Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
File: EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft (raw, json)
Hash identifier: 7LvY2xiGkHgu4SbID0TOTWF6dOHEd7jYErpY019Sh6k=
Subject key identifier: EB:6A:84:7C:F0:22:FA:F0:72:E9:CA:3C:D5:D0:5A:9F:F6:0D:53:93
Authority key identifier: 10:38:D7:A2:95:4A:32:D2:AF:D1:6B:88:B3:63:B3:90:68:1C:D5:93
Certificate issuer: /CN=1038d7a2954a32d2afd16b88b363b390681cd593
Certificate serial: 01A13DB7BABF303F7C7930EC10C14D930A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
Manifest number: 1377
Signing time: Thu 15 Oct 2026 04:00:13 +0000
Manifest this update: Thu 15 Oct 2026 04:00:13 +0000
Manifest next update: Fri 16 Oct 2026 04:00:13 +0000
Files and hashes: 1: EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl (hash: GOIr6ZzwHekH2Wh78TY/fdYCTikdn/fFRcPRGTDsqiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b7:ba:bf:30:3f:7c:79:30:ec:10:c1:4d:93:0a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1038d7a2954a32d2afd16b88b363b390681cd593
Validity
Not Before: Oct 15 04:00:13 2026 GMT
Not After : Oct 16 04:00:13 2026 GMT
Subject: CN=eb6a847cf022faf072e9ca3cd5d05a9ff60d5393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f0:2c:06:b7:b7:ae:69:fc:eb:71:b1:0a:96:
9e:21:d5:0f:c4:21:d7:e8:0f:08:ba:b7:4c:74:7d:
21:72:07:da:26:47:bf:84:87:d9:9c:f4:ce:f1:cd:
e2:40:21:dd:b7:66:85:ba:01:f0:c8:9c:f6:84:6f:
2e:ad:b0:ba:c0:2c:fa:cd:15:58:e8:01:92:ce:77:
b8:72:31:31:76:51:4e:17:f9:1c:81:15:d9:c1:bb:
a2:ab:8e:d5:84:56:8d:92:d3:ca:fd:12:17:e0:1a:
f6:25:e1:f4:10:4f:e4:f3:7b:e4:68:50:2c:ad:12:
ee:d4:77:bc:df:bc:fa:07:74:16:46:15:7c:c9:5a:
f9:e5:83:12:ac:54:54:df:03:21:b4:2b:f5:4c:bd:
a8:90:1d:a5:87:ee:b6:35:1e:5d:9f:31:58:49:eb:
ac:22:5c:b3:f8:30:87:03:f3:26:d7:0a:e2:6a:b2:
fa:f6:fb:ca:f3:6d:01:4f:2b:7d:34:47:a1:37:72:
7f:a4:2d:33:1f:6e:4a:4c:ef:ff:6f:d2:37:f9:a6:
1f:17:7c:b7:f0:a5:05:8e:81:39:14:48:e0:9c:9c:
e7:96:a1:07:c4:d5:75:37:00:2a:0e:42:8b:82:69:
57:1c:ff:d4:1b:dd:c5:19:3d:20:b1:63:0d:33:3e:
7c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6A:84:7C:F0:22:FA:F0:72:E9:CA:3C:D5:D0:5A:9F:F6:0D:53:93
X509v3 Authority Key Identifier:
keyid:10:38:D7:A2:95:4A:32:D2:AF:D1:6B:88:B3:63:B3:90:68:1C:D5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:03:fb:3f:4e:69:22:15:75:2d:3a:4e:cf:5e:2a:a7:08:20:
ea:1d:24:4f:7c:b0:ea:18:ca:a3:61:d7:ba:4b:43:a1:5f:4c:
