Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
File: EPt5C_XsxPQgY7C5YKmU95kClQs.mft (raw, json)
Hash identifier: VkJ/AfU4/k6o15kCmTSkfXPO3KPcgdjl377tkM/FpdE=
Subject key identifier: 5A:A7:3B:58:03:FE:F8:52:BA:26:03:D9:E2:75:73:A2:7E:97:92:5C
Authority key identifier: 10:FB:79:0B:F5:EC:C4:F4:20:63:B0:B9:60:A9:94:F7:99:02:95:0B
Certificate issuer: /CN=10fb790bf5ecc4f42063b0b960a994f79902950b
Certificate serial: 019D26964E0552601C9CE3D25C927903467A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
Manifest number: 0122
Signing time: Wed 25 Mar 2026 20:01:17 +0000
Manifest this update: Wed 25 Mar 2026 20:01:17 +0000
Manifest next update: Thu 26 Mar 2026 20:01:17 +0000
Files and hashes: 1: EPt5C_XsxPQgY7C5YKmU95kClQs.crl (hash: 0tRNL7XhBw5oeDvufEyhZSjUlRlWi7RMayWEpPwLmeI=)
2: WRzFAQD96PiFm7zmXWmL1m9WLI4.asa (hash: dndJ9DGWxNZLozvP8wqqSXTlQ6oOsIMlnknEpXmZxaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:4e:05:52:60:1c:9c:e3:d2:5c:92:79:03:46:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10fb790bf5ecc4f42063b0b960a994f79902950b
Validity
Not Before: Mar 25 20:01:17 2026 GMT
Not After : Mar 26 20:01:17 2026 GMT
Subject: CN=5aa73b5803fef852ba2603d9e27573a27e97925c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:78:93:ed:9d:6c:84:16:67:d5:79:18:bc:8d:
a9:82:44:f8:2a:6d:5c:06:f9:ad:6e:20:2c:ee:45:
21:13:fd:66:5e:3c:e3:f3:d5:45:d9:40:31:3e:1e:
d6:20:4e:a2:f9:e9:86:5d:f7:cf:76:95:38:a4:36:
46:16:8f:e0:84:53:20:50:b1:35:eb:0f:55:ba:fd:
c0:47:53:56:1b:72:fe:2e:a2:41:99:fb:b8:84:d2:
81:0c:19:71:58:61:e0:0e:9f:5a:a6:48:a1:bc:2f:
4a:14:14:1f:7a:32:6b:93:ea:2d:92:84:ad:a3:82:
d7:1c:16:bc:13:0d:36:30:50:6d:e3:bc:f2:6d:46:
da:63:3a:0a:ab:82:3d:cd:67:96:26:a8:fc:3e:17:
d6:52:86:fc:d9:26:d6:af:d1:ec:fb:7d:41:1b:da:
63:f0:50:bf:46:13:42:ae:c3:05:11:b5:68:d3:5d:
5d:d1:04:5a:0c:14:8d:1a:69:4f:54:e2:d2:8a:b7:
1f:36:d0:6c:78:70:d7:b0:5c:25:c6:a7:b8:7e:8e:
56:ec:8f:f8:9e:d4:b6:76:3d:c2:4d:66:a2:ed:65:
ab:3e:a8:4b:6d:2d:07:30:f9:17:2d:b8:10:6d:b8:
c4:54:4f:4f:41:8a:25:3e:68:89:d6:37:aa:d1:5a:
ef:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A7:3B:58:03:FE:F8:52:BA:26:03:D9:E2:75:73:A2:7E:97:92:5C
X509v3 Authority Key Identifier:
keyid:10:FB:79:0B:F5:EC:C4:F4:20:63:B0:B9:60:A9:94:F7:99:02:95:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b6:ff:15:5f:9d:37:a8:7e:d6:03:8c:4b:93:0a:4d:a0:9e:
