Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
File: edEPco1kmadJrlkC6PqIPxrdRRc.mft (raw, json)
Hash identifier: L2BJOWYQBasrTv4mNeRa9p9A4D93XTIMUsSSSglcT7U=
Subject key identifier: 5D:04:1A:94:28:69:DC:0A:F6:33:C9:A4:17:B7:EB:8F:16:F1:61:26
Authority key identifier: 79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17
Certificate issuer: /CN=79d10f728d6499a749ae5902e8fa883f1add4517
Certificate serial: 019E4E7CCFE682A672A2F9FA2FD5A7E7AC20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
Manifest number: 1441
Signing time: Fri 22 May 2026 07:01:02 +0000
Manifest this update: Fri 22 May 2026 07:01:02 +0000
Manifest next update: Sat 23 May 2026 07:01:02 +0000
Files and hashes: 1: cA3aNPgSvOncWgLq6bBFasg5G0s.roa (hash: QhdH/rusqlTfEwtA92QrkPPt5X2EYpI1lbZsumMOaWg=)
2: edEPco1kmadJrlkC6PqIPxrdRRc.crl (hash: kA+DHGJkZm0hqK+U/oxtwHu9eImBZY4Uzc35BYN+d78=)
3: lrcggll5IwEWJaXAEarEFjeln_4.roa (hash: A3enJWPIF9/BoTUOABHy2zjKfwPohwCjBujb09CAGVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:7c:cf:e6:82:a6:72:a2:f9:fa:2f:d5:a7:e7:ac:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d10f728d6499a749ae5902e8fa883f1add4517
Validity
Not Before: May 22 07:01:02 2026 GMT
Not After : May 23 07:01:02 2026 GMT
Subject: CN=5d041a942869dc0af633c9a417b7eb8f16f16126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1d:91:7e:07:98:ec:49:c0:9f:52:3c:48:cf:
34:02:01:f6:f4:bc:9f:ea:9a:27:f6:e2:c9:ad:b3:
ca:f2:14:4e:60:22:4a:89:01:b9:b2:0b:54:de:73:
61:7b:36:94:ca:35:b5:d3:fc:54:74:4a:b0:d8:0b:
df:ad:4b:a5:5d:3c:39:49:8f:92:80:af:7d:1c:c7:
6a:18:a4:f8:2f:97:46:5c:91:ce:f0:6b:a2:d9:14:
9d:90:3a:6e:12:75:be:66:d4:ee:e1:74:37:42:a8:
2e:be:88:18:fb:1f:8a:ad:53:f8:55:4e:2d:cc:18:
1e:9a:82:55:31:bd:66:ca:c4:3b:40:51:d0:71:70:
11:15:d8:36:07:c0:c9:bb:4d:d0:26:c8:06:48:77:
f8:f9:b5:73:0d:d6:66:88:0e:ba:55:20:46:97:fe:
f7:b1:a6:55:0a:91:a2:9f:a9:3b:71:aa:8d:25:3c:
02:a7:db:3e:3b:9c:26:3d:c4:f6:5e:e4:bf:c4:31:
52:d9:13:3c:d0:4e:c8:dc:b5:6f:45:6f:7d:77:74:
e5:31:3b:ff:6d:58:d7:a7:69:88:c3:26:f7:40:eb:
28:18:1b:e2:7f:4d:f0:92:99:28:3b:b0:e4:84:21:
3f:83:17:92:f3:06:64:0c:2e:da:c2:3f:38:7f:c7:
b8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:04:1A:94:28:69:DC:0A:F6:33:C9:A4:17:B7:EB:8F:16:F1:61:26
X509v3 Authority Key Identifier:
keyid:79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:54:41:b3:c9:77:72:84:36:b1:15:fc:e0:7f:49:94:70:be:
fb:44:70:ce:f7:08:49:7e:20:a5:df:cb:23:7b:c1:88:06:4b:
8a:a5:2f:c9:b7:ae:00:94:33:e8:e9:0b:5f:6d:77:20:68:f8:
a7:46:68:07:ae:3a:bd:9e:8f:3b:8e:24:42:32:eb:de:d0:39:
75:8b:86:22:f4:58:3d:44:f6:16:e9:af:14:cf:9d:d7:4d:e2:
b6:fc:c6:99:63:f0:c9:2a:53:d7:7b:65:3d:4c:55:32:1e:77:
c5:d7:39:de:21:bb:d8:fe:88:45:3c:54:1c:99:e5:bc:1a:9f:
36:5b:a5:7a:77:56:76:dc:b6:d5:05:7e:6d:67:b5:59:9b:17:
11:1a:00:43:04:00:23:98:f0:26:be:71:18:a6:fa:6e:bd:35:
b9:a3:81:39:26:0c:df:cc:b0:76:bf:ad:dc:a7:1d:09:da:52:
f5:6d:dc:9f:64:f4:3e:28:96:00:eb:fc:2f:3b:06:70:f8:58:
91:fe:7c:8d:34:9d:67:72:86:00:cd:12:fb:c5:79:80:07:8d:
d6:54:8c:8b:c0:24:d3:6a:6e:58:53:80:6c:2a:0b:fd:94:e3:
9b:ac:29:4f:9e:0d:c0:0a:25:2a:8d:84:4a:30:4e:25:f8:c6:
b4:43:ae:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5OfM/mgqZyovn6L9Wn56wgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZDEwZjcyOGQ2NDk5YTc0OWFlNTkwMmU4ZmE4ODNmMWFk
ZDQ1MTcwHhcNMjYwNTIyMDcwMTAyWhcNMjYwNTIzMDcwMTAyWjAzMTEwLwYDVQQD
Eyg1ZDA0MWE5NDI4NjlkYzBhZjYzM2M5YTQxN2I3ZWI4ZjE2ZjE2MTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR2RfgeY7EnAn1I8SM80AgH29Lyf
6pon9uLJrbPK8hROYCJKiQG5sgtU3nNhezaUyjW10/xUdEqw2AvfrUulXTw5SY+S
gK99HMdqGKT4L5dGXJHO8Gui2RSdkDpuEnW+ZtTu4XQ3QqguvogY+x+KrVP4VU4t
zBgemoJVMb1mysQ7QFHQcXARFdg2B8DJu03QJsgGSHf4+bVzDdZmiA66VSBGl/73
saZVCpGin6k7caqNJTwCp9s+O5wmPcT2XuS/xDFS2RM80E7I3LVvRW99d3TlMTv/
bVjXp2mIwyb3QOsoGBvif03wkpkoO7DkhCE/gxeS8wZkDC7awj84f8e4xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0EGpQoadwK9jPJpBe3648W8WEmMB8GA1UdIwQY
MBaAFHnRD3KNZJmnSa5ZAuj6iD8a3UUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWRFUGNvMWttYWRKcmxrQzZQcUlQeHJkUlJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wYjI2NDEtYmZiNS00ZTc1LWEzZTgt
YjlmMDVlMzE1MjNhLzEvZWRFUGNvMWttYWRKcmxrQzZQcUlQeHJkUlJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8wYjI2NDEtYmZiNS00ZTc1LWEzZTgtYjlmMDVlMzE1MjNh
LzEvZWRFUGNvMWttYWRKcmxrQzZQcUlQeHJkUlJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFRBs8l3
coQ2sRX84H9JlHC++0RwzvcISX4gpd/LI3vBiAZLiqUvybeuAJQz6OkLX213IGj4
p0ZoB646vZ6PO44kQjLr3tA5dYuGIvRYPUT2FumvFM+d103itvzGmWPwySpT13tl
PUxVMh53xdc53iG72P6IRTxUHJnlvBqfNlulendWdty21QV+bWe1WZsXERoAQwQA
I5jwJr5xGKb6br01uaOBOSYM38ywdr+t3KcdCdpS9W3cn2T0PiiWAOv8LzsGcPhY
kf58jTSdZ3KGAM0S+8V5gAeN1lSMi8Ak02puWFOAbCoL/ZTjm6wpT54NwAolKo2E
SjBOJfjGtEOukg==
-----END CERTIFICATE-----
Generated at Fri May 22 15:09:50 2026 by rpki-client