Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft
File: EdGfiLDcG4kCVNuUqbYgRta-eUs.mft (raw, json)
Hash identifier: bW9q/KzgEjYjV+GJmgVJ4zdk+ezbq0zK3u0ZCsFZPOY=
Subject key identifier: CE:84:05:01:28:FD:31:E9:45:C0:28:D7:37:D4:41:7F:2E:58:47:05
Authority key identifier: 11:D1:9F:88:B0:DC:1B:89:02:54:DB:94:A9:B6:20:46:D6:BE:79:4B
Certificate issuer: /CN=11d19f88b0dc1b890254db94a9b62046d6be794b
Certificate serial: 019D97AB16E3F0183226128559BF18280D74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdGfiLDcG4kCVNuUqbYgRta-eUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft
Manifest number: 0E0D
Signing time: Thu 16 Apr 2026 19:01:05 +0000
Manifest this update: Thu 16 Apr 2026 19:01:05 +0000
Manifest next update: Fri 17 Apr 2026 19:01:05 +0000
Files and hashes: 1: EdGfiLDcG4kCVNuUqbYgRta-eUs.crl (hash: NjQyFZ4lucYtZRE8lbREywZ3jAVkMtR92QF/x/KmLcg=)
2: YLaRX-nsqRWCtPec2Dv5Q_k5OhQ.roa (hash: 5033rgrhup6n7WpdXD6+8ygWTQrZT3eRPIezPH3qoAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdGfiLDcG4kCVNuUqbYgRta-eUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:ab:16:e3:f0:18:32:26:12:85:59:bf:18:28:0d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d19f88b0dc1b890254db94a9b62046d6be794b
Validity
Not Before: Apr 16 19:01:05 2026 GMT
Not After : Apr 17 19:01:05 2026 GMT
Subject: CN=ce84050128fd31e945c028d737d4417f2e584705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:42:b0:a2:79:72:7e:61:4a:57:cd:5a:c8:7b:
be:30:ec:40:a4:87:cc:7b:0e:6a:d8:d2:98:8a:f0:
6b:22:6d:ad:52:5c:e2:46:08:14:00:8b:88:42:ff:
da:ce:2a:30:62:c9:b3:a7:9e:87:96:b4:fe:a5:f8:
8c:2f:8f:95:64:aa:12:b6:ad:5d:ff:92:0f:9e:cb:
b9:fa:62:64:dd:00:57:3d:b0:6a:cd:3b:80:b4:74:
87:36:b6:4d:60:6e:c2:25:5f:f8:97:f9:b4:23:03:
04:6b:48:fc:42:7b:f8:83:43:74:b6:70:f3:d9:f9:
27:42:13:7d:fe:3c:a9:0b:93:5e:40:19:82:cc:b6:
84:ce:2f:20:f0:74:9e:5d:3e:71:d4:86:76:10:26:
99:2b:06:26:ae:da:f4:7c:ab:f1:01:d3:e9:14:ad:
e0:98:eb:85:cd:54:83:9a:93:90:23:95:27:7b:ce:
85:7e:82:76:e9:2f:1e:7b:13:e4:f3:d0:c4:93:0d:
dc:12:90:9d:3a:55:d3:7d:69:7b:17:d9:55:7f:0f:
3f:d2:5c:f5:99:d6:1b:2c:25:4c:82:10:81:a2:34:
66:88:22:c5:b6:5b:b6:cb:ca:9a:57:f6:23:8f:20:
c5:89:33:58:7d:fa:c8:90:3a:8a:dd:90:c8:9e:ea:
a4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:84:05:01:28:FD:31:E9:45:C0:28:D7:37:D4:41:7F:2E:58:47:05
X509v3 Authority Key Identifier:
keyid:11:D1:9F:88:B0:DC:1B:89:02:54:DB:94:A9:B6:20:46:D6:BE:79:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdGfiLDcG4kCVNuUqbYgRta-eUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:42:c9:76:7f:6e:46:fc:99:83:9a:b1:96:74:6f:df:d0:3a:
64:87:b3:c0:76:54:9f:5c:13:c3:11:49:2e:96:5d:b4:d2:ba:
80:27:cd:12:16:58:a7:d7:75:87:6d:94:0c:5d:ec:47:21:ac:
f5:e7:1d:cb:9f:64:17:36:1b:e4:3f:66:51:a5:3e:f4:e3:05:
98:9a:13:37:c9:28:dd:fd:12:d9:c0:f8:90:e0:3c:e6:e3:e9:
1d:d1:be:53:3b:46:54:03:7f:ae:6e:54:de:ba:42:64:11:10:
44:cf:a2:45:80:09:16:36:7d:7c:35:f8:49:86:33:63:5c:02:
02:a7:e4:7d:e6:c2:0d:82:bb:a0:9f:d2:5a:a8:d3:76:26:96:
ba:61:5c:d9:23:43:94:4b:52:e7:bb:45:f8:13:16:5d:7b:43:
86:fe:20:76:ed:c7:f5:58:b9:17:00:65:c9:14:1f:fd:45:f0:
4d:ca:7e:3d:73:79:f7:a4:e2:f3:02:05:6e:7e:87:64:1b:79:
4a:e1:97:c9:56:1b:53:75:ac:13:65:b8:22:04:66:36:ae:8f:
16:1d:1d:cb:91:cd:90:44:99:e2:ac:7c:3d:da:ae:17:7a:a5:
b6:31:49:a1:89:2a:28:27:20:53:85:d7:e9:01:90:7b:54:56:
79:60:94:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Xqxbj8BgyJhKFWb8YKA10MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZDE5Zjg4YjBkYzFiODkwMjU0ZGI5NGE5YjYyMDQ2ZDZi
ZTc5NGIwHhcNMjYwNDE2MTkwMTA1WhcNMjYwNDE3MTkwMTA1WjAzMTEwLwYDVQQD
EyhjZTg0MDUwMTI4ZmQzMWU5NDVjMDI4ZDczN2Q0NDE3ZjJlNTg0NzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0KwonlyfmFKV81ayHu+MOxApIfM
ew5q2NKYivBrIm2tUlziRggUAIuIQv/aziowYsmzp56HlrT+pfiML4+VZKoStq1d
/5IPnsu5+mJk3QBXPbBqzTuAtHSHNrZNYG7CJV/4l/m0IwMEa0j8Qnv4g0N0tnDz
2fknQhN9/jypC5NeQBmCzLaEzi8g8HSeXT5x1IZ2ECaZKwYmrtr0fKvxAdPpFK3g
mOuFzVSDmpOQI5Une86FfoJ26S8eexPk89DEkw3cEpCdOlXTfWl7F9lVfw8/0lz1
mdYbLCVMghCBojRmiCLFtlu2y8qaV/YjjyDFiTNYffrIkDqK3ZDInuqktQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6EBQEo/THpRcAo1zfUQX8uWEcFMB8GA1UdIwQY
MBaAFBHRn4iw3BuJAlTblKm2IEbWvnlLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWRHZmlMRGNHNGtDVk51VXFiWWdSdGEtZVVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85Yjc4M2MtOWY1OS00Njk2LTgyYzQt
NDhiNDk1NWYwNjAwLzEvRWRHZmlMRGNHNGtDVk51VXFiWWdSdGEtZVVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS85Yjc4M2MtOWY1OS00Njk2LTgyYzQtNDhiNDk1NWYwNjAw
LzEvRWRHZmlMRGNHNGtDVk51VXFiWWdSdGEtZVVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeELJdn9u
RvyZg5qxlnRv39A6ZIezwHZUn1wTwxFJLpZdtNK6gCfNEhZYp9d1h22UDF3sRyGs
9ecdy59kFzYb5D9mUaU+9OMFmJoTN8ko3f0S2cD4kOA85uPpHdG+UztGVAN/rm5U
3rpCZBEQRM+iRYAJFjZ9fDX4SYYzY1wCAqfkfebCDYK7oJ/SWqjTdiaWumFc2SND
lEtS57tF+BMWXXtDhv4gdu3H9Vi5FwBlyRQf/UXwTcp+PXN596Ti8wIFbn6HZBt5
SuGXyVYbU3WsE2W4IgRmNq6PFh0dy5HNkESZ4qx8PdquF3qltjFJoYkqKCcgU4XX
6QGQe1RWeWCUSw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:44:35 2026 by rpki-client