
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.mft
File: EdF-IEIvWbbYvS2DB8HXv9jw9YQ.mft (raw, json)
Hash identifier: 8zm5qNe+HJQkNe87He30z9ixjUyu5ikzfD+4rLXsfHs=
Subject key identifier: C3:8B:E1:0F:D0:5A:24:F7:FD:8E:42:E8:47:0C:3D:72:C2:C2:5F:84
Authority key identifier: 11:D1:7E:20:42:2F:59:B6:D8:BD:2D:83:07:C1:D7:BF:D8:F0:F5:84
Certificate issuer: /CN=11d17e20422f59b6d8bd2d8307c1d7bfd8f0f584
Certificate serial: 019FA4BC201C38FFF1171764F9C6E58407E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.mft
Manifest number: 4A
Signing time: Mon 27 Jul 2026 18:00:20 +0000
Manifest this update: Mon 27 Jul 2026 18:00:20 +0000
Manifest next update: Tue 28 Jul 2026 18:00:20 +0000
Files and hashes: 1: EdF-IEIvWbbYvS2DB8HXv9jw9YQ.crl (hash: pk3BBRMu2egjo/rfg3gAuW7P/GHirIjyEmdGXBNT2i4=)
2: bVwbGhBG_CV5IoXeX_1AI4ewEyM.roa (hash: +XMoZ7qLxuL8LJi3clBJZFqP7IHlVTCAAs0BMOcjgWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:bc:20:1c:38:ff:f1:17:17:64:f9:c6:e5:84:07:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d17e20422f59b6d8bd2d8307c1d7bfd8f0f584
Validity
Not Before: Jul 27 18:00:20 2026 GMT
Not After : Jul 28 18:00:20 2026 GMT
Subject: CN=c38be10fd05a24f7fd8e42e8470c3d72c2c25f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:7f:f4:79:28:12:40:cd:2c:7b:03:d5:2d:
b3:90:97:40:c2:58:c4:f4:84:bf:b3:2e:92:c8:d2:
ea:fc:ce:f1:a7:4f:a9:00:2b:76:71:8f:74:5c:2f:
07:d4:d9:96:a5:b5:96:16:e6:4c:94:14:ad:93:e8:
d4:cd:c7:21:a6:2d:66:88:78:37:7a:71:f4:89:3c:
e8:a0:70:1f:b9:51:45:97:07:7b:7e:50:47:99:b3:
ac:cb:aa:1f:ab:d3:84:0b:52:a1:13:96:1c:a8:3e:
93:3b:7b:ec:b7:22:25:05:fe:6f:6b:3d:b4:e6:62:
34:75:c2:95:25:9c:0f:cc:be:00:70:31:17:7a:ff:
7a:6e:91:5a:f9:11:41:71:bf:0a:52:f1:25:68:80:
32:f0:df:ef:6e:6b:2f:90:51:01:04:e9:09:a5:e4:
e3:70:7a:e1:e8:19:ce:2a:8d:dd:03:fc:77:34:66:
0d:26:7e:94:dd:b1:0e:96:0c:c8:8f:35:28:e6:db:
da:95:25:a9:81:53:b8:d0:d0:e3:d1:4d:54:55:4e:
e1:e1:f5:11:f4:e5:6b:53:c2:e8:53:26:e2:a9:8c:
f6:09:57:3e:58:4b:88:10:c8:7f:1c:77:69:90:9a:
76:2b:b0:2b:8a:ce:56:c0:4c:0b:6c:21:f1:f2:3f:
e8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8B:E1:0F:D0:5A:24:F7:FD:8E:42:E8:47:0C:3D:72:C2:C2:5F:84
X509v3 Authority Key Identifier:
keyid:11:D1:7E:20:42:2F:59:B6:D8:BD:2D:83:07:C1:D7:BF:D8:F0:F5:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:44:61:1e:f4:75:a1:fe:3d:b6:88:84:90:5e:32:d9:18:7a:
