Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
File: EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft (raw, json)
Hash identifier: JxCblOd2QCnsGftTsamPfyAayMWw4kXULIA1VMm1K0s=
Subject key identifier: DE:70:F1:B7:29:FD:84:01:27:53:FA:1B:01:81:32:66:A3:53:CD:B1
Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Certificate serial: 01A0C4E99B2A11B4059DE38FC2432356FEC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 17:00:38 +0000
Manifest this update: Mon 21 Sep 2026 17:00:38 +0000
Manifest next update: Tue 22 Sep 2026 17:00:38 +0000
Files and hashes: 1: EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl (hash: qiX6/tAxC9+qrzdXPvZdNRvgsOu/N2AK/iN0NxW1OCM=)
2: cLW-rzfQIYF9Ip7K5f5c4fVxT_0.roa (hash: kTIIud4RXHLbaB+fDQvEDDvRSMMhyUI+tRML2r+ctcI=)
3: efptImD_TpkXZ0HvFXCba5sHj3E.roa (hash: wBmqE8ohvjFZts4QshaEu8H7uZA38AN2a3RRcLvuOgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:9b:2a:11:b4:05:9d:e3:8f:c2:43:23:56:fe:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Validity
Not Before: Sep 21 17:00:38 2026 GMT
Not After : Sep 22 17:00:38 2026 GMT
Subject: CN=de70f1b729fd84012753fa1b01813266a353cdb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0b:66:af:4d:6a:74:4a:e1:30:bb:2f:bb:30:
68:ab:20:b9:59:24:24:65:be:47:51:17:55:1b:0d:
19:5f:2d:53:8a:46:99:32:15:ac:f5:e2:c4:00:ab:
13:bf:b2:32:0d:95:45:80:d1:e4:29:ef:31:c2:67:
5a:c7:f2:98:72:5a:70:f3:95:58:56:88:27:43:f7:
be:9f:4c:b2:03:b6:51:dd:c2:bc:58:a1:c2:74:83:
01:a8:27:af:32:f8:8d:71:ff:08:98:ca:4a:28:7c:
db:84:98:13:3b:95:19:69:e8:d7:41:0c:7f:3c:da:
51:2c:f2:4c:4b:05:61:9c:9f:b9:e5:eb:ce:04:6a:
a7:d5:c7:a1:2a:cf:a0:58:ec:61:c7:12:1b:09:9d:
f8:61:e1:ed:22:65:79:49:05:35:ce:0f:ee:11:ce:
79:e3:47:ad:e4:de:13:ca:1a:e5:cd:2f:12:a8:4a:
f5:cb:da:c0:8a:b0:f5:94:6f:a9:5a:68:7e:1b:b0:
f9:e5:53:b8:25:94:0e:77:87:0f:7c:15:cf:fa:81:
7b:bc:db:7c:45:70:ed:7c:f9:f6:a2:2d:d2:1c:b6:
11:99:f5:60:6c:a6:49:ea:c0:00:01:7c:c8:ca:1c:
81:2b:25:85:c3:8f:77:a4:ab:1b:4d:a6:d2:57:c6:
f8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:70:F1:B7:29:FD:84:01:27:53:FA:1B:01:81:32:66:A3:53:CD:B1
X509v3 Authority Key Identifier:
keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f7:f1:a4:6b:8e:04:6e:e1:df:27:97:0b:08:a2:cf:f6:e8:
88:eb:8d:a8:57:ef:a4:e1:e8:09:fc:4b:e1:70:e6:33:1f:e8:
99:17:01:14:3c:61:9a:1a:61:0b:7a:fa:25:25:7a:58:c5:85:
da:fc:3e:5e:bb:04:89:16:06:16:18:91:7e:f6:0a:d0:19:95:
5c:58:f5:4b:a5:74:b4:26:93:21:7e:66:0e:80:c2:30:d8:fd:
83:e9:54:fb:b8:af:4e:be:b1:bf:c4:bb:d7:ba:8c:63:f8:bb:
b8:fb:d1:64:cf:73:22:a5:2c:56:4c:eb:45:ec:ba:c7:b0:1a:
c3:8a:80:a4:59:f3:48:49:9f:d8:0d:97:9f:3e:be:8d:24:1b:
7d:ba:05:66:32:fd:1d:35:62:a4:e8:1e:2c:93:01:7b:78:b2:
48:1c:3b:7f:62:cd:82:3a:93:08:e2:4a:7a:e0:27:e3:72:3b:
c9:3b:91:28:10:ae:b6:21:2a:6a:ea:7a:ce:cb:dd:37:18:ae:
3a:1f:6d:9f:4d:e8:e7:b0:da:17:b3:5d:09:ae:2f:fe:88:df:
d0:5e:d3:78:f7:2d:dd:8a:b8:8a:01:b7:30:56:8c:9a:24:16:
96:51:11:97:24:ec:6f:f1:cb:cb:f3:cb:82:d4:21:40:15:03:
8c:17:49:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:10:33 2026 by rpki-client