da:2f:5b:ef:95:bc:ca:d5:36:8c:13:f6:88:ae:ac:15:3f:c1:
19:4f:7d:ad:ba:79:10:ac:1c:a9:0c:ac:99:72:9e:5b:5c:9b:
a9:73:a5:36:77:13:0a:4d:0f:db:57:09:77:b9:d8:df:f3:93:
6d:8f:91:58:27:16:dc:a1:c0:4c:5e:27:dd:05:83:8a:1d:6d:
e4:e6:84:9d:65:ff:ec:f5:bd:31:05:15:6e:d7:b8:8e:88:43:
c3:db:76:37:77:c2:b4:da:c6:a2:a0:54:67:82:e2:4a:6a:ee:
bb:83:c8:2c:87:b2:65:a9:5a:84:86:3f:18:45:5d:9f:85:ed:
06:80:bd:39:5c:23:f4:55:46:5d:34:22:dd:09:f2:56:9c:e3:
3f:05:0a:fe:66:3d:d0:9c:6e:97:6a:ea:0e:6a:6d:df:ac:74:
1a:80:04:22:48:8c:d2:42:63:ee:0b:d8:29:a5:48:98:b1:02:
14:4d:f2:9c:50:3e:57:da:85:de:b7:1d:05:53:05:f5:1c:37:
56:b5:47:cd:9a:1e:a4:e6:54:1b:bc:72:a6:5c:74:12:dd:10:
6a:c7:7a:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9t7q/MD98eTDsEMFNkwqRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMzhkN2EyOTU0YTMyZDJhZmQxNmI4OGIzNjNiMzkwNjgx
Y2Q1OTMwHhcNMjYxMDE1MDQwMDEzWhcNMjYxMDE2MDQwMDEzWjAzMTEwLwYDVQQD
EyhlYjZhODQ3Y2YwMjJmYWYwNzJlOWNhM2NkNWQwNWE5ZmY2MGQ1MzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/AsBre3rmn863GxCpaeIdUPxCHX
6A8IurdMdH0hcgfaJke/hIfZnPTO8c3iQCHdt2aFugHwyJz2hG8urbC6wCz6zRVY
6AGSzne4cjExdlFOF/kcgRXZwbuiq47VhFaNktPK/RIX4Br2JeH0EE/k83vkaFAs
rRLu1He837z6B3QWRhV8yVr55YMSrFRU3wMhtCv1TL2okB2lh+62NR5dnzFYSeus
Ilyz+DCHA/Mm1wriarL69vvK820BTyt9NEehN3J/pC0zH25KTO//b9I3+aYfF3y3
8KUFjoE5FEjgnJznlqEHxNV1NwAqDkKLgmlXHP/UG93FGT0gsWMNMz58oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtqhHzwIvrwcunKPNXQWp/2DVOTMB8GA1UdIwQY
MBaAFBA416KVSjLSr9FriLNjs5BoHNWTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRURqWG9wVktNdEt2MFd1SXMyT3prR2djMVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82Mjc1NTctNzhhOC00YjRlLWEzYjgt
OWE4MThkZGQxNTU4LzEvRURqWG9wVktNdEt2MFd1SXMyT3prR2djMVpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC82Mjc1NTctNzhhOC00YjRlLWEzYjgtOWE4MThkZGQxNTU4
LzEvRURqWG9wVktNdEt2MFd1SXMyT3prR2djMVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwP7P05p
IhV1LTpOz14qpwgg6h0kT3yw6hjKo2HXuktDoV9M2i9b75W8ytU2jBP2iK6sFT/B
GU99rbp5EKwcqQysmXKeW1ybqXOlNncTCk0P21cJd7nY3/OTbY+RWCcW3KHATF4n
3QWDih1t5OaEnWX/7PW9MQUVbte4johDw9t2N3fCtNrGoqBUZ4LiSmruu4PILIey
ZalahIY/GEVdn4XtBoC9OVwj9FVGXTQi3QnyVpzjPwUK/mY90Jxul2rqDmpt36x0
GoAEIkiM0kJj7gvYKaVImLECFE3ynFA+V9qF3rcdBVMF9Rw3VrVHzZoepOZUG7xy
plx0Et0Qasd63g==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:25 2026 by rpki-client