Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft
File: EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft (raw, json)
Hash identifier: vxDzyxoPlnM58MbAtX4LVfmE80lJ0KtFOmyOygkJ9j4=
Subject key identifier: 3F:75:6A:58:88:68:B3:A2:B4:A0:0C:2B:3E:DC:1A:63:87:49:3F:D6
Authority key identifier: 11:D4:79:12:EF:D4:09:A4:6F:7C:D4:27:41:80:4C:7D:4F:5E:1A:D5
Certificate issuer: /CN=11d47912efd409a46f7cd42741804c7d4f5e1ad5
Certificate serial: 01A17C60B146A2D8CBAC9E542B8EC74D5725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft
Manifest number: 1A59
Signing time: Tue 27 Oct 2026 08:01:13 +0000
Manifest this update: Tue 27 Oct 2026 08:01:13 +0000
Manifest next update: Wed 28 Oct 2026 08:01:13 +0000
Files and hashes: 1: EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl (hash: xajRtAxSqJX2YR5e9PMT0g2i2UJyoCQwDwJPdTrWoug=)
2: x3NbWiQWCZXyc2uMnZ5Ab6Fhu_I.roa (hash: 93sj77pr5rKe1tU77xXMj7hopzpAX8jIqepZA0pnhsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:b1:46:a2:d8:cb:ac:9e:54:2b:8e:c7:4d:57:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d47912efd409a46f7cd42741804c7d4f5e1ad5
Validity
Not Before: Oct 27 08:01:13 2026 GMT
Not After : Oct 28 08:01:13 2026 GMT
Subject: CN=3f756a588868b3a2b4a00c2b3edc1a6387493fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4a:ae:06:e8:63:23:e9:9d:b3:70:37:dc:a0:
84:c7:2a:da:f6:39:ce:b3:a9:ea:45:0f:95:fd:49:
76:2a:42:e2:13:26:68:5a:81:78:6d:89:41:ef:69:
03:a5:82:ca:71:8c:f6:71:59:a9:cd:50:74:08:02:
ec:d0:f2:3a:fd:33:ad:b6:ea:73:3a:0b:96:4e:53:
34:2c:41:a8:9c:41:06:cd:ca:41:82:c2:0b:7d:75:
28:25:75:e3:5a:17:f4:9f:92:74:bc:39:b9:ce:c7:
6a:3e:1a:03:2c:3a:79:9f:46:1d:ce:c9:48:46:60:
21:d6:71:57:84:50:ea:5d:d8:79:b0:bc:ca:a5:1e:
13:12:b4:d8:84:a8:07:82:89:f5:43:1d:1c:d3:c2:
59:7e:e3:39:fc:d4:8a:f8:d3:2b:8d:b7:f9:ea:10:
59:b0:62:12:78:3c:e0:ff:d1:b8:1b:24:56:77:9b:
3d:5b:b9:53:d9:0f:e3:c8:44:bd:e1:ac:e3:f2:c4:
d5:4d:b3:52:b5:2c:d0:ca:73:f4:f8:59:7f:62:51:
c8:7a:6e:33:dc:66:cd:0b:68:f5:64:cc:b0:53:55:
09:d5:dc:81:8e:a9:4b:0c:62:3d:cf:74:c3:59:00:
fc:c5:0d:7c:4d:22:1f:1f:dd:8e:c7:27:f8:e9:4b:
12:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:75:6A:58:88:68:B3:A2:B4:A0:0C:2B:3E:DC:1A:63:87:49:3F:D6
X509v3 Authority Key Identifier:
keyid:11:D4:79:12:EF:D4:09:A4:6F:7C:D4:27:41:80:4C:7D:4F:5E:1A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c9:a0:6a:dc:58:59:b5:7a:47:a9:3f:f8:6f:7d:da:a2:76:
bb:f8:52:9a:bc:93:9b:87:33:c3:b9:5a:eb:02:62:eb:61:6e:
7c:6e:3c:70:30:49:7a:19:d6:81:a6:d7:91:1c:47:14:40:d9:
b2:23:cf:e6:62:8f:4e:60:d6:51:b7:1d:7a:f5:27:c8:92:79:
66:94:0b:f5:f4:4b:b6:60:db:23:22:4e:ec:5d:39:68:5b:71:
01:b3:f3:7d:d3:f2:58:dc:d4:9d:82:b5:8d:5c:b5:28:8a:bb:
3a:a0:18:5c:45:b8:5e:7d:df:04:b0:1f:43:f4:a7:10:f8:fd:
87:a4:f5:2d:b1:08:5f:bf:03:29:22:2e:37:96:8a:7d:1a:9b:
49:1b:36:1c:91:99:63:68:46:3f:ef:a6:53:27:e4:14:d1:e4:
bc:28:1f:8b:78:78:75:38:c7:08:91:c5:09:d9:d1:96:13:05:
68:55:82:e7:d3:b5:65:72:f7:5b:94:32:2b:33:83:6d:5e:6e:
5c:ff:ec:e8:c4:00:42:20:5a:c9:bf:12:cd:bf:7f:69:3f:36:
d8:43:3a:80:bc:67:c6:4b:46:6c:5d:ec:e8:04:85:26:0f:e4:
9b:e9:a7:ef:2e:fa:15:35:f8:0a:4a:ed:7e:a5:3a:f3:43:04:
bc:4a:62:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:45:33 2026 by rpki-client