
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
File: EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft (raw, json)
Hash identifier: xmfElzLcwPUNC2yk9pYhW2piAEsHH97MOq2chLRk5oI=
Subject key identifier: 46:40:E0:A6:DE:00:49:B3:7D:DB:0F:FC:88:66:CA:20:23:3E:02:6A
Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Certificate serial: 019EB7A0B57828B4A492C71D7BC06BB8983A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
Manifest number: 1956
Signing time: Thu 11 Jun 2026 17:00:23 +0000
Manifest this update: Thu 11 Jun 2026 17:00:23 +0000
Manifest next update: Fri 12 Jun 2026 17:00:23 +0000
Files and hashes: 1: EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl (hash: TrLoex5DK5cZ7OdaV329SGuD/gk5zb4qd9vwg6IoLek=)
2: cLW-rzfQIYF9Ip7K5f5c4fVxT_0.roa (hash: kTIIud4RXHLbaB+fDQvEDDvRSMMhyUI+tRML2r+ctcI=)
3: efptImD_TpkXZ0HvFXCba5sHj3E.roa (hash: wBmqE8ohvjFZts4QshaEu8H7uZA38AN2a3RRcLvuOgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a0:b5:78:28:b4:a4:92:c7:1d:7b:c0:6b:b8:98:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Validity
Not Before: Jun 11 17:00:23 2026 GMT
Not After : Jun 12 17:00:23 2026 GMT
Subject: CN=4640e0a6de0049b37ddb0ffc8866ca20233e026a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c7:42:07:c3:b5:b9:7d:11:7c:c5:87:2c:57:
8b:5a:3f:e4:85:b3:d0:30:2b:1a:3b:d6:9d:06:22:
0e:97:da:1c:d2:7c:4c:43:58:31:92:9a:51:c8:d5:
82:32:18:5b:46:2c:1c:5e:39:5f:0b:80:5c:ef:24:
32:8f:02:39:f3:ad:31:22:fc:3b:1e:f3:53:d4:e3:
27:cc:87:f1:0e:d8:25:83:e3:b7:57:6c:c1:a9:b3:
08:2a:c0:28:8c:bf:7a:e8:11:2e:1e:12:73:34:50:
ca:78:dd:68:af:2a:4c:9b:9c:0a:8b:b5:25:cf:f1:
44:bd:a5:90:36:92:d4:05:96:0b:bf:44:f3:fc:de:
ea:2b:79:03:90:f7:f2:46:5b:f9:95:83:69:ef:7d:
cd:1d:5b:cf:d9:fa:86:53:7a:b1:39:c9:6b:51:ea:
05:3b:87:79:50:8d:7a:57:aa:cb:c9:27:a3:07:1c:
2c:5b:fe:e9:d7:7d:62:04:0f:1b:eb:f0:3e:77:4e:
1f:6c:1f:56:57:a7:74:f6:7a:d6:64:97:f4:ae:a2:
30:8d:98:f3:87:d9:db:34:cb:7a:6c:dd:1a:bb:5f:
56:cb:ae:02:70:0f:27:e1:28:58:2a:61:b0:52:4d:
d9:92:bf:b2:39:50:72:b1:b6:73:0e:30:fc:a2:1a:
1b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:40:E0:A6:DE:00:49:B3:7D:DB:0F:FC:88:66:CA:20:23:3E:02:6A
X509v3 Authority Key Identifier:
keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:81:46:be:ab:03:c5:24:e5:2e:e1:0e:e3:c4:b7:c1:41:20:
d3:61:17:5b:64:06:bb:da:ea:17:f0:92:e7:f3:fc:6a:c1:f5:
