Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
File: EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft (raw, json)
Hash identifier: DJU/4MbX/c1rDG4i6Eh17Wf8uWxfKk9CK8Yyc6eW94Q=
Subject key identifier: 35:41:36:5F:81:A1:6F:EC:B8:21:DB:DC:38:0E:00:1B:43:A8:8C:C3
Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Certificate serial: 01A08AFA604DE883465F1C01CB717C671137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 11:00:59 +0000
Manifest this update: Thu 10 Sep 2026 11:00:59 +0000
Manifest next update: Fri 11 Sep 2026 11:00:59 +0000
Files and hashes: 1: EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl (hash: sAbEfh46BY9gmItNXINmSEsX7Dc0mAqnGAflM1YLp/k=)
2: cLW-rzfQIYF9Ip7K5f5c4fVxT_0.roa (hash: kTIIud4RXHLbaB+fDQvEDDvRSMMhyUI+tRML2r+ctcI=)
3: efptImD_TpkXZ0HvFXCba5sHj3E.roa (hash: wBmqE8ohvjFZts4QshaEu8H7uZA38AN2a3RRcLvuOgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:60:4d:e8:83:46:5f:1c:01:cb:71:7c:67:11:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Validity
Not Before: Sep 10 11:00:59 2026 GMT
Not After : Sep 11 11:00:59 2026 GMT
Subject: CN=3541365f81a16fecb821dbdc380e001b43a88cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1b:45:de:c8:3f:81:c0:c4:cd:7e:b9:de:b9:
c4:dc:41:f1:cc:ae:77:00:7b:a0:ca:6d:c6:79:97:
3b:45:69:d3:5a:49:83:d8:82:f0:4a:83:e1:74:2a:
7f:9c:52:57:58:c8:fa:2e:f9:43:87:aa:d7:b4:19:
5b:11:58:4e:9b:8d:0f:e2:e7:9d:fe:fc:1e:22:79:
20:ec:cf:73:24:21:22:db:b1:8c:a7:63:38:12:a1:
7b:e9:86:3b:e2:c2:fc:b5:54:8a:58:6a:4f:de:ee:
c9:16:ac:2e:0f:23:90:de:ca:e6:fe:3a:ba:2e:ab:
f2:7a:06:87:83:05:db:22:4f:39:65:d2:cc:80:e9:
6a:a2:76:09:23:c6:ae:5d:f3:96:f2:20:a2:75:11:
89:22:ce:e8:10:b4:2a:d0:88:15:b9:e8:af:b4:ca:
44:cc:f9:c2:02:58:c0:18:de:5d:8f:d8:ff:ce:1e:
d1:97:9b:68:59:9a:62:6f:91:d9:13:fc:a9:6c:0e:
5d:fb:c2:c5:a2:f5:e0:7d:38:3f:59:14:80:b3:7c:
d8:30:fe:0b:24:25:12:e6:17:0e:df:bd:d5:d4:fe:
0b:cf:2c:aa:c6:77:79:2c:28:b0:ee:a4:06:23:5b:
79:9f:6d:cb:e0:49:61:9b:f8:45:f6:cb:bb:2f:04:
2e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:41:36:5F:81:A1:6F:EC:B8:21:DB:DC:38:0E:00:1B:43:A8:8C:C3
X509v3 Authority Key Identifier:
keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:54:b1:2b:e0:19:2b:19:90:d0:0d:c6:4b:1f:3c:89:1d:48:
61:00:73:56:eb:b3:45:cc:2e:9d:5e:7e:da:32:79:ee:07:78:
2d:1d:af:e4:39:a3:2c:b9:a3:86:59:e4:25:24:62:50:2c:0b:
82:59:98:78:08:09:76:fe:e6:8e:bf:f2:bf:72:49:9a:98:29:
b6:30:b0:76:de:1b:e9:55:61:c2:9b:e2:9d:fb:14:4c:c9:8a:
f4:97:0a:db:50:17:a1:cf:cf:32:1c:1a:c5:f4:56:13:74:de:
39:a6:27:a8:fc:5c:44:fa:0b:47:59:85:a7:34:3a:78:d8:40:
2d:e4:c9:1e:7b:90:bf:0b:f4:9e:f4:c8:39:d0:b3:e9:d7:4d:
9c:63:92:d8:ac:77:e7:af:14:b7:1b:50:fc:46:4d:73:73:92:
eb:e4:4c:4d:2c:41:88:19:af:1c:98:17:77:0b:86:1a:31:a7:
3c:12:c4:01:73:3d:bf:cf:fa:73:ee:65:50:72:b3:d8:8e:03:
13:dc:81:30:76:77:a1:05:60:07:3d:2b:e6:cb:4c:90:fa:38:
43:ff:6c:e0:82:6a:af:e8:59:aa:71:09:bb:08:91:06:47:a7:
ed:65:e3:a1:23:36:7f:e4:a2:4c:91:82:9c:8f:39:fd:a2:28:
47:16:ce:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:13:08 2026 by rpki-client