a6:e0:04:e6:a6:a0:65:7b:50:dc:52:9a:a4:fb:b8:3a:b4:53:
b5:f3:41:5e:ff:6e:93:e4:9b:42:71:ec:6b:8d:6e:3e:ed:2a:
39:c0:44:03:a3:53:93:82:e4:e1:f0:95:22:26:4a:48:f9:f0:
ec:b4:e5:a0:99:51:53:11:6f:f0:51:c8:a9:ec:c9:17:e1:83:
ea:d9:5c:4e:da:a2:dc:5b:50:38:5e:9d:cf:5d:e3:2b:99:93:
b7:f7:a8:7c:ff:36:65:15:46:c2:33:20:aa:c3:b9:36:ce:6d:
d2:33:a1:4e:10:ae:77:ae:d8:8d:ba:a2:2a:1b:ec:fa:a5:b7:
9c:24:14:23:7d:08:65:28:57:c1:31:25:06:17:0d:49:65:48:
90:93:f8:2a:fe:51:fb:86:31:46:4a:95:82:63:91:a9:a2:a2:
f2:aa:77:27:d9:28:38:2c:f4:68:22:73:ed:79:cb:0f:a4:81:
c9:bd:8a:47:1b:64:ce:91:19:90:20:b8:99:71:1c:77:09:38:
db:8a:54:66:08:d4:6b:1e:21:b0:51:07:17:33:af:bf:06:03:
81:b7:8f:3c:47:23:b8:80:c8:a2:61:43:39:99:89:e9:d2:e4:
cf:ad:4d:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+kvCAcOP/xFxdk+cblhAfmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZDE3ZTIwNDIyZjU5YjZkOGJkMmQ4MzA3YzFkN2JmZDhm
MGY1ODQwHhcNMjYwNzI3MTgwMDIwWhcNMjYwNzI4MTgwMDIwWjAzMTEwLwYDVQQD
EyhjMzhiZTEwZmQwNWEyNGY3ZmQ4ZTQyZTg0NzBjM2Q3MmMyYzI1Zjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN5/9HkoEkDNLHsD1S2zkJdAwljE
9IS/sy6SyNLq/M7xp0+pACt2cY90XC8H1NmWpbWWFuZMlBStk+jUzcchpi1miHg3
enH0iTzooHAfuVFFlwd7flBHmbOsy6ofq9OEC1KhE5YcqD6TO3vstyIlBf5vaz20
5mI0dcKVJZwPzL4AcDEXev96bpFa+RFBcb8KUvElaIAy8N/vbmsvkFEBBOkJpeTj
cHrh6BnOKo3dA/x3NGYNJn6U3bEOlgzIjzUo5tvalSWpgVO40NDj0U1UVU7h4fUR
9OVrU8LoUybiqYz2CVc+WEuIEMh/HHdpkJp2K7Aris5WwEwLbCHx8j/osQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOL4Q/QWiT3/Y5C6EcMPXLCwl+EMB8GA1UdIwQY
MBaAFBHRfiBCL1m22L0tgwfB17/Y8PWEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWRGLUlFSXZXYmJZdlMyREI4SFh2OWp3OVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mNzBlMWEtNzMyZS00ZTZiLWIzYjUt
ZjU2MmI4OTc0ZDhiLzEvRWRGLUlFSXZXYmJZdlMyREI4SFh2OWp3OVlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mNzBlMWEtNzMyZS00ZTZiLWIzYjUtZjU2MmI4OTc0ZDhi
LzEvRWRGLUlFSXZXYmJZdlMyREI4SFh2OWp3OVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk0RhHvR1
of49toiEkF4y2Rh6puAE5qagZXtQ3FKapPu4OrRTtfNBXv9uk+SbQnHsa41uPu0q
OcBEA6NTk4Lk4fCVIiZKSPnw7LTloJlRUxFv8FHIqezJF+GD6tlcTtqi3FtQOF6d
z13jK5mTt/eofP82ZRVGwjMgqsO5Ns5t0jOhThCud67YjbqiKhvs+qW3nCQUI30I
ZShXwTElBhcNSWVIkJP4Kv5R+4YxRkqVgmORqaKi8qp3J9koOCz0aCJz7XnLD6SB
yb2KRxtkzpEZkCC4mXEcdwk424pUZgjUax4hsFEHFzOvvwYDgbePPEcjuIDIomFD
OZmJ6dLkz61Nxg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 22:06:29 2026 by rpki-client