Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
File: edEPco1kmadJrlkC6PqIPxrdRRc.mft (raw, json)
Hash identifier: PLYlPje0/s5m9aqvqtDjoW6KT/Bo7ow8/zntciUX+bE=
Subject key identifier: 7A:AD:24:35:40:42:D4:F4:CF:BC:FB:8B:60:4C:62:38:16:A1:F3:00
Authority key identifier: 79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17
Certificate issuer: /CN=79d10f728d6499a749ae5902e8fa883f1add4517
Certificate serial: 019D270412819AF240BAB584598A6079901D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
Manifest number: 13A8
Signing time: Wed 25 Mar 2026 22:01:11 +0000
Manifest this update: Wed 25 Mar 2026 22:01:11 +0000
Manifest next update: Thu 26 Mar 2026 22:01:11 +0000
Files and hashes: 1: cA3aNPgSvOncWgLq6bBFasg5G0s.roa (hash: QhdH/rusqlTfEwtA92QrkPPt5X2EYpI1lbZsumMOaWg=)
2: edEPco1kmadJrlkC6PqIPxrdRRc.crl (hash: X9Mtn41tNlC7h0DKIFXspQEeCRrh1AWfdKpJFkwgkxM=)
3: lrcggll5IwEWJaXAEarEFjeln_4.roa (hash: A3enJWPIF9/BoTUOABHy2zjKfwPohwCjBujb09CAGVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:12:81:9a:f2:40:ba:b5:84:59:8a:60:79:90:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d10f728d6499a749ae5902e8fa883f1add4517
Validity
Not Before: Mar 25 22:01:11 2026 GMT
Not After : Mar 26 22:01:11 2026 GMT
Subject: CN=7aad24354042d4f4cfbcfb8b604c623816a1f300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:46:20:9b:e2:3e:97:23:85:b6:78:d8:db:58:
f7:27:49:27:4a:db:ea:f0:ef:76:41:95:be:86:1d:
14:dd:e5:df:2a:61:86:a0:d4:c9:28:76:6e:05:49:
0e:7c:00:ea:69:73:4e:24:c7:20:37:e5:75:14:2a:
45:80:4f:ab:80:5c:36:ac:82:ff:e1:8c:37:51:36:
8f:e1:27:07:e0:50:f0:54:f9:ae:8e:f8:f4:9f:db:
b5:23:90:80:41:ef:e6:54:8a:04:81:63:a8:35:f8:
fc:79:00:24:79:88:40:b5:b4:d0:d1:45:55:58:e4:
83:f0:0f:cd:91:29:19:90:9b:7c:4b:3e:92:b4:bb:
c1:80:18:7f:bf:1e:ab:a3:3e:8b:87:74:be:c7:23:
92:48:0c:5c:01:e5:6e:2d:e6:f1:bb:ac:34:a4:72:
2f:bc:c4:28:1a:d8:a3:2b:69:0f:51:9a:a4:00:9f:
66:01:35:35:bb:d9:83:5e:28:a7:c5:6d:8f:0f:7e:
46:b1:ba:f8:3a:8e:35:08:dc:f5:86:46:cb:ff:c0:
7c:84:4c:09:9b:b1:69:e3:47:f6:cb:f5:d2:2e:e7:
ee:33:91:1e:ac:c8:2f:9c:2c:97:74:cf:a8:8b:1c:
64:ca:78:33:90:8c:ea:76:e8:1e:3b:59:79:10:c8:
e0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AD:24:35:40:42:D4:F4:CF:BC:FB:8B:60:4C:62:38:16:A1:F3:00
X509v3 Authority Key Identifier:
keyid:79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1b:e7:cb:29:7c:cb:b2:eb:a1:72:06:d1:e3:3a:1c:c2:5c:
5d:91:1f:65:62:35:1f:21:58:86:3d:76:be:de:19:78:7c:14:
91:16:4f:36:40:ce:51:ba:00:28:d5:d8:bf:4b:a0:4a:cb:23:
31:95:0c:98:93:a9:b7:f6:6c:d6:57:59:73:74:ca:ee:3c:d7:
90:08:32:bb:8c:e0:93:31:db:de:c9:96:1b:a4:63:99:97:e2:
8d:e8:08:1d:49:10:b4:14:75:af:de:2e:61:4d:4e:37:22:a0:
18:33:db:d1:36:ab:31:85:5d:91:fa:d4:81:2e:7f:db:d0:3c:
29:40:6a:49:11:ba:76:8d:25:9e:64:bf:aa:90:ea:20:1c:48:
3e:30:e7:fd:3e:ea:e2:5f:5a:26:9c:90:ae:93:c9:f5:9e:dd:
49:40:68:63:95:65:b0:89:10:ba:e3:dc:7c:7a:66:d6:bf:e1:
e6:dd:5d:c3:82:13:d2:77:90:1b:40:e6:47:35:76:ed:b9:de:
2b:d5:55:45:17:41:c9:01:a7:f9:79:53:f4:89:e9:87:06:90:
c2:fe:1f:f8:74:d8:13:c8:9e:b8:83:c3:4f:d4:91:55:82:ea:
ff:0d:54:5e:59:89:32:8c:31:e4:1f:63:e4:2c:2d:02:e3:8c:
37:17:9c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:55:44 2026 by rpki-client