Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
File: EDqpCejbAPg3ekUNvKV9BR9L9DU.mft (raw, json)
Hash identifier: 7yPTDKImdzxf+PHh6N6foYji8KGQr56PnxxrClBoRgs=
Subject key identifier: BF:AF:EC:C3:9B:CE:30:2B:A1:1B:DA:70:2A:08:6A:DD:9B:55:DA:4C
Authority key identifier: 10:3A:A9:09:E8:DB:00:F8:37:7A:45:0D:BC:A5:7D:05:1F:4B:F4:35
Certificate issuer: /CN=103aa909e8db00f8377a450dbca57d051f4bf435
Certificate serial: 01A13E2603EAB7BD7C404A43BE857DC5C86A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 06:00:41 +0000
Manifest this update: Thu 15 Oct 2026 06:00:41 +0000
Manifest next update: Fri 16 Oct 2026 06:00:41 +0000
Files and hashes: 1: EDqpCejbAPg3ekUNvKV9BR9L9DU.crl (hash: yHy6R6xsGfHGiIABlwVi+cSKAEHz/h7iWT7R5I5nc78=)
2: zPL9SpEzbgv5hV90JadQIHwlZEo.roa (hash: oUod7lCzpgjd0dTnd1D/3YCd+gyJLYZuycYofSWlLPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:03:ea:b7:bd:7c:40:4a:43:be:85:7d:c5:c8:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=103aa909e8db00f8377a450dbca57d051f4bf435
Validity
Not Before: Oct 15 06:00:41 2026 GMT
Not After : Oct 16 06:00:41 2026 GMT
Subject: CN=bfafecc39bce302ba11bda702a086add9b55da4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a7:5a:83:e9:ac:8e:4f:28:8c:9d:90:5f:13:
ec:ca:fc:1b:18:55:ad:c4:6c:0a:24:05:83:2b:5f:
ec:ca:37:47:15:4f:d5:a8:a3:10:2a:1a:bb:30:bc:
1d:c9:6e:87:63:f7:44:ce:94:55:66:b4:07:e9:83:
64:50:67:3d:1c:b0:3b:f7:1b:44:24:aa:81:4b:69:
ca:5e:d9:50:d3:03:65:4e:4a:95:4f:7d:12:30:54:
47:e4:78:20:7e:42:62:a9:fd:3b:93:d9:e4:3a:f6:
6f:ef:d4:37:61:e3:5b:8f:ce:ed:8a:22:01:c7:cf:
ea:f4:d2:af:28:2c:87:bf:2a:1c:02:9b:23:cd:eb:
b9:48:90:15:a4:50:c8:6a:c6:96:a9:03:71:07:d0:
1c:e5:5f:49:3a:fc:d2:78:9e:2e:32:4c:5a:74:15:
74:06:77:a6:03:b9:aa:c7:de:f1:80:4f:ca:80:c0:
4d:ad:2a:c7:85:9f:dd:0d:0e:d9:b8:ea:d7:b9:95:
f9:cc:06:b5:72:bc:49:f4:ec:aa:2d:e7:4b:c0:6f:
4d:d6:3f:96:d5:a9:60:93:88:d2:29:d6:b2:5f:25:
8d:a3:68:e5:19:0c:ad:21:07:53:f1:f7:c6:4a:be:
c7:a5:92:96:f4:c4:31:ea:fc:00:a0:54:98:1a:f3:
44:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AF:EC:C3:9B:CE:30:2B:A1:1B:DA:70:2A:08:6A:DD:9B:55:DA:4C
X509v3 Authority Key Identifier:
keyid:10:3A:A9:09:E8:DB:00:F8:37:7A:45:0D:BC:A5:7D:05:1F:4B:F4:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a4:6c:4e:dd:bd:73:0c:87:8f:e6:04:58:0e:fb:08:72:0c:
eb:36:85:cf:ea:66:de:02:ea:da:25:47:e7:1a:ab:f7:fa:e2:
d6:5c:d9:53:76:3b:30:8b:18:a0:c2:56:57:57:52:9f:cb:20:
bf:b4:bf:19:5c:41:fb:97:39:78:c4:bf:79:b0:ca:09:5b:9f:
b2:9a:6a:24:74:d4:a2:ad:7d:8a:12:b0:93:e5:f6:58:29:99:
ef:9b:07:b9:6d:fd:72:91:d2:d2:5a:76:41:55:8b:d1:87:39:
39:e9:d2:fa:ac:4e:3e:c4:3e:b3:0d:7d:b2:7d:ea:7b:82:a5:
b2:4d:91:61:41:e7:4b:3c:25:66:74:17:0e:fa:bb:0b:96:d5:
e5:75:5e:a1:50:45:8f:43:d6:60:ef:41:43:56:58:59:86:f2:
a4:8d:4d:b2:30:a7:10:e7:e8:25:ad:54:21:6a:fe:d1:b4:0a:
2e:cc:1e:c2:00:ff:6a:79:23:63:35:1f:c5:15:f8:c3:48:60:
e3:8b:40:17:86:ec:27:7b:dd:ec:f4:c4:b6:b3:98:a5:56:20:
25:87:b0:34:7c:69:c9:56:e1:24:6d:e8:70:c5:a1:c5:fc:fd:
a5:e0:fd:82:cf:73:f8:1c:cf:5c:ae:1a:15:40:cb:dd:6d:da:
5e:c3:d1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:06:27 2026 by rpki-client