13:ba:4e:9c:1a:43:fe:94:b1:73:8e:ed:59:34:c0:89:78:07:
74:e5:1c:a7:7f:24:90:1d:d0:1d:32:66:8a:55:08:fa:07:b8:
87:cf:08:21:ad:75:8d:bf:a8:03:7e:f6:ca:73:d7:cf:a1:10:
68:91:31:e9:68:1c:4b:3d:d7:0e:a0:5a:99:2f:ec:dd:9c:a8:
a2:a3:65:d3:07:74:57:75:3d:3b:b4:34:ca:a3:3f:4d:31:21:
4c:42:12:03:61:5e:10:f1:0b:7d:96:6b:5c:66:ff:df:e8:0d:
07:e9:0f:b4:e5:ba:8e:f8:bc:cd:74:89:c8:77:20:ad:48:73:
3f:fe:ff:2b:91:d9:f6:a9:02:19:71:91:b1:f2:12:8e:c5:26:
50:76:a9:35:50:80:03:86:5c:26:89:c8:aa:89:3b:62:16:f5:
6e:ea:67:a3:42:c3:bd:2a:8c:4a:d2:bf:f7:14:a0:49:ad:e9:
68:cf:ad:70:a3:ff:6b:21:e9:8e:c8:95:57:04:27:d1:e2:18:
9a:21:41:bf:8b:38:e9:fe:f6:96:3b:ae:9a:66:34:19:3a:93:
a4:06:6e:bc:87:33:c2:aa:e1:8e:d0:26:3f:70:de:f2:32:52:
56:1a:57:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlk4FUmAcnOPSXJJ5A0Z6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZmI3OTBiZjVlY2M0ZjQyMDYzYjBiOTYwYTk5NGY3OTkw
Mjk1MGIwHhcNMjYwMzI1MjAwMTE3WhcNMjYwMzI2MjAwMTE3WjAzMTEwLwYDVQQD
Eyg1YWE3M2I1ODAzZmVmODUyYmEyNjAzZDllMjc1NzNhMjdlOTc5MjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxniT7Z1shBZn1XkYvI2pgkT4Km1c
BvmtbiAs7kUhE/1mXjzj89VF2UAxPh7WIE6i+emGXffPdpU4pDZGFo/ghFMgULE1
6w9Vuv3AR1NWG3L+LqJBmfu4hNKBDBlxWGHgDp9apkihvC9KFBQfejJrk+otkoSt
o4LXHBa8Ew02MFBt47zybUbaYzoKq4I9zWeWJqj8PhfWUob82SbWr9Hs+31BG9pj
8FC/RhNCrsMFEbVo011d0QRaDBSNGmlPVOLSircfNtBseHDXsFwlxqe4fo5W7I/4
ntS2dj3CTWai7WWrPqhLbS0HMPkXLbgQbbjEVE9PQYolPmiJ1jeq0VrvYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqnO1gD/vhSuiYD2eJ1c6J+l5JcMB8GA1UdIwQY
MBaAFBD7eQv17MT0IGOwuWCplPeZApULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVB0NUNfWHN4UFFnWTdDNVlLbVU5NWtDbFFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8xMjcyNDAtN2ZhNC00ZDhhLWI4YTgt
MjI4OTRkZTE0Y2JiLzEvRVB0NUNfWHN4UFFnWTdDNVlLbVU5NWtDbFFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8xMjcyNDAtN2ZhNC00ZDhhLWI4YTgtMjI4OTRkZTE0Y2Ji
LzEvRVB0NUNfWHN4UFFnWTdDNVlLbVU5NWtDbFFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABrb/FV+d
N6h+1gOMS5MKTaCeE7pOnBpD/pSxc47tWTTAiXgHdOUcp38kkB3QHTJmilUI+ge4
h88IIa11jb+oA372ynPXz6EQaJEx6WgcSz3XDqBamS/s3ZyooqNl0wd0V3U9O7Q0
yqM/TTEhTEISA2FeEPELfZZrXGb/3+gNB+kPtOW6jvi8zXSJyHcgrUhzP/7/K5HZ
9qkCGXGRsfISjsUmUHapNVCAA4ZcJonIqok7Yhb1bupno0LDvSqMStK/9xSgSa3p
aM+tcKP/ayHpjsiVVwQn0eIYmiFBv4s46f72ljuummY0GTqTpAZuvIczwqrhjtAm
P3De8jJSVhpXVA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:13 2026 by rpki-client