Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
File: EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft (raw, json)
Hash identifier: rZQou5UhWiZCL26yXLcpGcYqlYMyp7FROXWDXRjf9zw=
Subject key identifier: DB:C3:87:DF:BE:0E:C5:1F:79:ED:72:8E:1C:99:F6:F1:4A:D6:63:12
Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Certificate serial: 019FAAF586373C033F8D4283E015C6EE036B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 23:00:45 +0000
Manifest this update: Tue 28 Jul 2026 23:00:45 +0000
Manifest next update: Wed 29 Jul 2026 23:00:45 +0000
Files and hashes: 1: EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl (hash: tYfDVe/u6184mdQAhA99QqM1tcRvsYAp/dJeu5xcOb4=)
2: cLW-rzfQIYF9Ip7K5f5c4fVxT_0.roa (hash: kTIIud4RXHLbaB+fDQvEDDvRSMMhyUI+tRML2r+ctcI=)
3: efptImD_TpkXZ0HvFXCba5sHj3E.roa (hash: wBmqE8ohvjFZts4QshaEu8H7uZA38AN2a3RRcLvuOgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:86:37:3c:03:3f:8d:42:83:e0:15:c6:ee:03:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Validity
Not Before: Jul 28 23:00:45 2026 GMT
Not After : Jul 29 23:00:45 2026 GMT
Subject: CN=dbc387dfbe0ec51f79ed728e1c99f6f14ad66312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:23:bb:6d:8a:58:89:b2:6b:58:59:a9:07:da:
2b:6f:0c:3a:50:3e:d5:b5:ea:20:11:61:38:62:eb:
8f:d7:36:5b:38:69:d3:c0:4b:1a:05:03:15:a0:5e:
03:a9:8d:5c:20:52:14:5f:5e:2a:23:ee:77:b3:e8:
aa:1a:7c:59:d5:f2:a5:60:e6:4e:1e:ef:37:8f:d8:
45:92:b2:6a:dc:61:91:76:9b:b1:5e:13:6d:96:6d:
14:17:61:21:e2:82:49:27:63:49:b8:81:5a:af:c5:
b3:b7:5b:43:af:e5:bd:9b:a8:c5:b1:78:65:81:55:
cd:78:5b:bc:79:6b:20:b5:8c:f5:a8:68:46:c8:51:
d7:2b:1b:a9:3d:6d:8e:ab:1d:53:fe:46:b1:d2:4f:
2b:f2:19:f4:8b:7b:14:b0:55:c9:fe:28:2e:9b:54:
3f:c7:85:1f:82:ac:a7:d0:f7:5f:ff:72:38:a8:f0:
08:c6:10:8d:31:e4:d8:53:6b:26:89:64:5a:57:7c:
88:7b:08:9c:a8:70:97:8d:80:be:25:b4:4e:12:f3:
9d:20:34:d9:c4:e7:a8:b5:ee:1f:83:0c:c0:b2:33:
d9:05:01:a3:4e:71:6f:ee:93:e1:77:3d:1c:27:98:
ee:fc:97:be:d0:90:fe:8b:fc:80:c0:da:65:a4:03:
f6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C3:87:DF:BE:0E:C5:1F:79:ED:72:8E:1C:99:F6:F1:4A:D6:63:12
X509v3 Authority Key Identifier:
keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a0:21:02:4e:5c:4c:7c:68:25:b4:6b:3d:9f:35:20:b7:79:
16:43:de:cb:49:7a:52:8f:2d:55:17:d3:e4:44:c6:cf:5b:65:
3e:b9:d6:ef:dd:3e:77:25:69:6b:27:18:ff:49:00:f7:06:c5:
ad:4f:e9:a7:0a:1b:63:dc:35:96:aa:3c:bf:f2:ba:cf:0d:73:
4e:1a:8a:0d:a4:08:ff:69:d4:9b:d7:f5:26:1c:e6:41:cd:a9:
86:66:73:20:c5:bb:26:51:4c:bb:22:1c:3d:51:2c:2d:1c:17:
fd:ef:87:d8:1e:b6:66:85:42:9d:73:17:92:29:01:29:9a:99:
6b:7b:fa:81:ac:34:6f:c4:b2:4c:d3:dc:9d:c3:59:99:77:9b:
d4:67:26:8e:50:21:bc:f1:21:4b:f8:f0:21:31:01:79:b7:67:
d5:d9:56:41:be:5e:f8:31:cf:9f:b7:71:c2:8a:19:34:a0:5a:
a1:62:f4:a0:ef:37:c8:81:e6:6a:62:0d:e8:55:6b:3a:83:38:
3e:40:51:cd:7a:1a:f9:a7:a3:a8:a8:74:b0:0b:a1:8e:c1:46:
47:cb:be:e3:0d:99:3a:96:9d:92:1e:1f:3b:9d:61:d7:7b:25:
2e:19:f9:43:e7:98:5d:99:e1:99:14:47:93:37:92:cd:67:b4:
57:65:a9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:10:53 2026 by rpki-client