Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
File: EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft (raw, json)
Hash identifier: uQubN47ss3ZYnTh5khvWI+5YaPi6Wm/MpagTPR5uryk=
Subject key identifier: 4D:7E:80:EE:27:B6:26:BB:52:B2:1F:3F:63:C7:28:96:D1:9C:C4:06
Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Certificate serial: 01A0D26E00B4041A8A774F5D91B6DD147A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 08:00:19 +0000
Manifest this update: Thu 24 Sep 2026 08:00:19 +0000
Manifest next update: Fri 25 Sep 2026 08:00:19 +0000
Files and hashes: 1: EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl (hash: yKGdjyv4g4OgKj54t1lDdT+/HzBUnJghdAWEXWxl//0=)
2: cLW-rzfQIYF9Ip7K5f5c4fVxT_0.roa (hash: kTIIud4RXHLbaB+fDQvEDDvRSMMhyUI+tRML2r+ctcI=)
3: efptImD_TpkXZ0HvFXCba5sHj3E.roa (hash: wBmqE8ohvjFZts4QshaEu8H7uZA38AN2a3RRcLvuOgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:00:b4:04:1a:8a:77:4f:5d:91:b6:dd:14:7a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Validity
Not Before: Sep 24 08:00:19 2026 GMT
Not After : Sep 25 08:00:19 2026 GMT
Subject: CN=4d7e80ee27b626bb52b21f3f63c72896d19cc406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7a:bf:36:f3:3c:72:0c:09:e4:5a:b5:66:ea:
f3:8f:01:47:53:16:19:05:d6:98:cb:1c:f3:68:72:
a7:9b:14:69:13:6d:cd:c3:50:a5:85:46:b2:71:e1:
5a:76:90:30:ae:81:01:6a:90:19:bc:1c:3c:ac:1c:
b0:ee:fc:12:94:ed:34:ca:84:e4:87:cc:32:46:75:
77:fd:86:db:9b:d3:fa:12:40:4c:12:46:d5:fa:ba:
e1:9d:b6:95:74:af:fc:29:a1:ad:0c:e2:a4:cc:8a:
ee:cf:b5:ac:a8:99:8c:c7:ee:ed:c0:b6:46:b1:aa:
b9:91:1a:ee:a3:af:e2:40:0c:72:bf:6a:26:7b:c6:
f7:a0:30:44:8a:ee:58:ac:f3:c4:b6:f0:47:54:e4:
4f:e8:84:64:7f:46:7f:7f:44:25:2a:8e:38:5d:7f:
68:4d:80:30:15:48:19:4d:78:bb:a1:d4:5a:34:a4:
8c:20:18:6b:01:67:c9:79:f0:50:5c:e6:4e:32:d2:
52:cd:1c:80:cd:b9:fb:96:96:00:b4:27:3f:df:b5:
44:ed:5b:5f:f4:90:27:2a:bf:72:8a:a7:4e:eb:72:
bf:67:6b:90:df:b1:bf:c4:32:90:86:9d:1b:c8:a8:
48:18:1b:45:07:38:d9:f3:04:fd:7e:9e:fa:a8:79:
42:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7E:80:EE:27:B6:26:BB:52:B2:1F:3F:63:C7:28:96:D1:9C:C4:06
X509v3 Authority Key Identifier:
keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:80:af:74:e9:7c:de:5c:5a:45:bc:51:a9:21:e4:42:e8:88:
20:4c:b7:c4:57:75:cd:19:11:f6:3a:0c:04:e4:8b:db:8c:65:
