Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
File: EPm9HHFv0ulaydYQddcJYhroBgA.mft (raw, json)
Hash identifier: DXDtZjJoA372+aM0QUMwj2/EOgVv4FVWyBXVdOnZpFg=
Subject key identifier: 13:CA:4B:01:05:A2:91:64:85:81:A0:72:4F:F2:B4:6F:88:09:E1:9F
Authority key identifier: 10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00
Certificate issuer: /CN=10f9bd1c716fd2e95ac9d61075d709621ae80600
Certificate serial: 019CAC46F5D760D84327B8FEFB576DB89108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
Manifest number: 0A85
Signing time: Mon 02 Mar 2026 02:00:57 +0000
Manifest this update: Mon 02 Mar 2026 02:00:57 +0000
Manifest next update: Tue 03 Mar 2026 02:00:57 +0000
Files and hashes: 1: EPm9HHFv0ulaydYQddcJYhroBgA.crl (hash: PCcBKoH3KWxEirthmQjeI8BXXVUgD7E4M02ujZzqQiE=)
2: yfoSU4MQI1IIA9Yj3zamcPUf7K4.roa (hash: fzqLa9/pLczJAubnxnbiM1yIch9oKlX3jK2XbY433q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:f5:d7:60:d8:43:27:b8:fe:fb:57:6d:b8:91:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f9bd1c716fd2e95ac9d61075d709621ae80600
Validity
Not Before: Mar 2 02:00:57 2026 GMT
Not After : Mar 3 02:00:57 2026 GMT
Subject: CN=13ca4b0105a291648581a0724ff2b46f8809e19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d2:a2:7a:32:1d:34:31:cf:cb:bb:05:dc:c7:
d9:32:78:9c:e5:1b:1c:ef:7a:b1:7a:7f:9a:5f:03:
6b:27:2c:fd:4d:43:70:db:c8:ae:44:d5:b2:0d:fa:
5c:79:77:08:3e:c3:26:81:6a:bd:c0:51:bf:0c:dd:
87:a6:ce:1c:cf:65:ed:ce:c7:60:bc:f3:2d:b1:2f:
5f:60:86:a4:9e:cc:5a:b6:b3:d9:10:69:c3:92:b3:
be:97:c9:e8:1d:e0:1b:e9:4c:1a:91:60:80:88:af:
3e:77:a7:76:fa:7b:03:7e:13:6c:3f:40:c3:e6:34:
5a:26:ea:37:06:a0:f9:9c:fa:b5:f7:84:2f:93:a6:
90:c3:10:75:66:04:8f:0b:fa:77:9e:e2:6d:54:ad:
98:84:5c:42:2f:bc:b5:d7:c0:d6:63:fa:64:bc:2c:
ac:68:15:6b:65:d0:7e:66:6c:5e:1f:7b:92:32:ba:
e9:2d:f1:e2:c4:9f:69:67:e0:31:fb:4e:a0:a5:e1:
ac:fa:36:45:cc:52:df:03:fb:c6:e4:dc:e7:6e:7b:
15:84:d1:b9:a7:c5:82:c6:20:29:d9:dc:3e:79:60:
73:bf:52:eb:3e:23:08:2b:a7:24:1d:dd:5c:89:56:
ff:af:1a:aa:dd:b7:42:0d:56:06:92:67:ed:aa:57:
7e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CA:4B:01:05:A2:91:64:85:81:A0:72:4F:F2:B4:6F:88:09:E1:9F
X509v3 Authority Key Identifier:
keyid:10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9e:86:08:e5:c3:6f:1f:b7:bd:98:67:56:ab:18:39:ae:3e:
ec:39:ef:a0:2f:40:65:5a:a8:d1:47:85:43:64:5d:05:c1:08:
c6:ee:14:d5:d6:af:38:12:23:d3:f1:42:2a:08:0c:f6:09:94:
1e:76:bd:3c:f8:6e:1b:14:f2:44:91:fa:7f:4c:2d:e0:86:2f:
e4:e6:41:c5:4f:30:e3:bc:42:5c:46:97:a0:b2:f7:59:12:f8:
20:da:0b:31:4d:5e:a9:6e:11:89:d5:45:a6:d0:df:2b:af:cd:
5c:b1:af:11:a9:fc:86:3a:09:4c:94:cc:79:38:d9:c1:5b:43:
68:e1:8c:bf:0f:80:d3:09:34:1b:4c:4d:0c:77:32:98:25:30:
a3:ab:66:2d:90:09:a9:b0:79:5a:1c:6d:f3:4b:76:62:15:45:
66:e5:86:aa:c6:ee:0e:43:f3:49:5d:b0:bc:12:e9:c6:88:67:
9b:d4:5d:f8:3f:5b:3c:27:04:2f:9e:1f:80:3d:43:7a:76:9a:
a7:ff:26:00:0c:84:64:8d:4c:20:be:22:70:5e:c3:65:a6:89:
75:a2:d9:88:eb:35:95:23:ec:06:88:03:c3:5a:75:5e:95:56:
34:4f:c3:e2:d0:9a:e4:bc:78:6c:42:8b:10:42:f9:a4:73:39:
80:08:d0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:25:45 2026 by rpki-client