52:78:4c:83:20:33:e4:59:35:b0:82:5a:12:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a91e6c361ef33e250dd88a31f7d927ead375ed9
Validity
Not Before: Mar 29 07:02:03 2026 GMT
Not After : Mar 30 07:02:03 2026 GMT
Subject: CN=c93e4ff47827fbc5c3b8ea7f429ca0eb2132ddbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:65:5e:43:72:5a:19:db:e2:2d:ba:dc:68:5b:
3f:cb:ba:c4:e0:12:89:6a:bb:56:be:b5:26:c1:39:
bd:a2:95:e4:a5:6e:61:8e:b7:2e:ce:ad:cf:15:de:
7e:89:ca:b2:c9:bc:31:45:db:2c:7d:19:68:88:b6:
b1:c1:bb:fc:7f:28:f0:56:11:1b:50:c2:ec:74:5b:
6b:89:32:ba:f4:c1:35:d5:04:b9:0d:21:6e:9c:b3:
fa:c5:98:53:0e:c3:c2:fe:2f:17:fd:00:30:26:5d:
2f:11:e4:bf:53:61:06:3d:2f:df:3a:cb:fc:aa:89:
b3:14:62:0e:ad:bc:62:ef:3b:74:3a:4f:3e:f4:7e:
fb:d7:d8:86:73:c9:5d:da:04:13:47:a5:8b:b5:78:
8a:5b:d7:03:cc:09:68:d0:86:ce:66:e2:75:4d:21:
3f:1c:6d:8a:0f:31:59:0e:97:b2:dc:a6:91:4f:98:
65:08:f6:e7:2a:e6:a1:47:f2:40:00:9a:4c:dd:4d:
bc:f0:49:cb:11:7d:66:e5:30:5d:97:68:aa:f0:62:
26:fb:41:10:42:63:0f:b2:3c:35:ca:8e:3a:05:12:
5d:d6:77:ef:18:33:0e:c5:a2:d5:52:9b:ad:33:ba:
0f:bd:c7:9b:4d:7e:4b:96:2d:7f:f0:e4:83:a0:6f:
b4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3E:4F:F4:78:27:FB:C5:C3:B8:EA:7F:42:9C:A0:EB:21:32:DD:BB
X509v3 Authority Key Identifier:
keyid:7A:91:E6:C3:61:EF:33:E2:50:DD:88:A3:1F:7D:92:7E:AD:37:5E:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epHmw2HvM-JQ3YijH32Sfq03Xtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/epHmw2HvM-JQ3YijH32Sfq03Xtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/epHmw2HvM-JQ3YijH32Sfq03Xtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:78:96:1b:5a:64:73:ab:47:d7:5a:69:01:e9:18:88:ea:62:
62:23:6a:42:c1:7c:36:06:52:5f:dd:0c:5f:9a:0b:04:0e:90:
c3:c1:a8:b6:22:cd:51:dd:03:80:c7:71:b1:b1:ff:a0:59:9c:
32:82:1a:74:fb:16:a5:6e:b0:f4:63:d6:1a:ed:a5:3a:6b:66:
36:ae:e3:c2:b5:d4:82:9c:f8:da:87:4d:59:b3:53:cf:c7:c9:
2f:00:62:59:b7:68:3d:fc:d2:c9:9c:c0:fa:2f:e3:88:6d:af:
69:fc:8f:34:90:ab:16:13:f7:eb:d8:3d:ac:4f:77:2d:99:46:
e8:22:44:55:dc:ef:2d:6b:62:83:a2:5c:ba:20:8d:2f:57:b2:
12:f8:bc:98:23:fa:e3:71:b6:6e:4d:f6:67:a5:0e:b5:ac:9a:
ef:fe:74:07:12:4d:b9:0c:e9:e4:f0:fa:d0:04:08:cb:01:26:
cf:af:b9:b3:5e:32:1d:98:c2:16:c9:20:f1:ec:78:25:f2:cf:
b5:ac:d3:ca:74:67:bd:ca:28:d4:b4:af:71:c4:86:73:db:45:
38:1a:a9:87:f0:13:c9:2d:b2:67:3f:e0:65:41:5c:de:d6:e9:
41:c5:b8:ea:5e:44:56:83:2e:49:50:21:a4:66:43:83:8d:8c:
42:92:79:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZlJ4TIMgM+RZNbCCWhJ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhOTFlNmMzNjFlZjMzZTI1MGRkODhhMzFmN2Q5MjdlYWQz
NzVlZDkwHhcNMjYwMzI5MDcwMjAzWhcNMjYwMzMwMDcwMjAzWjAzMTEwLwYDVQQD
EyhjOTNlNGZmNDc4MjdmYmM1YzNiOGVhN2Y0MjljYTBlYjIxMzJkZGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomVeQ3JaGdviLbrcaFs/y7rE4BKJ
artWvrUmwTm9opXkpW5hjrcuzq3PFd5+icqyybwxRdssfRloiLaxwbv8fyjwVhEb
UMLsdFtriTK69ME11QS5DSFunLP6xZhTDsPC/i8X/QAwJl0vEeS/U2EGPS/fOsv8
qomzFGIOrbxi7zt0Ok8+9H7719iGc8ld2gQTR6WLtXiKW9cDzAlo0IbOZuJ1TSE/
HG2KDzFZDpey3KaRT5hlCPbnKuahR/JAAJpM3U288EnLEX1m5TBdl2iq8GIm+0EQ
QmMPsjw1yo46BRJd1nfvGDMOxaLVUputM7oPvcebTX5Lli1/8OSDoG+0OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMk+T/R4J/vFw7jqf0KcoOshMt27MB8GA1UdIwQY
MBaAFHqR5sNh7zPiUN2Iox99kn6tN17ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXBIbXcySHZNLUpRM1lpakgzMlNmcTAzWHRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80ZTNmYzMtMDQ4ZC00YjY2LWE5NTEt
M2UyNTM0NTgzNjExLzEvZXBIbXcySHZNLUpRM1lpakgzMlNmcTAzWHRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS80ZTNmYzMtMDQ4ZC00YjY2LWE5NTEtM2UyNTM0NTgzNjEx
LzEvZXBIbXcySHZNLUpRM1lpakgzMlNmcTAzWHRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvHiWG1pk
c6tH11ppAekYiOpiYiNqQsF8NgZSX90MX5oLBA6Qw8GotiLNUd0DgMdxsbH/oFmc
MoIadPsWpW6w9GPWGu2lOmtmNq7jwrXUgpz42odNWbNTz8fJLwBiWbdoPfzSyZzA
+i/jiG2vafyPNJCrFhP369g9rE93LZlG6CJEVdzvLWtig6JcuiCNL1eyEvi8mCP6
43G2bk32Z6UOtaya7/50BxJNuQzp5PD60AQIywEmz6+5s14yHZjCFskg8ex4JfLP
tazTynRnvcoo1LSvccSGc9tFOBqph/ATyS2yZz/gZUFc3tbpQcW46l5EVoMuSVAh
pGZDg42MQpJ5/w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:41 2026 by rpki-client