Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
File: EDqpCejbAPg3ekUNvKV9BR9L9DU.mft (raw, json)
Hash identifier: DpTMNKOVi16AD5XYmMjvsQQQqW8Jl0pDkK3x46WeeCU=
Subject key identifier: 8B:50:E7:C9:33:00:9C:2F:36:D3:6B:8F:D1:BE:83:D4:56:C8:DB:55
Authority key identifier: 10:3A:A9:09:E8:DB:00:F8:37:7A:45:0D:BC:A5:7D:05:1F:4B:F4:35
Certificate issuer: /CN=103aa909e8db00f8377a450dbca57d051f4bf435
Certificate serial: 019D38D2F0AA63887EC4A95451018DBD4097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:00:41 +0000
Manifest this update: Sun 29 Mar 2026 09:00:41 +0000
Manifest next update: Mon 30 Mar 2026 09:00:41 +0000
Files and hashes: 1: EDqpCejbAPg3ekUNvKV9BR9L9DU.crl (hash: 3JKmswJEJOUqs5EsiEa7j81wDTkCGwHxvW+H4nPlqts=)
2: zPL9SpEzbgv5hV90JadQIHwlZEo.roa (hash: oUod7lCzpgjd0dTnd1D/3YCd+gyJLYZuycYofSWlLPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:f0:aa:63:88:7e:c4:a9:54:51:01:8d:bd:40:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=103aa909e8db00f8377a450dbca57d051f4bf435
Validity
Not Before: Mar 29 09:00:41 2026 GMT
Not After : Mar 30 09:00:41 2026 GMT
Subject: CN=8b50e7c933009c2f36d36b8fd1be83d456c8db55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f1:bd:62:5f:20:86:15:01:67:60:bb:97:2e:
39:41:a2:c9:69:75:f2:26:0b:40:4b:15:f0:25:4a:
7b:96:8e:b5:89:b8:4a:d9:04:37:d2:13:64:ee:24:
f5:1b:c4:57:fc:f8:38:06:cb:07:bd:3a:96:32:c4:
d7:38:59:2d:d5:fb:34:99:db:29:16:6c:12:c3:3d:
f9:72:fd:d9:73:0d:69:0d:52:30:31:ba:fb:93:cd:
89:2f:20:1a:94:a8:fd:3d:90:00:66:99:74:bb:b0:
88:54:2a:59:95:7f:e2:4e:b7:e6:7c:ae:7f:db:0f:
1a:56:13:b5:04:0b:6b:c5:b2:0a:6b:16:f7:79:6d:
23:51:b1:01:7e:24:a3:04:94:7a:e9:95:b8:4e:30:
08:26:94:8f:60:54:38:17:3d:aa:49:5e:67:76:bd:
40:6c:27:53:d5:ea:5a:44:bc:15:51:d6:9a:21:9d:
1a:13:f6:11:e7:4c:d8:9f:32:cc:3c:c8:25:fe:2e:
69:41:cf:33:87:0d:a5:d4:a7:42:3c:c4:76:38:53:
1f:0e:10:ba:03:65:22:ff:c7:b7:c1:5a:8f:09:e3:
fa:7e:87:11:fe:52:27:3c:a2:4e:5d:4c:31:4a:2e:
52:9e:75:91:2b:8d:ab:14:94:13:c6:b1:d0:cf:57:
e4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:50:E7:C9:33:00:9C:2F:36:D3:6B:8F:D1:BE:83:D4:56:C8:DB:55
X509v3 Authority Key Identifier:
keyid:10:3A:A9:09:E8:DB:00:F8:37:7A:45:0D:BC:A5:7D:05:1F:4B:F4:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:63:bc:77:4c:a6:38:df:08:3c:77:63:46:79:4b:02:3e:32:
0b:e3:95:95:d6:6b:f4:55:c4:03:02:21:f3:7c:42:13:02:2b:
e6:70:60:54:f1:46:6c:82:6f:92:a6:f6:53:b7:58:4a:56:dc:
e0:d5:1c:06:65:40:20:6d:74:10:fb:ac:f8:44:4f:b3:59:ed:
c9:43:8b:2a:6c:ef:93:7e:ef:95:29:77:ba:60:3f:f2:7a:92:
f8:85:43:d9:a4:30:15:63:9e:78:4d:14:32:b9:fb:e8:92:f5:
e0:cf:45:a9:f7:ec:07:63:19:39:7e:3c:cc:3a:ce:a3:49:03:
5e:44:83:c3:0a:de:aa:51:b5:d9:b4:85:4d:ef:ef:fc:59:b1:
5d:c1:c3:33:24:c7:17:b2:41:de:ae:0b:11:a9:3b:03:bc:76:
2e:c3:24:4a:1d:a1:1c:b8:23:e1:bf:03:09:ca:d1:68:09:32:
de:5b:5a:f5:c0:ed:cd:89:6f:35:6a:2f:4d:30:c2:8b:33:a4:
3f:64:42:1b:94:65:ad:09:5e:b5:34:43:ef:36:c2:99:2f:55:
2a:f5:1c:3f:14:26:88:d0:3f:1d:3a:28:f4:6e:e2:40:36:00:
f0:26:9d:20:76:6d:5f:c6:61:43:5a:9c:7a:87:e0:46:25:df:
7c:ea:46:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040vCqY4h+xKlUUQGNvUCXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwM2FhOTA5ZThkYjAwZjgzNzdhNDUwZGJjYTU3ZDA1MWY0
YmY0MzUwHhcNMjYwMzI5MDkwMDQxWhcNMjYwMzMwMDkwMDQxWjAzMTEwLwYDVQQD
Eyg4YjUwZTdjOTMzMDA5YzJmMzZkMzZiOGZkMWJlODNkNDU2YzhkYjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfG9Yl8ghhUBZ2C7ly45QaLJaXXy
JgtASxXwJUp7lo61ibhK2QQ30hNk7iT1G8RX/Pg4BssHvTqWMsTXOFkt1fs0mdsp
FmwSwz35cv3Zcw1pDVIwMbr7k82JLyAalKj9PZAAZpl0u7CIVCpZlX/iTrfmfK5/
2w8aVhO1BAtrxbIKaxb3eW0jUbEBfiSjBJR66ZW4TjAIJpSPYFQ4Fz2qSV5ndr1A
bCdT1epaRLwVUdaaIZ0aE/YR50zYnzLMPMgl/i5pQc8zhw2l1KdCPMR2OFMfDhC6
A2Ui/8e3wVqPCeP6focR/lInPKJOXUwxSi5SnnWRK42rFJQTxrHQz1fkoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItQ58kzAJwvNtNrj9G+g9RWyNtVMB8GA1UdIwQY
MBaAFBA6qQno2wD4N3pFDbylfQUfS/Q1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRURxcENlamJBUGczZWtVTnZLVjlCUjlMOURVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yZjdjNzktM2Y2Yi00NDRhLThlYzUt
N2JkY2E3NTE2ZTc1LzEvRURxcENlamJBUGczZWtVTnZLVjlCUjlMOURVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yZjdjNzktM2Y2Yi00NDRhLThlYzUtN2JkY2E3NTE2ZTc1
LzEvRURxcENlamJBUGczZWtVTnZLVjlCUjlMOURVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWO8d0ym
ON8IPHdjRnlLAj4yC+OVldZr9FXEAwIh83xCEwIr5nBgVPFGbIJvkqb2U7dYSlbc
4NUcBmVAIG10EPus+ERPs1ntyUOLKmzvk37vlSl3umA/8nqS+IVD2aQwFWOeeE0U
Mrn76JL14M9FqffsB2MZOX48zDrOo0kDXkSDwwreqlG12bSFTe/v/FmxXcHDMyTH
F7JB3q4LEak7A7x2LsMkSh2hHLgj4b8DCcrRaAky3lta9cDtzYlvNWovTTDCizOk
P2RCG5RlrQletTRD7zbCmS9VKvUcPxQmiNA/HToo9G7iQDYA8CadIHZtX8ZhQ1qc
eofgRiXffOpGSQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:32 2026 by rpki-client