Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
File: EdJ3EZBuQdC_164BvAo40-eeJgE.mft (raw, json)
Hash identifier: 0mTg/5S19EjotAzTnBeOTX4101bcsfUb+bmTme7K3fE=
Subject key identifier: 36:B4:3B:2D:46:04:1D:D1:E7:F6:36:3F:67:2F:DD:DE:07:6C:0D:83
Authority key identifier: 11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01
Certificate issuer: /CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
Certificate serial: 01A1393683A09D0C9670D95C3ABD8C7A14E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
Manifest number: 1AA5
Signing time: Wed 14 Oct 2026 07:00:36 +0000
Manifest this update: Wed 14 Oct 2026 07:00:36 +0000
Manifest next update: Thu 15 Oct 2026 07:00:36 +0000
Files and hashes: 1: EdJ3EZBuQdC_164BvAo40-eeJgE.crl (hash: jbe46ZVqL1UXcyibVSPP2+dMgAVDRQk8cfrzaP2Tm1Y=)
2: gXTGqs4LKJz0Vrtvliei4acD1Ew.roa (hash: p/wSJPqOIsg3ZzxrAAFzNgFBQSzliYRj4Gqn0szjKSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:36:83:a0:9d:0c:96:70:d9:5c:3a:bd:8c:7a:14:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
Validity
Not Before: Oct 14 07:00:36 2026 GMT
Not After : Oct 15 07:00:36 2026 GMT
Subject: CN=36b43b2d46041dd1e7f6363f672fddde076c0d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2c:08:81:7f:10:8c:9b:3c:5a:a3:73:2a:a6:
57:39:4a:5e:80:9d:ef:f8:74:05:c7:6f:15:bc:16:
48:61:37:62:07:5d:25:44:6e:7b:f8:1c:ff:6a:dd:
71:91:af:a4:ef:1c:1a:21:55:55:8c:8d:f5:57:b3:
64:ef:a6:b1:04:96:b1:2b:9a:85:e3:42:b1:2e:7d:
5f:b9:91:20:ae:8c:b0:e0:4c:df:7d:98:2b:91:9f:
a1:18:09:97:be:0c:22:0e:90:a7:5d:cc:64:f6:ee:
01:e0:95:b4:72:0c:91:a3:39:58:b1:85:79:b1:97:
4c:32:be:f1:23:b3:5f:67:68:aa:a3:40:5e:95:47:
23:1c:7f:78:8e:42:b4:e6:82:45:92:79:07:ea:5c:
a1:c3:13:56:16:90:ae:09:9b:db:1d:89:42:98:29:
7f:d4:d1:9b:e3:61:44:d0:2c:83:2c:25:59:6a:ff:
9c:0e:a5:61:fa:69:73:79:77:90:45:0e:38:d8:82:
ce:ea:0d:ad:1a:9f:9c:74:e8:a2:d3:6b:e8:97:da:
0c:6b:4e:9b:86:85:6a:5d:cd:18:df:ff:86:8a:90:
be:0d:04:b3:65:c9:90:61:1b:54:7d:ce:3c:01:37:
44:9b:0b:70:7e:03:8e:8b:44:0e:e7:f0:7d:75:3c:
be:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B4:3B:2D:46:04:1D:D1:E7:F6:36:3F:67:2F:DD:DE:07:6C:0D:83
X509v3 Authority Key Identifier:
keyid:11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:18:cf:5c:f6:09:f7:f0:fd:eb:6f:91:1c:bc:a5:96:e3:01:
8b:b9:7a:bc:85:42:66:c0:4c:5e:94:eb:ba:87:fc:18:08:3d:
