Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
File: EPm9HHFv0ulaydYQddcJYhroBgA.mft (raw, json)
Hash identifier: BHG5DB4lhHP+SzuOWnPZ6owj3s7ZP8C+a1jzlnFNSug=
Subject key identifier: 47:7A:E0:64:1F:31:44:C2:53:CD:BA:9A:11:AB:D7:10:48:5A:D5:52
Authority key identifier: 10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00
Certificate issuer: /CN=10f9bd1c716fd2e95ac9d61075d709621ae80600
Certificate serial: 019DA3781B213341656517BF9DC52C766033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
Manifest number: 0B05
Signing time: Sun 19 Apr 2026 02:00:50 +0000
Manifest this update: Sun 19 Apr 2026 02:00:50 +0000
Manifest next update: Mon 20 Apr 2026 02:00:50 +0000
Files and hashes: 1: EPm9HHFv0ulaydYQddcJYhroBgA.crl (hash: XW1FqFP56BqsbbajQQsxGhuXX8OzgrkiLakXEoZAnn8=)
2: yfoSU4MQI1IIA9Yj3zamcPUf7K4.roa (hash: fzqLa9/pLczJAubnxnbiM1yIch9oKlX3jK2XbY433q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:1b:21:33:41:65:65:17:bf:9d:c5:2c:76:60:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f9bd1c716fd2e95ac9d61075d709621ae80600
Validity
Not Before: Apr 19 02:00:50 2026 GMT
Not After : Apr 20 02:00:50 2026 GMT
Subject: CN=477ae0641f3144c253cdba9a11abd710485ad552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:86:f0:fe:e0:18:78:eb:91:b8:25:4b:b7:16:
48:76:b8:2a:c9:d5:b8:00:6d:1e:43:72:4e:b5:52:
6d:fc:00:b6:f5:dc:f8:6d:2a:1a:81:76:ab:f2:15:
42:f3:e7:c0:f4:f3:da:c8:3e:43:9c:18:96:84:60:
38:13:e7:2d:33:90:19:44:b3:d9:bc:d2:a7:04:15:
bc:23:41:90:b1:d8:28:f5:2c:a2:53:65:10:90:c6:
cc:ec:c1:99:f3:db:ae:12:a9:47:eb:7f:0b:2b:75:
03:87:fc:51:57:3e:16:f5:f5:9b:e3:8f:34:e2:22:
36:f7:1a:f1:61:2f:ec:33:ce:08:74:ed:b0:04:b1:
58:41:82:1b:21:0d:c2:73:34:e6:d0:93:1c:96:b1:
06:e6:d6:b9:06:8f:84:ef:59:6a:b5:9a:5c:83:31:
4d:0a:16:52:74:2c:eb:d2:e9:67:11:52:26:cc:83:
64:df:ca:88:b4:0b:f6:32:b7:f1:a3:cd:cd:ed:f8:
dd:20:7f:18:de:9e:2d:b1:a9:d9:05:9a:0e:7c:13:
1f:15:56:3f:8e:89:55:7b:8c:6c:07:99:6b:63:aa:
bf:0e:66:e0:00:6a:10:7a:27:8c:69:aa:c0:cd:3c:
7c:d6:0e:ac:c0:c3:a1:b2:98:18:05:9a:8e:ab:4e:
a6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7A:E0:64:1F:31:44:C2:53:CD:BA:9A:11:AB:D7:10:48:5A:D5:52
X509v3 Authority Key Identifier:
keyid:10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ee:ec:26:6b:39:84:af:86:0e:b0:ab:34:71:0a:ad:b5:2b:
ec:da:aa:2b:6f:a3:cb:7f:49:93:21:2f:ff:c8:6e:d6:1a:8f:
a6:7f:75:7b:b0:c2:b7:17:a4:df:74:2a:0f:0b:65:95:d2:2d:
f7:4a:59:81:bf:3b:5e:32:e6:c1:af:ed:d7:be:59:fe:8a:f2:
60:55:1f:d5:c4:bc:bd:33:ea:6d:37:e4:b5:97:22:f8:66:7a:
c6:fb:ed:d5:3c:5c:bc:09:e3:77:fd:d3:5e:ac:4a:95:5d:b5:
fd:3b:13:4c:22:75:58:80:0e:9b:7f:1a:93:be:51:fb:49:10:
22:dc:76:59:48:b2:3a:90:43:c0:f8:4d:84:d6:7b:ac:aa:ea:
cc:c0:ac:3e:e7:ab:10:3d:c8:21:23:da:8e:1d:92:17:93:14:
f7:ea:fe:55:80:0d:97:62:7f:60:8d:db:97:3a:ec:c4:23:ad:
18:07:ae:37:c4:4f:56:51:d5:0d:b1:ba:8d:47:be:0f:8e:fd:
8c:90:3f:82:ca:69:42:f6:fa:81:0a:1b:0d:c7:d1:00:ad:1e:
5c:10:00:8f:36:a7:65:5a:e1:a0:d7:14:8c:c1:39:3c:e3:88:
ec:8c:7b:64:bf:a1:a2:db:d1:ee:75:8a:b2:80:af:68:64:af:
33:e8:4a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:16:09 2026 by rpki-client