Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
File: EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft (raw, json)
Hash identifier: Ql0lNBEoyXWEnPF3ciAWDvdQWEQLBYdJJ3FgLpKOpqg=
Subject key identifier: 17:62:FC:19:02:C1:99:81:9A:AE:19:32:C8:08:53:0E:B3:39:35:6D
Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Certificate serial: 019CE447D593DFC1F9ACF22B8B8D5AA62FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
Manifest number: 1864
Signing time: Thu 12 Mar 2026 23:00:38 +0000
Manifest this update: Thu 12 Mar 2026 23:00:38 +0000
Manifest next update: Fri 13 Mar 2026 23:00:38 +0000
Files and hashes: 1: EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl (hash: sJWQTh8M2YGLEXF8+xQveIFAS6uqw9peDQnoDxNYOOM=)
2: cLW-rzfQIYF9Ip7K5f5c4fVxT_0.roa (hash: kTIIud4RXHLbaB+fDQvEDDvRSMMhyUI+tRML2r+ctcI=)
3: efptImD_TpkXZ0HvFXCba5sHj3E.roa (hash: wBmqE8ohvjFZts4QshaEu8H7uZA38AN2a3RRcLvuOgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:47:d5:93:df:c1:f9:ac:f2:2b:8b:8d:5a:a6:2f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Validity
Not Before: Mar 12 23:00:38 2026 GMT
Not After : Mar 13 23:00:38 2026 GMT
Subject: CN=1762fc1902c199819aae1932c808530eb339356d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:fb:24:85:76:f0:bf:10:13:61:3b:39:2e:8f:
9e:ca:02:9a:42:37:a1:8c:35:07:19:53:bf:f0:6e:
cc:a8:d2:d3:a5:dd:68:e5:ec:d3:2f:7c:99:aa:95:
c1:0d:31:3a:06:42:ae:e1:d8:7f:71:ef:6c:b7:73:
26:55:57:58:c5:ef:83:c5:ab:02:51:b2:8a:be:3c:
34:5c:47:dd:c8:1f:47:95:55:9b:30:0d:66:be:d0:
41:bb:56:11:53:77:0c:d2:99:65:a3:15:23:4c:88:
dd:39:c1:8d:b5:81:f2:54:07:77:75:5b:7d:59:77:
44:df:02:97:a3:dd:5a:cc:a7:b0:ed:0f:03:bf:14:
0b:09:86:eb:f9:9d:66:57:c8:5b:28:eb:22:35:e6:
72:dc:74:0e:36:01:5e:d3:7b:30:30:fe:c3:b6:47:
51:c4:f2:27:96:ff:87:8b:f0:06:1b:1f:ff:da:78:
1f:5b:f8:28:4e:88:51:4a:ae:f2:c0:4b:e4:0a:85:
52:54:17:89:75:40:fd:88:5e:da:38:ff:26:e5:96:
8c:ed:82:dd:94:2e:b5:fb:d5:1a:58:9f:81:4f:52:
2f:68:30:a6:1f:6a:dc:b1:b1:e0:df:9a:59:4d:d1:
a0:d7:d4:14:37:09:2a:08:5f:26:3c:95:5a:3e:c5:
a6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:62:FC:19:02:C1:99:81:9A:AE:19:32:C8:08:53:0E:B3:39:35:6D
X509v3 Authority Key Identifier:
keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f7:91:9e:2c:06:a6:99:5d:9f:5d:de:b3:10:98:b2:bf:29:
42:7a:e9:73:e7:27:82:67:b1:3d:ac:ca:bc:40:28:85:71:65:
