Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
File: EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft (raw, json)
Hash identifier: O53BF8vCjs7KFIh0H4Hh/Vs9cLY3rHiQg/dEimsLiL4=
Subject key identifier: 64:5D:DF:08:38:A0:2E:E0:4B:1A:E3:27:F7:32:38:04:FA:C5:B9:F0
Authority key identifier: 10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
Certificate issuer: /CN=10f1d0dbe093c722350618f4045c25ba94317f87
Certificate serial: 019D2515E12B1FBDABC71BC1A4E75D862722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
Manifest number: 188D
Signing time: Wed 25 Mar 2026 13:01:24 +0000
Manifest this update: Wed 25 Mar 2026 13:01:24 +0000
Manifest next update: Thu 26 Mar 2026 13:01:24 +0000
Files and hashes: 1: 4yjEk3uPQykpRiAtMe9Ta3puC7E.asa (hash: /0Qgnk924zcdudhtbYhG9R/tRH1/XpJIF8EVd02x/IA=)
2: EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl (hash: v3nMheO0nouTt4zl/EzCH1gZDDbydNRsvyPb2iL2cS0=)
3: HISyPiu1Sf9BM-utlQgfw6elKBg.asa (hash: 2blxjr0KAyVnqaVerF5uOf5vVRYxEmJeqdEF7pf0GuU=)
4: UvLx2oYNdW2PyKjvMGN1IVTdYiI.asa (hash: +lC0mXrpgZ1tOZxPiTgy4U3EyPLtAIoTSYA360OOcCQ=)
5: WW2jLA5cdwrG7xUDwvvWb1u0Z_I.roa (hash: NQTSDeY1v8QUdlY/Nw06UqgN+UAxhAYxrfmI+hdgIDU=)
6: naYBcrufp-6L3JkDN-CeOQG1p1I.roa (hash: fPvBEEB4GWYhpwRMLZebL8dNCBfHcJIGVXJAvo/Y6LY=)
7: nf_1cbCkcbdXLxEQwplzBuketu8.roa (hash: ICxmeO8sKOHBNxGY+QBiOEBZtjuLr7p+A8Gk+MkpD0A=)
8: sZ98wzbaCbcgCl57ynzA9q3aONU.roa (hash: fn9gWlz+VvCaVIUVntul6QXxN7d9tjP7+yKVdYb3aLg=)
9: uCmthxTnbqdkSLFGPv0UNVxzqDY.asa (hash: TNBaBUAmHIyFe5yNbVfJyI5tV+81P/QpUH3D7yPhDjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:15:e1:2b:1f:bd:ab:c7:1b:c1:a4:e7:5d:86:27:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f1d0dbe093c722350618f4045c25ba94317f87
Validity
Not Before: Mar 25 13:01:24 2026 GMT
Not After : Mar 26 13:01:24 2026 GMT
Subject: CN=645ddf0838a02ee04b1ae327f7323804fac5b9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fa:b0:65:5d:07:f0:29:95:28:d9:b8:22:c1:
24:cf:b8:c7:39:b2:d1:67:30:5f:7e:81:f6:8a:52:
5f:5a:77:b5:75:dd:8b:d5:0a:02:53:97:97:33:18:
50:52:13:30:58:d2:47:ff:e5:b6:ee:fb:5b:60:a3:
c0:3f:bb:dd:35:7e:ed:01:03:8a:f3:d1:33:3e:38:
92:82:e7:d6:0f:14:d4:46:ad:54:f6:90:e6:d5:0d:
bd:2b:c0:22:ca:db:14:bb:02:b0:95:17:5f:db:13:
d3:52:e2:2f:62:da:02:3d:d6:b8:b2:69:07:ef:fa:
01:69:62:fc:09:b3:2f:15:30:bf:a5:05:a0:b7:5f:
96:a9:5c:44:c6:6f:b7:21:eb:06:2d:ce:0d:07:82:
78:db:fe:6f:20:3a:06:ff:b1:c3:ce:c3:66:a3:df:
ae:78:48:a5:cb:ff:c9:ca:cb:ee:b2:c1:14:99:1c:
f3:3c:b2:1e:ff:88:90:07:af:62:6e:61:ba:1f:27:
66:d8:63:b7:f9:e1:4e:b6:4d:2a:e5:61:ed:a7:a1:
77:c4:00:f5:70:e5:8b:a8:c9:0f:35:5d:f1:53:a9:
a4:f4:92:1d:d5:ce:b2:13:12:c9:f7:16:03:50:34:
86:88:2f:b9:21:d6:98:6e:fd:2c:51:7a:d5:45:09:
47:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5D:DF:08:38:A0:2E:E0:4B:1A:E3:27:F7:32:38:04:FA:C5:B9:F0
X509v3 Authority Key Identifier:
keyid:10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a4:c4:a2:ba:80:41:f4:27:16:20:94:9f:da:9e:b0:43:fd:
8b:d8:af:40:89:59:78:36:6b:4e:04:d5:80:cd:81:5d:de:73:
12:62:d1:c8:6b:4d:3d:35:83:0e:1b:fb:a0:20:ae:75:88:4f:
6a:06:77:0e:d0:20:e9:67:e4:4e:e5:07:91:85:f6:fc:1d:91:
ec:e3:58:4c:c6:9e:69:89:7d:ee:8c:5f:37:00:c6:29:19:77:
f5:d8:7c:4f:2a:c3:c5:4e:96:8a:b5:1c:b7:39:23:40:e3:be:
e8:a6:bb:d4:63:14:35:63:a7:d7:04:53:a2:6c:c8:e6:a8:08:
7d:9b:30:dc:fc:84:a1:b6:5f:f6:90:1a:71:67:e7:2b:22:61:
b5:be:e4:40:d5:3b:e4:35:78:f4:d4:1f:de:17:a9:fd:1f:bb:
20:b4:51:5b:66:59:d1:37:f2:bc:0f:0f:ed:12:35:07:8a:df:
b3:e5:85:1e:d0:f6:bd:8f:5a:d3:dc:e8:f0:1b:a6:d4:e8:fc:
0d:7b:e4:06:a5:d3:69:5d:de:af:bf:2f:28:4c:e2:92:08:3e:
80:2a:45:f1:88:ca:a3:aa:45:63:57:65:a8:cd:c8:b4:34:28:
6f:a1:bc:5f:89:98:2a:ac:c5:c5:0c:da:7b:90:27:bd:35:84:
f0:03:85:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:21:13 2026 by rpki-client