Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
File: EPt5C_XsxPQgY7C5YKmU95kClQs.mft (raw, json)
Hash identifier: r1/6EvEQQoh4yhUuIE/OAPvrjWaZE4TflGDkFq+kcvQ=
Subject key identifier: 39:2A:DA:1F:2F:4F:01:F9:12:8F:9F:98:60:ED:D9:C3:B6:94:9F:2E
Authority key identifier: 10:FB:79:0B:F5:EC:C4:F4:20:63:B0:B9:60:A9:94:F7:99:02:95:0B
Certificate issuer: /CN=10fb790bf5ecc4f42063b0b960a994f79902950b
Certificate serial: 019FA7BD3C21DFE55F1504A5F652689AD647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
Manifest number: 026F
Signing time: Tue 28 Jul 2026 08:00:24 +0000
Manifest this update: Tue 28 Jul 2026 08:00:24 +0000
Manifest next update: Wed 29 Jul 2026 08:00:24 +0000
Files and hashes: 1: EPt5C_XsxPQgY7C5YKmU95kClQs.crl (hash: IezitHACTWHdvcNbNEvQX8Oct5/nF2fPd9w/uiohIFw=)
2: QlWvHkFefgt8b65GtnQ9BWdmuEA.asa (hash: 742qjyA1AawGih0s10BDQYzxDeEAV9mVKYVyfwrup1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:3c:21:df:e5:5f:15:04:a5:f6:52:68:9a:d6:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10fb790bf5ecc4f42063b0b960a994f79902950b
Validity
Not Before: Jul 28 08:00:24 2026 GMT
Not After : Jul 29 08:00:24 2026 GMT
Subject: CN=392ada1f2f4f01f9128f9f9860edd9c3b6949f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6b:2f:d1:72:a3:95:ef:c1:5d:88:30:e4:86:
56:78:52:40:e6:ee:02:72:8b:21:a3:e3:0f:06:5b:
50:8a:21:63:a3:47:56:37:8d:e0:58:06:d8:dd:e7:
43:e2:91:e6:b5:96:82:ab:86:92:0a:89:ad:ff:d8:
45:60:2b:ba:1c:ef:d9:6a:8d:aa:ed:8f:de:0f:6d:
2a:e2:de:bf:5a:bb:2a:c2:49:59:bb:d1:a5:ea:2c:
6d:d2:bd:05:0a:84:f7:13:a4:1a:9e:f5:eb:cc:dc:
35:cf:0e:de:ad:b7:1c:11:da:a8:47:18:a8:97:59:
ab:70:6f:87:6c:39:be:70:78:ea:99:3e:90:26:da:
2d:3f:13:a5:6d:e6:94:46:b0:f5:d0:e7:f2:e3:10:
4b:df:ee:44:46:e9:6b:ca:34:32:34:41:07:e9:4f:
71:c3:5c:73:31:fd:11:63:53:82:12:dc:86:1d:34:
ad:c8:52:52:14:ab:2d:bc:43:aa:f0:0a:22:3c:c9:
46:a1:bc:68:a8:1f:81:04:2c:46:17:9a:41:4e:88:
df:54:01:3d:fa:fd:9b:1a:fa:47:40:d0:74:34:b2:
51:dc:59:96:52:21:51:c9:82:a7:19:0f:54:41:3f:
7e:ba:20:c6:6c:4c:9d:0b:1f:cb:e4:ff:5f:57:0b:
0d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2A:DA:1F:2F:4F:01:F9:12:8F:9F:98:60:ED:D9:C3:B6:94:9F:2E
X509v3 Authority Key Identifier:
keyid:10:FB:79:0B:F5:EC:C4:F4:20:63:B0:B9:60:A9:94:F7:99:02:95:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:5a:f4:22:28:43:1c:cd:65:32:b2:d9:4d:84:bf:12:0d:2c:
3f:8d:58:77:6b:9b:ba:ba:42:2a:75:93:79:01:4b:12:7a:68:
ff:41:f7:85:ba:5b:b1:29:d3:3c:bd:ff:be:ba:eb:97:56:3b:
b8:3b:61:b2:ca:b2:b8:88:1c:16:12:5e:0c:87:3b:d2:79:88:
b9:75:25:50:63:19:fb:45:28:c4:f4:80:2a:81:26:99:06:7e:
04:b3:af:68:72:f2:72:cb:7a:e2:b5:63:1b:27:bd:ce:d2:43:
e0:67:3e:ec:1c:d0:52:2a:b2:14:34:e2:c4:a0:71:1f:a8:36:
cb:a5:ce:bc:84:cf:82:0b:02:f8:65:47:67:c8:cc:a6:f3:f3:
c2:28:f2:d8:06:44:02:5c:18:7b:ea:44:36:36:11:c4:22:61:
38:dc:70:71:56:f2:f6:1b:e5:24:52:31:42:78:44:e4:53:fb:
df:29:a5:58:c2:ce:62:b6:11:5c:35:29:99:62:40:38:2c:af:
d2:c2:ec:bf:41:06:a6:cb:53:a7:1d:d1:03:a6:b0:6e:b0:40:
a7:bd:2e:ac:10:16:77:c6:8b:92:23:af:2e:96:77:78:cf:e1:
4b:70:53:f6:38:d9:ba:60:5f:5f:ad:bf:7f:63:e9:0e:bd:e1:
c0:6b:95:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:56:31 2026 by rpki-client