Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
File: EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft (raw, json)
Hash identifier: fw4i0ggJ1slZw3jQ+V0dPui5rAeGPpc0N+x3XjocSEU=
Subject key identifier: 14:8E:27:49:89:AA:B1:CA:1E:8A:10:1C:70:9D:2E:E2:0C:B6:94:1F
Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Certificate serial: 019D27DF94E1404D100238FCCCC6631A7416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:00:57 +0000
Manifest this update: Thu 26 Mar 2026 02:00:57 +0000
Manifest next update: Fri 27 Mar 2026 02:00:57 +0000
Files and hashes: 1: EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl (hash: 4alWkMku7h7c8k0Rw79XZRqzGn5Xhz9pwZUxQxAbKGA=)
2: cLW-rzfQIYF9Ip7K5f5c4fVxT_0.roa (hash: kTIIud4RXHLbaB+fDQvEDDvRSMMhyUI+tRML2r+ctcI=)
3: efptImD_TpkXZ0HvFXCba5sHj3E.roa (hash: wBmqE8ohvjFZts4QshaEu8H7uZA38AN2a3RRcLvuOgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:94:e1:40:4d:10:02:38:fc:cc:c6:63:1a:74:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Validity
Not Before: Mar 26 02:00:57 2026 GMT
Not After : Mar 27 02:00:57 2026 GMT
Subject: CN=148e274989aab1ca1e8a101c709d2ee20cb6941f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f0:30:f3:c7:25:4e:4d:f4:98:e7:3e:0a:fe:
d4:f4:24:2a:cf:ef:c4:62:43:fa:50:3d:c8:17:fe:
96:d0:82:85:b6:ef:b7:55:49:5a:06:b7:e8:b4:82:
e3:dd:3d:4b:18:cf:d4:aa:a6:f3:bb:ac:69:80:47:
3d:42:40:64:3d:53:30:5c:d1:69:08:d7:1c:52:d3:
51:46:52:20:81:01:61:d8:a3:49:91:31:16:35:34:
fb:1d:57:e7:62:38:3a:ff:60:21:10:d4:63:48:25:
c7:63:53:b5:fb:00:e9:13:eb:29:c3:68:e9:1e:4a:
39:42:aa:9e:df:fd:12:54:9f:e2:ab:48:d5:4c:fa:
6f:90:2b:e8:ea:a2:18:2d:6f:44:af:14:a1:fe:2f:
c3:f0:ea:5b:5d:a2:42:95:59:de:e2:e5:93:87:03:
34:68:de:c1:f3:ce:fa:41:05:f9:e6:08:5f:27:30:
80:f1:44:ed:0d:17:04:0b:6c:23:d6:60:cf:53:b1:
08:83:2d:92:54:a4:b3:e7:ce:aa:ea:94:ac:1b:ba:
76:12:9f:0c:b9:59:09:5a:f7:fb:de:22:a1:6c:b5:
cc:17:47:40:89:d5:de:6d:a6:2f:de:3b:6e:05:27:
d6:75:ae:18:07:f9:2b:93:5c:94:95:82:d4:f9:c3:
67:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8E:27:49:89:AA:B1:CA:1E:8A:10:1C:70:9D:2E:E2:0C:B6:94:1F
X509v3 Authority Key Identifier:
keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:4a:2c:62:4c:f7:a8:d1:6c:30:e0:56:40:f2:be:76:9e:93:
8a:f2:8b:8e:06:c4:b9:76:50:b3:0f:76:7f:6f:87:74:8d:69:
f5:77:85:ad:d7:16:8b:6f:19:82:93:1e:2e:50:86:6f:5c:78:
a4:0b:e5:fd:df:bf:77:99:a4:97:3f:73:2a:d8:56:9a:64:97:
cd:55:98:70:f6:ef:32:1e:07:ae:85:11:9b:86:1f:24:9a:23:
d2:29:4a:cb:8e:11:a2:80:c2:f6:20:00:5e:71:4e:26:8e:95:
4a:de:7d:e9:17:a0:10:30:13:6c:5b:46:84:63:2b:f4:fc:cc:
3a:aa:fb:ef:e2:dd:3b:a4:2d:f8:56:b4:63:27:63:bf:f6:43:
52:17:cb:5f:20:63:39:60:6a:cf:bb:b7:22:cd:b0:47:0c:35:
6c:b4:6d:62:99:f9:39:02:e9:67:1f:bd:81:58:18:91:40:bd:
f0:7f:38:3a:13:e2:2a:1c:de:e3:5b:a2:d6:65:c3:ce:e4:cb:
bf:3c:9b:56:6c:81:1b:f0:71:64:b8:03:d1:04:f6:6a:67:ef:
51:c9:b8:46:fe:c4:d7:5d:36:ce:f4:4a:0f:ef:80:9e:05:d7:
c7:95:d1:2d:dd:40:c3:d9:d0:91:04:03:9f:44:69:5b:88:e2:
cc:1c:e7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:04:47 2026 by rpki-client