Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
File: EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft (raw, json)
Hash identifier: IDT5rq1hsXeHLrG59YJA7wIfOesZRL2d4HyVs3weGYI=
Subject key identifier: 30:9D:6F:2C:4E:8B:E3:D4:E8:EB:E9:50:1B:BF:67:18:41:83:90:68
Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Certificate serial: 019DCDF552F998E298CCAC357E5AC23DB19A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
Manifest number: 18DD
Signing time: Mon 27 Apr 2026 08:01:39 +0000
Manifest this update: Mon 27 Apr 2026 08:01:39 +0000
Manifest next update: Tue 28 Apr 2026 08:01:39 +0000
Files and hashes: 1: EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl (hash: yVgTjt070fnKvDBcuuc3sPpcHiNsY7hM3+bBnCYc2pU=)
2: cLW-rzfQIYF9Ip7K5f5c4fVxT_0.roa (hash: kTIIud4RXHLbaB+fDQvEDDvRSMMhyUI+tRML2r+ctcI=)
3: efptImD_TpkXZ0HvFXCba5sHj3E.roa (hash: wBmqE8ohvjFZts4QshaEu8H7uZA38AN2a3RRcLvuOgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f5:52:f9:98:e2:98:cc:ac:35:7e:5a:c2:3d:b1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Validity
Not Before: Apr 27 08:01:39 2026 GMT
Not After : Apr 28 08:01:39 2026 GMT
Subject: CN=309d6f2c4e8be3d4e8ebe9501bbf671841839068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:68:e3:00:50:60:e0:ac:43:86:88:36:a3:3e:
a0:4c:c1:a1:00:8a:73:86:bf:0d:a0:c6:e4:6e:5f:
7f:ca:22:37:8c:79:95:41:3b:13:4b:cc:0d:83:08:
ed:3b:09:a5:c1:a6:5c:95:37:f7:8a:98:15:49:73:
4c:3e:6d:8b:5d:e9:98:2d:a3:47:de:8b:03:de:7d:
e3:ba:a0:e6:8c:31:5a:bf:4a:7b:18:ef:af:e4:7c:
2a:6d:da:18:d9:dd:df:8b:26:b4:db:61:42:58:98:
2e:78:20:30:f8:27:c0:d1:f3:22:13:b9:1c:5d:ab:
ff:45:e3:26:cf:9b:d2:27:54:ff:55:30:19:23:8a:
6a:bf:09:ba:8a:12:47:1b:a0:7d:a3:fa:86:2e:fe:
25:1e:4f:3d:1b:1d:60:3a:51:9b:22:9e:9e:30:f4:
27:52:8b:a8:45:3b:ad:de:24:af:28:c2:a3:5c:6a:
e2:11:1c:66:12:6d:e3:e6:bf:59:ff:fa:c4:b1:76:
df:66:d9:27:2d:bc:86:19:a1:6d:8c:00:1f:d9:a5:
fb:8b:57:92:2d:6a:c3:6e:80:ff:db:fd:16:ad:e0:
27:c5:7d:63:c1:0c:de:2b:b9:02:26:da:55:c9:0d:
c0:bd:1f:f2:84:07:98:9e:88:27:52:20:36:62:1d:
f0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9D:6F:2C:4E:8B:E3:D4:E8:EB:E9:50:1B:BF:67:18:41:83:90:68
X509v3 Authority Key Identifier:
keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:47:9e:e1:b9:04:7a:11:b8:a3:68:3c:e5:d9:b1:e0:55:1e:
7b:7e:97:cd:ed:be:03:d9:65:76:23:a9:4f:e5:e2:e1:9f:e4:
4c:bf:42:c3:32:98:5e:42:da:da:d4:a5:7d:ab:37:57:6f:84:
74:6b:d6:94:ae:69:53:e2:58:27:1a:6f:c7:7e:53:ff:08:3d:
85:05:1d:21:e8:c2:89:74:70:fe:84:ec:55:84:f9:cc:c4:b0:
90:67:3a:4c:0b:7e:66:5c:ac:4b:80:df:91:2a:15:84:09:d5:
7c:d1:5e:01:c6:04:1a:66:aa:af:aa:aa:bf:7a:14:ac:74:25:
55:3e:23:70:35:07:71:49:e1:1c:6b:e1:a1:fb:69:09:35:3a:
e0:ad:13:be:e2:b5:b7:42:6e:e9:c3:1c:d3:1d:18:a5:64:d6:
4a:2e:1e:4d:df:0b:fe:a7:81:df:ca:20:af:8c:b8:e2:b4:87:
5f:ad:33:95:cd:54:a5:83:98:38:b0:f2:80:5a:0a:c8:37:09:
a5:2c:e4:62:b1:90:67:34:e6:98:3f:b6:1b:f0:68:98:33:64:
70:a4:47:93:58:ff:41:c0:05:cf:bf:2c:3e:63:9e:cb:59:ac:
64:20:c1:3d:8b:06:8d:ec:c6:a5:12:13:69:23:26:26:2c:ef:
f5:01:fd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:40:58 2026 by rpki-client