c7:56:cb:b3:58:63:6d:b2:92:c4:98:b7:6d:d9:de:e2:15:19:
d2:b9:ae:10:ca:0a:82:37:04:7a:10:5a:c9:c8:63:e7:86:9a:
c7:f3:05:9c:60:f5:69:80:d8:aa:99:35:7b:97:39:82:1d:8d:
df:f0:31:21:d8:75:c9:01:95:94:f8:e9:10:1b:e7:a2:56:66:
eb:09:8d:9f:bc:8d:be:7e:8d:a3:3b:3a:08:9f:85:51:28:33:
b2:1d:87:26:ca:3b:d3:27:df:92:71:ca:be:b2:50:57:9c:5c:
a9:79:ff:7e:de:78:74:74:da:56:67:70:77:42:46:4a:15:13:
10:60:4e:9a:a1:b2:7f:2d:3a:cc:d1:a9:5e:6e:da:82:e0:2f:
ab:7a:96:9d:5f:f9:db:8a:53:c7:98:78:e2:5c:9b:0c:4b:78:
1b:52:c6:a3:2f:bb:a4:ee:e4:51:7e:b6:80:37:32:92:05:02:
3e:b5:e5:65:b5:4e:64:81:65:d6:1b:d6:ec:4d:c3:c5:18:67:
c7:f8:ff:e8:a5:9a:05:a9:15:4d:3c:79:ef:64:b1:92:c7:9c:
db:ae:1a:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzkR9WT38H5rPIri41api+1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZjc3NDFjZDFhZjJiYjM0Yzg2YzczZWEzYmQ2Yzc2ZDk5
NjhkMGQwHhcNMjYwMzEyMjMwMDM4WhcNMjYwMzEzMjMwMDM4WjAzMTEwLwYDVQQD
EygxNzYyZmMxOTAyYzE5OTgxOWFhZTE5MzJjODA4NTMwZWIzMzkzNTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vskhXbwvxATYTs5Lo+eygKaQjeh
jDUHGVO/8G7MqNLTpd1o5ezTL3yZqpXBDTE6BkKu4dh/ce9st3MmVVdYxe+DxasC
UbKKvjw0XEfdyB9HlVWbMA1mvtBBu1YRU3cM0plloxUjTIjdOcGNtYHyVAd3dVt9
WXdE3wKXo91azKew7Q8DvxQLCYbr+Z1mV8hbKOsiNeZy3HQONgFe03swMP7DtkdR
xPInlv+Hi/AGGx//2ngfW/goTohRSq7ywEvkCoVSVBeJdUD9iF7aOP8m5ZaM7YLd
lC61+9UaWJ+BT1IvaDCmH2rcsbHg35pZTdGg19QUNwkqCF8mPJVaPsWmuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdi/BkCwZmBmq4ZMsgIUw6zOTVtMB8GA1UdIwQY
MBaAFBD3dBzRryuzTIbHPqO9bHbZlo0NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVBkMEhOR3ZLN05NaHNjLW83MXNkdG1XalEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZWY3Y2UtMjVkNC00M2MxLThlYWUt
MWE2NGNmMjFhNjA0LzEvRVBkMEhOR3ZLN05NaHNjLW83MXNkdG1XalEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kZWY3Y2UtMjVkNC00M2MxLThlYWUtMWE2NGNmMjFhNjA0
LzEvRVBkMEhOR3ZLN05NaHNjLW83MXNkdG1XalEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPeRniwG
ppldn13esxCYsr8pQnrpc+cngmexPazKvEAohXFlx1bLs1hjbbKSxJi3bdne4hUZ
0rmuEMoKgjcEehBaychj54aax/MFnGD1aYDYqpk1e5c5gh2N3/AxIdh1yQGVlPjp
EBvnolZm6wmNn7yNvn6Nozs6CJ+FUSgzsh2HJso70yffknHKvrJQV5xcqXn/ft54
dHTaVmdwd0JGShUTEGBOmqGyfy06zNGpXm7aguAvq3qWnV/524pTx5h44lybDEt4
G1LGoy+7pO7kUX62gDcykgUCPrXlZbVOZIFl1hvW7E3DxRhnx/j/6KWaBakVTTx5
72Sxksec264a5w==
-----END CERTIFICATE-----
Generated at Fri Mar 13 09:26:53 2026 by rpki-client