a0:c9:01:12:d3:ed:02:8b:a8:92:0b:84:f5:79:3c:fc:63:6e:
4b:1e:71:25:57:e5:0e:73:18:4e:08:8b:e1:3c:89:78:84:65:
df:b4:f4:87:aa:3b:25:86:57:2a:10:54:11:5b:14:30:c5:4b:
15:6c:45:08:87:c3:4b:3e:b2:af:70:13:af:ab:86:dd:45:ef:
4f:d9:0c:38:d0:f4:01:74:b2:c5:ce:63:fd:48:b0:c6:50:d4:
2b:3a:4e:4b:5e:68:b7:72:f6:a7:2a:6a:33:78:d9:6f:8f:40:
6d:6e:62:08:74:45:68:1c:36:54:48:d3:2a:0f:d2:2e:c6:c6:
cf:50:85:02:36:b8:65:3a:49:6f:ce:32:63:d6:41:24:76:85:
47:dd:b6:71:a6:bb:cf:fd:88:52:83:1a:28:e1:ef:53:ec:94:
fe:2f:e5:ec:c9:d3:43:16:47:c9:ef:db:f7:6c:87:97:2f:60:
64:3e:0a:f6:1c:cf:63:a8:38:23:a8:fe:7b:2a:a2:fa:c2:c2:
e1:59:00:eb:81:f4:a3:3f:2f:7e:36:aa:a1:93:a2:1e:9f:ec:
2c:cf:92:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63oLV4KLSkkscde8BruJg6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZjc3NDFjZDFhZjJiYjM0Yzg2YzczZWEzYmQ2Yzc2ZDk5
NjhkMGQwHhcNMjYwNjExMTcwMDIzWhcNMjYwNjEyMTcwMDIzWjAzMTEwLwYDVQQD
Eyg0NjQwZTBhNmRlMDA0OWIzN2RkYjBmZmM4ODY2Y2EyMDIzM2UwMjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8dCB8O1uX0RfMWHLFeLWj/khbPQ
MCsaO9adBiIOl9oc0nxMQ1gxkppRyNWCMhhbRiwcXjlfC4Bc7yQyjwI5860xIvw7
HvNT1OMnzIfxDtglg+O3V2zBqbMIKsAojL966BEuHhJzNFDKeN1orypMm5wKi7Ul
z/FEvaWQNpLUBZYLv0Tz/N7qK3kDkPfyRlv5lYNp733NHVvP2fqGU3qxOclrUeoF
O4d5UI16V6rLySejBxwsW/7p131iBA8b6/A+d04fbB9WV6d09nrWZJf0rqIwjZjz
h9nbNMt6bN0au19Wy64CcA8n4ShYKmGwUk3Zkr+yOVBysbZzDjD8ohobKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZA4KbeAEmzfdsP/IhmyiAjPgJqMB8GA1UdIwQY
MBaAFBD3dBzRryuzTIbHPqO9bHbZlo0NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVBkMEhOR3ZLN05NaHNjLW83MXNkdG1XalEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZWY3Y2UtMjVkNC00M2MxLThlYWUt
MWE2NGNmMjFhNjA0LzEvRVBkMEhOR3ZLN05NaHNjLW83MXNkdG1XalEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kZWY3Y2UtMjVkNC00M2MxLThlYWUtMWE2NGNmMjFhNjA0
LzEvRVBkMEhOR3ZLN05NaHNjLW83MXNkdG1XalEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYYFGvqsD
xSTlLuEO48S3wUEg02EXW2QGu9rqF/CS5/P8asH1oMkBEtPtAouokguE9Xk8/GNu
Sx5xJVflDnMYTgiL4TyJeIRl37T0h6o7JYZXKhBUEVsUMMVLFWxFCIfDSz6yr3AT
r6uG3UXvT9kMOND0AXSyxc5j/UiwxlDUKzpOS15ot3L2pypqM3jZb49AbW5iCHRF
aBw2VEjTKg/SLsbGz1CFAja4ZTpJb84yY9ZBJHaFR922caa7z/2IUoMaKOHvU+yU
/i/l7MnTQxZHye/b92yHly9gZD4K9hzPY6g4I6j+eyqi+sLC4VkA64H0oz8vfjaq
oZOiHp/sLM+ScA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 03:38:56 2026 by rpki-client