d5:af:69:5c:3e:6a:82:4c:b8:2c:12:49:e2:25:95:7d:5c:f4:
04:99:fc:bb:f1:1e:59:15:6c:23:9f:f3:61:05:af:fb:24:8c:
60:3e:47:9f:b2:e5:f2:9d:13:2c:6b:bb:a6:1a:08:2d:83:cd:
dd:5b:a1:bc:10:31:51:c5:c7:13:bd:a3:ac:a8:33:16:c9:7d:
39:0c:d7:13:3d:8d:91:23:dd:80:6a:37:5a:08:4a:62:38:3c:
e1:c6:25:06:90:e9:ee:b8:84:ed:af:ef:35:c5:06:28:d8:1d:
f0:c7:81:08:bf:e6:22:7b:2e:74:24:50:68:b5:79:7c:38:cd:
7f:f7:46:35:47:7c:ba:8e:8a:d0:5e:c8:90:76:62:58:e7:1f:
8b:df:ed:20:61:9f:05:c7:64:47:46:ca:9c:57:55:9a:8c:22:
28:b4:1c:dd:bc:48:8d:7a:0f:34:59:7f:7c:f0:e9:38:f7:c6:
03:13:5f:ac:05:78:09:57:8d:02:0a:a3:71:7a:93:a0:7b:c1:
04:5b:c3:f1:9f:19:42:a3:16:64:64:7e:e1:ee:9a:fd:99:e8:
21:99:97:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE5NoOgnQyWcNlcOr2MehTpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZDI3NzExOTA2ZTQxZDBiZmQ3YWUwMWJjMGEzOGQzZTc5
ZTI2MDEwHhcNMjYxMDE0MDcwMDM2WhcNMjYxMDE1MDcwMDM2WjAzMTEwLwYDVQQD
EygzNmI0M2IyZDQ2MDQxZGQxZTdmNjM2M2Y2NzJmZGRkZTA3NmMwZDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyywIgX8QjJs8WqNzKqZXOUpegJ3v
+HQFx28VvBZIYTdiB10lRG57+Bz/at1xka+k7xwaIVVVjI31V7Nk76axBJaxK5qF
40KxLn1fuZEgroyw4EzffZgrkZ+hGAmXvgwiDpCnXcxk9u4B4JW0cgyRozlYsYV5
sZdMMr7xI7NfZ2iqo0BelUcjHH94jkK05oJFknkH6lyhwxNWFpCuCZvbHYlCmCl/
1NGb42FE0CyDLCVZav+cDqVh+mlzeXeQRQ442ILO6g2tGp+cdOii02vol9oMa06b
hoVqXc0Y3/+GipC+DQSzZcmQYRtUfc48ATdEmwtwfgOOi0QO5/B9dTy+AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDa0Oy1GBB3R5/Y2P2cv3d4HbA2DMB8GA1UdIwQY
MBaAFBHSdxGQbkHQv9euAbwKONPnniYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWRKM0VaQnVRZENfMTY0QnZBbzQwLWVlSmdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi83NWFkNjctNmY0OC00OWM1LWJmNGEt
ZmFhNzQxMjdkYzc4LzEvRWRKM0VaQnVRZENfMTY0QnZBbzQwLWVlSmdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi83NWFkNjctNmY0OC00OWM1LWJmNGEtZmFhNzQxMjdkYzc4
LzEvRWRKM0VaQnVRZENfMTY0QnZBbzQwLWVlSmdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxjPXPYJ
9/D962+RHLylluMBi7l6vIVCZsBMXpTruof8GAg91a9pXD5qgky4LBJJ4iWVfVz0
BJn8u/EeWRVsI5/zYQWv+ySMYD5Hn7Ll8p0TLGu7phoILYPN3VuhvBAxUcXHE72j
rKgzFsl9OQzXEz2NkSPdgGo3WghKYjg84cYlBpDp7riE7a/vNcUGKNgd8MeBCL/m
InsudCRQaLV5fDjNf/dGNUd8uo6K0F7IkHZiWOcfi9/tIGGfBcdkR0bKnFdVmowi
KLQc3bxIjXoPNFl/fPDpOPfGAxNfrAV4CVeNAgqjcXqToHvBBFvD8Z8ZQqMWZGR+
4e6a/ZnoIZmXoQ==
-----END CERTIFICATE-----
Generated at Wed Oct 14 11:55:13 2026 by rpki-client