80:c0:2c:13:96:7f:62:fc:dd:76:2b:e4:8b:5c:21:11:b5:83:
a3:a5:65:99:40:f3:b5:92:fc:a8:0b:da:e3:f5:a1:f9:32:34:
da:50:6a:88:d9:f0:71:41:b1:24:e9:85:ce:b3:0d:2e:ea:2d:
fc:e3:b6:06:52:9f:ed:b5:9e:c9:d3:0b:ce:8d:fa:a3:1d:30:
c8:60:c5:59:03:d3:f8:51:49:40:a5:b8:0f:d5:4b:3c:fe:4c:
7b:4b:1c:38:e0:d7:d2:e0:9d:9b:4f:37:af:d6:b7:fe:30:34:
e8:7a:79:0c:11:a1:46:ab:ab:b8:40:3e:c5:c7:78:5c:aa:08:
42:8a:13:3b:27:15:ea:d5:b5:bf:b2:f8:c2:83:8a:7d:6e:9c:
db:36:24:a9:cd:c2:95:f8:5a:04:7f:c0:ed:c7:2c:35:c7:a7:
13:89:fe:07:c2:ee:4c:cb:ab:6b:96:01:9d:5b:02:05:06:58:
39:c7:ee:b5:8d:25:26:73:74:09:cb:0a:51:7f:03:e4:cb:fd:
2f:23:ad:28:3e:9f:36:26:f0:3b:4a:b7:c6:30:98:76:3c:7c:
ad:cb:8a:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSbgC0BBqKd09dkbbdFHqRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZjc3NDFjZDFhZjJiYjM0Yzg2YzczZWEzYmQ2Yzc2ZDk5
NjhkMGQwHhcNMjYwOTI0MDgwMDE5WhcNMjYwOTI1MDgwMDE5WjAzMTEwLwYDVQQD
Eyg0ZDdlODBlZTI3YjYyNmJiNTJiMjFmM2Y2M2M3Mjg5NmQxOWNjNDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3q/NvM8cgwJ5Fq1ZurzjwFHUxYZ
BdaYyxzzaHKnmxRpE23Nw1ClhUayceFadpAwroEBapAZvBw8rByw7vwSlO00yoTk
h8wyRnV3/Ybbm9P6EkBMEkbV+rrhnbaVdK/8KaGtDOKkzIruz7WsqJmMx+7twLZG
saq5kRruo6/iQAxyv2ome8b3oDBEiu5YrPPEtvBHVORP6IRkf0Z/f0QlKo44XX9o
TYAwFUgZTXi7odRaNKSMIBhrAWfJefBQXOZOMtJSzRyAzbn7lpYAtCc/37VE7Vtf
9JAnKr9yiqdO63K/Z2uQ37G/xDKQhp0byKhIGBtFBzjZ8wT9fp76qHlCCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1+gO4ntia7UrIfP2PHKJbRnMQGMB8GA1UdIwQY
MBaAFBD3dBzRryuzTIbHPqO9bHbZlo0NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVBkMEhOR3ZLN05NaHNjLW83MXNkdG1XalEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZWY3Y2UtMjVkNC00M2MxLThlYWUt
MWE2NGNmMjFhNjA0LzEvRVBkMEhOR3ZLN05NaHNjLW83MXNkdG1XalEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kZWY3Y2UtMjVkNC00M2MxLThlYWUtMWE2NGNmMjFhNjA0
LzEvRVBkMEhOR3ZLN05NaHNjLW83MXNkdG1XalEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmICvdOl8
3lxaRbxRqSHkQuiIIEy3xFd1zRkR9joMBOSL24xlgMAsE5Z/Yvzddivki1whEbWD
o6VlmUDztZL8qAva4/Wh+TI02lBqiNnwcUGxJOmFzrMNLuot/OO2BlKf7bWeydML
zo36ox0wyGDFWQPT+FFJQKW4D9VLPP5Me0scOODX0uCdm083r9a3/jA06Hp5DBGh
RquruEA+xcd4XKoIQooTOycV6tW1v7L4woOKfW6c2zYkqc3ClfhaBH/A7ccsNcen
E4n+B8LuTMura5YBnVsCBQZYOcfutY0lJnN0CcsKUX8D5Mv9LyOtKD6fNibwO0q3
xjCYdjx8rcuKwQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:40:23 2026 by rpki-client