Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
File: EPt5C_XsxPQgY7C5YKmU95kClQs.mft (raw, json)
Hash identifier: RDF5bVBGWJbELNeg61BbF12ZmTQdCrLyWdnCF3NAkYk=
Subject key identifier: A3:90:AA:94:9C:EF:5E:8E:4B:4F:33:F6:CC:55:8C:38:15:46:3D:70
Authority key identifier: 10:FB:79:0B:F5:EC:C4:F4:20:63:B0:B9:60:A9:94:F7:99:02:95:0B
Certificate issuer: /CN=10fb790bf5ecc4f42063b0b960a994f79902950b
Certificate serial: 019E1BD951B5909D6CB83E1391859F81C4B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
Manifest number: 01A1
Signing time: Tue 12 May 2026 11:01:27 +0000
Manifest this update: Tue 12 May 2026 11:01:27 +0000
Manifest next update: Wed 13 May 2026 11:01:27 +0000
Files and hashes: 1: EPt5C_XsxPQgY7C5YKmU95kClQs.crl (hash: k4klbuiSATMiVnB+6o/cz4yirQXzERm6k3GaZf6+PWY=)
2: WRzFAQD96PiFm7zmXWmL1m9WLI4.asa (hash: dndJ9DGWxNZLozvP8wqqSXTlQ6oOsIMlnknEpXmZxaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:51:b5:90:9d:6c:b8:3e:13:91:85:9f:81:c4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10fb790bf5ecc4f42063b0b960a994f79902950b
Validity
Not Before: May 12 11:01:27 2026 GMT
Not After : May 13 11:01:27 2026 GMT
Subject: CN=a390aa949cef5e8e4b4f33f6cc558c3815463d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4b:23:8f:8d:f3:19:be:ae:c5:17:57:3a:41:
bf:11:63:8c:18:6c:52:3a:2b:f2:38:d6:22:1e:18:
8c:84:8e:8f:f8:53:2f:dd:85:3a:10:47:18:f6:d4:
54:0e:df:e4:97:43:7c:60:21:3f:65:2a:f7:95:2e:
b3:98:60:65:e5:e1:b9:65:69:38:b6:cc:a5:db:66:
db:21:a2:ae:4c:43:24:68:6a:ac:a9:ea:c9:5e:ae:
f8:99:b9:7a:35:c2:d1:5c:24:fd:cf:b1:87:a1:cd:
6c:c8:42:9a:72:6b:ed:31:f7:41:48:98:29:eb:0a:
61:c6:71:dd:00:c2:50:e5:9d:72:8b:ce:f2:1a:33:
e6:f3:86:d7:61:cd:69:82:6b:3f:99:14:b8:cb:9e:
b0:cd:2f:51:22:52:08:9c:36:53:f2:4e:f6:84:7f:
19:c0:4e:54:4f:10:de:c1:da:27:23:c3:70:08:ab:
ae:09:a3:67:91:42:55:e9:d5:ad:d1:60:ef:56:05:
4b:c1:56:4b:ec:a7:69:36:1c:2e:e5:bd:eb:66:e4:
ef:09:6b:43:e0:74:c1:27:7b:ea:be:26:61:29:d0:
1a:fd:4a:80:b5:1e:a4:d3:f6:99:da:42:2e:a5:f7:
14:91:4b:77:98:da:84:26:67:bb:99:6f:88:b7:73:
a4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:90:AA:94:9C:EF:5E:8E:4B:4F:33:F6:CC:55:8C:38:15:46:3D:70
X509v3 Authority Key Identifier:
keyid:10:FB:79:0B:F5:EC:C4:F4:20:63:B0:B9:60:A9:94:F7:99:02:95:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:23:40:62:c9:22:cd:cd:30:36:f9:f7:83:db:87:c2:ba:15:
fb:f6:9c:9c:9a:98:8a:1b:4f:d7:0b:67:b4:f4:9d:2d:07:a3:
a3:3a:c9:b0:eb:44:75:d4:2b:14:da:fc:da:7b:d1:67:7a:dd:
4b:75:27:86:a0:a7:b7:0f:b3:79:b6:93:cf:9b:5f:cd:cc:69:
27:50:49:66:f9:d3:21:43:68:99:c5:51:bd:bc:36:c2:80:d9:
8d:63:d8:2d:a1:a5:37:f5:32:00:45:a9:a9:65:18:17:93:6f:
30:11:90:5c:35:44:72:d0:a8:54:5f:f8:15:e8:d7:eb:40:12:
9e:fa:fa:2f:f4:20:7e:ae:f9:95:67:bf:a2:f4:c2:d7:28:63:
c5:c3:4d:37:0a:6a:ce:ae:ef:69:5d:8c:f8:75:03:5a:58:dc:
c3:c6:54:c2:b8:b0:df:f1:ce:34:c9:30:44:55:8d:30:45:3f:
50:5e:25:58:53:e2:14:94:5a:c6:51:52:94:3e:e1:d6:98:1d:
5c:a4:a4:da:c3:05:80:67:56:48:16:a7:e9:88:9a:7f:50:cf:
e6:72:8a:c5:8c:41:6e:c2:d0:1b:de:d8:03:31:11:c2:13:aa:
11:a4:b2:83:f5:20:2c:72:cb:ba:3c:af:ba:cf:21:6b:f4:72:
4b:6b:52:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:22:42 2026 by rpki-client