
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.mft
File: EdF-IEIvWbbYvS2DB8HXv9jw9YQ.mft (raw, json)
Hash identifier: zMv4RcAbOzD5Y2DvAQj91X78EcD7HWG9Vv9SwXdHj8w=
Subject key identifier: 64:B1:15:EB:3A:7D:F4:3A:A1:7C:05:31:AA:9A:BD:EA:DF:0C:FF:5D
Authority key identifier: 11:D1:7E:20:42:2F:59:B6:D8:BD:2D:83:07:C1:D7:BF:D8:F0:F5:84
Certificate issuer: /CN=11d17e20422f59b6d8bd2d8307c1d7bfd8f0f584
Certificate serial: 01A181BED4E36F056943F4F4AAE96A4D8B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.mft
Manifest number: 0141
Signing time: Wed 28 Oct 2026 09:02:09 +0000
Manifest this update: Wed 28 Oct 2026 09:02:09 +0000
Manifest next update: Thu 29 Oct 2026 09:02:09 +0000
Files and hashes: 1: EdF-IEIvWbbYvS2DB8HXv9jw9YQ.crl (hash: A+6JDbzYVlqsqsCAgQDjARgfsPP/GwOrft1c0yEpZ4I=)
2: bVwbGhBG_CV5IoXeX_1AI4ewEyM.roa (hash: +XMoZ7qLxuL8LJi3clBJZFqP7IHlVTCAAs0BMOcjgWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:be:d4:e3:6f:05:69:43:f4:f4:aa:e9:6a:4d:8b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d17e20422f59b6d8bd2d8307c1d7bfd8f0f584
Validity
Not Before: Oct 28 09:02:09 2026 GMT
Not After : Oct 29 09:02:09 2026 GMT
Subject: CN=64b115eb3a7df43aa17c0531aa9abdeadf0cff5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:18:98:2b:e7:4c:d6:62:5f:bf:cb:82:2b:dd:
0d:da:e9:40:99:48:89:1f:3d:54:2b:ad:b0:a0:a7:
95:78:26:88:7c:2c:0e:3b:17:aa:9f:71:3f:8c:de:
5a:84:1b:9b:7d:e0:35:5b:cf:dd:a4:18:fb:c2:f9:
a6:09:d1:4a:da:fb:a2:9e:ac:6a:0f:92:6f:82:23:
73:73:00:81:0c:4e:80:0e:c2:d5:ff:6b:82:fd:dd:
8b:20:00:9e:a0:34:0c:09:c3:40:a9:03:86:5f:16:
ca:0c:b3:19:5b:db:44:98:6c:fe:9c:82:8b:d2:24:
9d:05:4e:cb:9e:b8:72:e4:c2:03:49:28:17:e7:80:
b2:99:04:64:a2:fc:79:87:55:ea:23:20:11:e8:e0:
91:d2:af:15:dc:2a:e0:67:33:89:e2:b4:9a:7a:40:
fb:ef:e9:16:2d:d6:06:de:91:6e:e0:3a:8a:34:95:
d8:e3:fc:79:c2:20:e3:f6:33:9e:91:4d:ea:a9:34:
2b:18:ab:a3:03:de:04:e9:65:75:82:c7:cf:ab:66:
4d:65:93:a8:36:c8:bb:93:05:4c:df:9c:d0:79:cf:
c0:3f:05:32:04:00:ea:97:e1:51:13:09:1e:41:0c:
4b:da:d0:05:e8:a3:7b:71:01:c8:8d:a7:a3:73:f0:
fc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B1:15:EB:3A:7D:F4:3A:A1:7C:05:31:AA:9A:BD:EA:DF:0C:FF:5D
X509v3 Authority Key Identifier:
keyid:11:D1:7E:20:42:2F:59:B6:D8:BD:2D:83:07:C1:D7:BF:D8:F0:F5:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:30:55:9d:66:5b:6b:1a:e7:4c:00:3f:5e:e7:c2:87:39:99:
51:b3:a7:be:54:5f:9a:bd:33:b6:31:f2:d0:46:96:fe:1d:2e:
73:e9:07:03:7e:fa:0a:62:b9:cb:56:c7:3f:c5:e6:2e:8a:06:
fa:87:5a:0c:ac:7e:ea:84:71:e8:d9:71:f7:ae:bf:45:15:7b:
d4:70:b9:7e:94:25:93:a2:d4:3c:c2:1d:32:ae:03:20:73:33:
6d:47:4e:6e:a0:c6:1e:f6:8a:53:a4:fb:81:9a:16:65:d3:8e:
87:fa:53:88:99:a8:d6:ec:5c:d3:6c:74:ca:03:e9:54:4e:85:
c9:ef:94:d1:d1:34:e6:80:a8:60:d3:23:50:af:89:ce:d9:09:
de:c9:8c:67:81:95:97:c3:cb:a7:83:29:8d:8a:ef:21:9b:40:
75:4c:8d:61:42:e9:a7:9e:66:df:9a:24:fb:ef:88:cf:18:f3:
68:aa:e9:3f:57:4f:3b:38:b1:f2:0d:7d:46:a0:ce:ba:eb:a2:
cb:81:0f:13:4d:77:4f:f7:9d:82:e7:6e:9d:36:0b:2d:61:fa:
4b:78:08:db:4c:29:ed:94:8c:f0:50:27:7a:78:fa:b1:85:f2:
fd:0e:28:fe:e1:d3:f6:97:b0:6f:57:4f:96:3c:bb:ad:2f:99:
b6:df:f4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 15:07:57 2026 by rpki-client