Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
File: edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft (raw, json)
Hash identifier: iSSQl+/VNJMFUKO4NFWfCYIFzEcFm14x6wbVbSbPacE=
Subject key identifier: 70:7F:3F:03:8B:D8:BF:7D:15:4F:47:73:EB:50:64:BE:C7:25:3F:6F
Authority key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
Certificate issuer: /CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Certificate serial: 019F935B6E14FDBA48268CE1671830CAC1AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
Manifest number: 10EC
Signing time: Fri 24 Jul 2026 09:01:10 +0000
Manifest this update: Fri 24 Jul 2026 09:01:10 +0000
Manifest next update: Sat 25 Jul 2026 09:01:10 +0000
Files and hashes: 1: 8x6YocXhEAE4EUV764wUI2PKiKU.roa (hash: yeyp7+DYbQfuSd5MS8n2WSRAshm6pVInjHRluL8iOew=)
2: a_FCKCt6dnU7F2M3SMQI1J1wlrw.roa (hash: AtVF3QXcvO4VESZ6rn9J2bX+Ej+cAO1z0o2Qbw21J8E=)
3: edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl (hash: cBf02YoSftWa9jnICEDvC0VPPWnDxm7mzrlSLEytulw=)
4: oG6E9ZToy7RTlQOkPq4zuV7XG0U.roa (hash: 2JYfuKBfp+nWk/czqBEKKIWfjScVuKeSQovGMXxQmwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:6e:14:fd:ba:48:26:8c:e1:67:18:30:ca:c1:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Validity
Not Before: Jul 24 09:01:10 2026 GMT
Not After : Jul 25 09:01:10 2026 GMT
Subject: CN=707f3f038bd8bf7d154f4773eb5064bec7253f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:af:fc:bc:7e:30:26:da:1b:40:d7:b9:04:72:
3f:20:7a:7c:7d:fb:c7:e7:3f:75:21:3e:24:cb:1d:
2e:ea:a6:3f:c3:1c:19:56:57:d8:74:7b:d0:0c:1c:
7b:32:79:2f:9c:e2:45:96:fb:c9:22:53:a1:f6:17:
cb:91:34:76:3d:bd:1b:fd:f2:77:56:a6:18:47:a7:
0c:17:22:03:c7:be:aa:14:1b:76:b9:b3:0a:f4:d9:
ed:a8:87:e4:2f:9f:43:b9:9b:1c:8c:f3:d6:4f:68:
d3:a3:45:99:6a:9d:ff:d5:fe:c4:eb:87:9c:6b:95:
6f:d5:71:fb:d2:91:4e:73:30:a5:3d:5b:e0:ca:cd:
99:89:31:5e:41:d1:ca:35:ca:a2:f8:59:91:00:33:
82:b8:4c:73:fb:d8:20:9b:f9:fe:4c:b1:63:c0:de:
9b:c9:5b:4b:e0:e4:67:8e:ac:75:32:bc:d2:90:21:
e8:e7:96:41:d7:31:4b:96:64:c9:ba:95:6d:b9:e8:
33:12:45:57:b0:47:19:6b:d5:8e:ee:12:3b:e2:c7:
9b:01:f6:d4:9e:3c:cc:69:d6:aa:6e:eb:f5:4e:79:
64:b1:02:29:08:9b:bf:b5:99:e0:af:2f:a1:64:f5:
a9:c8:f4:58:5b:15:15:e2:e8:af:aa:9e:8e:cd:70:
ae:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7F:3F:03:8B:D8:BF:7D:15:4F:47:73:EB:50:64:BE:C7:25:3F:6F
X509v3 Authority Key Identifier:
keyid:79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:38:91:17:d8:6a:27:5e:f2:fa:d6:e1:f0:cc:19:ba:ad:de:
fb:e9:b7:47:36:78:10:06:cf:64:68:5e:d5:3a:72:fe:da:26:
90:2d:f5:0a:88:c2:19:b1:18:c3:46:02:18:fc:62:5e:d6:6b:
55:12:be:d5:9b:20:58:7d:a5:bc:6d:02:35:5b:b9:02:a7:95:
ec:87:ec:82:8a:b6:df:8f:a3:94:2d:38:3c:9d:9f:df:b9:67:
80:51:08:bf:f0:5f:b7:72:ad:74:0b:8a:44:de:cf:6d:f8:8a:
cf:5f:06:8c:1e:b8:9b:67:8d:19:ff:b2:d2:ed:c2:1b:01:c1:
8f:bf:cc:b1:10:a7:0f:7e:1e:94:1b:e9:b0:0f:2a:1e:80:1d:
ad:25:d9:1b:52:c3:1c:6b:21:a0:1a:be:30:ed:89:ef:a3:12:
81:c2:eb:83:3d:79:01:44:d4:c5:2d:25:d2:dc:27:4f:2c:9c:
38:1e:f0:f0:7b:82:02:15:00:80:c0:ec:af:2c:f9:37:24:b1:
df:07:3e:eb:a0:94:14:b8:b9:4f:3e:c4:37:13:6b:d9:55:01:
d7:99:7b:d8:f3:e7:21:fd:d2:96:a3:f4:c2:71:09:c2:bb:86:
77:0f:1c:9d:e5:67:e3:20:6b:4d:14:a3:de:be:09:49:bd:dc:
69:11:9b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:10:24 2026 by rpki-client