Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
File: EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft (raw, json)
Hash identifier: 8muRSwREtYfWs+7N5mSTeGFWVc/961q6gjGsyryK4FQ=
Subject key identifier: 4C:25:7B:93:E0:C6:A3:DD:1C:20:BF:84:41:9E:44:B9:EE:D0:4B:A8
Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Certificate serial: 019DA3791599C218022491852E8F91FBA541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 02:01:54 +0000
Manifest this update: Sun 19 Apr 2026 02:01:54 +0000
Manifest next update: Mon 20 Apr 2026 02:01:54 +0000
Files and hashes: 1: EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl (hash: 7G2GkNwAnV8VEbcGhXk4Gr7IsIcEJWwRfeubtO9RpF8=)
2: cLW-rzfQIYF9Ip7K5f5c4fVxT_0.roa (hash: kTIIud4RXHLbaB+fDQvEDDvRSMMhyUI+tRML2r+ctcI=)
3: efptImD_TpkXZ0HvFXCba5sHj3E.roa (hash: wBmqE8ohvjFZts4QshaEu8H7uZA38AN2a3RRcLvuOgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:79:15:99:c2:18:02:24:91:85:2e:8f:91:fb:a5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Validity
Not Before: Apr 19 02:01:54 2026 GMT
Not After : Apr 20 02:01:54 2026 GMT
Subject: CN=4c257b93e0c6a3dd1c20bf84419e44b9eed04ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e0:37:a3:98:78:05:04:85:23:ae:77:c6:26:
0a:92:d7:de:3f:aa:16:62:e4:ed:e4:b0:0c:36:1c:
24:91:01:f7:9a:02:9c:b0:d0:cd:1f:8c:bd:79:ac:
f6:6a:75:40:17:1f:dd:95:98:dc:2e:a7:b0:f5:7c:
a6:ad:b8:85:4f:d9:3f:39:98:a8:1d:a2:a4:9c:60:
04:f6:8c:ad:da:82:fd:46:f8:9a:89:1d:fb:1b:6a:
0f:7d:0d:d3:fe:26:e2:9b:9c:4e:65:79:a6:c1:f0:
e6:69:f1:b3:07:e3:5b:7b:58:ea:5b:c8:49:c2:10:
8e:78:e2:a3:0f:da:b8:75:a3:f6:5f:36:58:41:54:
41:5c:12:b6:1f:ea:d5:9d:c7:97:c5:f3:7a:5c:ab:
1e:de:4f:64:d4:2a:c2:db:23:71:ae:0d:64:11:c2:
ac:50:48:d4:db:c0:af:8b:1e:b3:59:0b:50:78:e0:
37:9b:e0:d3:62:63:a3:14:f2:01:5f:49:91:cc:37:
ba:42:2a:7f:ab:61:5a:bb:fc:ae:b4:3f:72:d7:80:
04:d3:8c:c0:7e:2c:5c:30:d2:11:a6:b9:73:03:97:
5e:81:1b:d7:d6:45:f0:d6:30:12:b9:7e:67:17:af:
ab:50:a4:8b:7c:f6:86:ac:e0:98:f3:1d:ee:6c:1c:
64:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:25:7B:93:E0:C6:A3:DD:1C:20:BF:84:41:9E:44:B9:EE:D0:4B:A8
X509v3 Authority Key Identifier:
keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c1:af:66:ea:65:f2:b5:7a:58:fc:fd:2d:94:23:54:1a:f3:
da:5e:6a:7f:c1:9f:98:6d:4d:4e:b9:c5:06:69:2c:cf:16:26:
14:2e:cf:df:2f:92:15:36:61:89:93:8c:c0:bc:45:f0:2b:67:
db:5e:d6:ce:0c:3d:65:f6:78:f8:8f:42:7a:87:ae:9b:5e:ef:
81:28:4b:86:21:91:30:aa:f6:81:8f:c0:5e:06:b7:90:19:00:
ca:43:54:4f:34:11:a0:b6:1b:ab:05:8b:85:c9:11:ad:f8:38:
44:6d:1b:d6:46:83:53:0f:63:32:d0:9d:4c:66:c0:a7:6c:44:
f7:6f:ef:f6:73:fd:d3:cf:cc:0d:de:95:90:0c:e4:98:91:43:
0b:c4:a4:ab:54:20:87:bb:b8:e4:64:49:19:db:1c:18:71:85:
df:08:a5:7c:a2:2d:32:eb:06:0a:40:e3:dc:37:62:da:2b:00:
a2:e3:f1:86:5f:53:fc:07:73:bc:17:2b:db:5d:91:71:5c:01:
c7:b9:86:7d:b4:af:20:dc:62:19:3c:bb:d9:e0:c0:53:ae:b1:
f6:77:90:71:52:ea:2d:46:ad:2d:5d:0f:b9:f8:43:40:87:4a:
fc:e3:25:a3:7b:6f:03:ff:70:24:bc:61:1c:93:41:a5:ee:86:
64:31:08:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:32 2026 by rpki-client