Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
File: EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft (raw, json)
Hash identifier: zu5xz3MqA/YZoH8spK+7+Rs08hrPj4Ujniuxjc767to=
Subject key identifier: 01:19:54:D9:E3:D1:1C:E1:A5:6C:EE:E7:E6:D7:DB:6A:40:C9:D9:46
Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Certificate serial: 019F91DB2E7E9FB8CF919982552A9D19668F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 02:01:28 +0000
Manifest this update: Fri 24 Jul 2026 02:01:28 +0000
Manifest next update: Sat 25 Jul 2026 02:01:28 +0000
Files and hashes: 1: EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl (hash: cuNEMS4MaI9mFrAnnOVhdSaVeXJWZcKtHTkFcs7/nCo=)
2: cLW-rzfQIYF9Ip7K5f5c4fVxT_0.roa (hash: kTIIud4RXHLbaB+fDQvEDDvRSMMhyUI+tRML2r+ctcI=)
3: efptImD_TpkXZ0HvFXCba5sHj3E.roa (hash: wBmqE8ohvjFZts4QshaEu8H7uZA38AN2a3RRcLvuOgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:2e:7e:9f:b8:cf:91:99:82:55:2a:9d:19:66:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Validity
Not Before: Jul 24 02:01:28 2026 GMT
Not After : Jul 25 02:01:28 2026 GMT
Subject: CN=011954d9e3d11ce1a56ceee7e6d7db6a40c9d946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:90:8a:9f:a7:82:94:dd:7b:32:7d:e4:fe:a0:
15:e2:88:90:40:d4:35:b2:04:6f:0d:41:a1:5f:69:
00:33:2a:30:a0:f6:b1:60:20:31:08:a8:c1:e3:42:
dc:50:9b:e6:1b:73:c1:4d:bf:ed:ca:44:00:ef:4e:
45:a7:97:b8:f3:88:e4:3e:34:46:99:87:95:57:4a:
10:a4:7f:1b:de:f4:1d:e2:bc:83:9e:52:bf:e6:0f:
eb:b8:9b:67:b4:4b:17:55:46:7c:b6:64:57:9f:c4:
d8:54:dc:67:84:05:b5:ba:a0:5a:a0:ee:e7:2a:35:
c0:a9:79:94:00:63:e9:23:a3:d3:6b:5b:f3:73:93:
9f:83:fd:59:0a:db:98:d2:0e:3a:7b:33:48:71:31:
a2:f3:0f:05:91:d9:eb:63:92:e9:56:16:a2:c2:97:
c3:d2:31:60:33:56:74:c3:69:03:f8:49:e7:80:f5:
d5:ff:43:7b:fa:ca:09:5d:4d:b4:a4:d5:a5:56:9e:
11:94:02:56:78:98:4b:85:13:c0:4d:0b:50:35:25:
e4:6f:27:fc:5d:c7:9d:1b:f6:cf:34:b3:9f:b3:49:
db:f6:8a:b2:98:92:ab:ff:45:f1:a6:f9:8c:91:01:
3e:1c:6d:3c:31:97:2f:07:a6:d0:ba:4f:cc:ef:1f:
89:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:19:54:D9:E3:D1:1C:E1:A5:6C:EE:E7:E6:D7:DB:6A:40:C9:D9:46
X509v3 Authority Key Identifier:
keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:7e:c3:44:bc:37:08:14:b9:94:fc:1e:e2:bd:45:f7:55:70:
aa:a2:aa:99:3c:3c:19:6a:36:83:4d:c8:74:38:d5:4e:88:bf:
1c:51:03:a3:4b:6a:d3:01:61:28:34:3b:3d:59:8c:f6:35:43:
95:83:97:57:75:64:24:73:de:a0:8f:cd:59:c7:b1:bd:83:28:
e8:f9:f0:6a:04:65:06:0a:9e:09:3f:36:49:13:b1:58:aa:bb:
3f:1e:ad:49:9c:8c:db:24:47:ba:b7:69:cc:e7:7e:58:35:41:
c1:9f:7d:dc:a1:cb:19:13:9c:5b:f5:97:34:be:7c:18:c4:6a:
d5:74:ca:72:01:31:59:1f:f8:2b:41:96:bc:6a:46:23:13:38:
92:56:9b:62:bb:f7:8f:2c:97:1e:5f:5f:d4:95:da:dc:78:25:
d5:09:d7:e0:15:b4:d0:72:88:79:17:1f:d5:07:ab:f4:69:d7:
d0:d3:89:8b:42:e9:a8:f5:43:0c:cd:ee:46:9a:e3:0a:bd:4f:
fa:26:7b:fe:6f:6c:53:8c:35:38:84:e7:64:56:93:37:d9:fd:
84:17:e4:22:ac:66:8c:e8:6c:57:d1:4f:4a:5e:99:2d:23:d5:
6c:44:18:12:e0:7d:20:79:31:14:85:0f:15:d6:3e:33:18:1e:
81:d0:4b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:02:47 2026 by rpki-client