Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
File: EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft (raw, json)
Hash identifier: bX2rcwGq5Ehp7w/AJsSriKmQmNLbmlMkhNgkLDbZETQ=
Subject key identifier: 49:47:00:1C:2D:C3:C0:D6:26:71:65:A1:A2:43:EE:7E:1A:A5:AA:49
Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Certificate serial: 019CAA58A39C59DA68795ABEEB433EBA85EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 17:01:01 +0000
Manifest this update: Sun 01 Mar 2026 17:01:01 +0000
Manifest next update: Mon 02 Mar 2026 17:01:01 +0000
Files and hashes: 1: EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl (hash: /RDuRGB6HCExYg2yQ6Bexb1pB/USx8K/dzRVVgHCzpA=)
2: cLW-rzfQIYF9Ip7K5f5c4fVxT_0.roa (hash: kTIIud4RXHLbaB+fDQvEDDvRSMMhyUI+tRML2r+ctcI=)
3: efptImD_TpkXZ0HvFXCba5sHj3E.roa (hash: wBmqE8ohvjFZts4QshaEu8H7uZA38AN2a3RRcLvuOgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:a3:9c:59:da:68:79:5a:be:eb:43:3e:ba:85:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Validity
Not Before: Mar 1 17:01:01 2026 GMT
Not After : Mar 2 17:01:01 2026 GMT
Subject: CN=4947001c2dc3c0d6267165a1a243ee7e1aa5aa49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a5:2d:e5:37:65:22:df:cc:c8:70:09:97:45:
7f:0c:75:31:1b:9f:56:83:ac:09:dc:d6:be:be:c5:
cb:ee:e9:17:b6:01:3d:af:f2:a4:d7:9c:fe:b1:15:
8e:08:93:33:9b:cc:70:64:e8:bd:27:0c:59:82:48:
5a:e7:41:ab:f2:05:db:99:38:01:2f:33:f1:20:5d:
e1:3f:ec:09:1d:f3:be:d8:3c:3c:28:a5:c0:0d:e3:
bd:cd:ae:08:f5:2a:12:9d:1f:40:7c:97:7d:38:2d:
40:fb:43:36:73:21:b6:24:06:ef:31:3e:11:e0:15:
d9:13:63:17:60:1c:c2:15:51:42:38:83:0d:64:11:
c2:86:04:29:5d:1a:0f:42:39:a3:64:5e:b4:7c:94:
d2:2e:80:b2:e6:ec:27:79:e8:58:32:55:32:81:95:
0e:1f:e3:6c:33:69:15:dd:c0:88:e1:2b:8a:f3:fa:
29:2a:ed:52:54:72:63:05:0a:58:9d:de:fd:62:8c:
1f:b8:22:10:0c:48:a6:52:72:75:21:c1:53:1e:28:
e0:eb:49:bf:da:17:cc:dd:56:bb:ae:3b:88:cb:25:
d5:ae:66:c1:97:c7:a1:e3:52:a3:2d:c3:49:fd:f3:
96:3c:89:ae:22:32:cf:89:02:e5:d8:32:8e:45:55:
81:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:47:00:1C:2D:C3:C0:D6:26:71:65:A1:A2:43:EE:7E:1A:A5:AA:49
X509v3 Authority Key Identifier:
keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:7b:e2:ab:fd:c4:5f:a1:e2:cb:55:7d:de:a8:72:34:c0:e5:
59:29:d2:a5:e2:40:b8:6d:21:35:7a:4a:96:98:be:bf:20:e6:
d2:9f:59:c6:16:22:27:fb:51:68:84:6e:93:0e:8e:14:48:f3:
ab:5e:2e:87:3d:e5:9d:49:46:3d:b4:91:76:83:e3:13:7a:ad:
f1:85:ef:f7:62:45:4f:17:6a:62:ad:12:a0:0b:65:f5:fe:8d:
30:1a:9b:12:80:e8:5d:83:51:ce:09:fa:ac:30:a6:c8:e7:0e:
4c:30:39:c2:9a:63:5e:5e:b3:1f:43:31:29:0e:f2:79:69:14:
76:59:42:f3:88:d8:9e:be:d6:10:2c:15:9f:a2:f2:c7:7d:20:
d0:72:a2:db:62:17:7e:3b:6c:96:82:6c:df:f3:00:a1:a7:d9:
a8:77:2f:23:27:8b:25:51:f7:64:07:6d:6c:96:f4:3e:e3:32:
3e:69:02:fe:5b:05:81:40:61:91:07:34:9b:18:be:3c:68:52:
e1:fe:92:4d:e0:9e:89:a4:6c:69:76:b9:00:db:a2:60:97:94:
57:75:dc:5b:3a:66:f2:a8:79:2c:60:0d:bd:86:42:38:0a:79:
ca:7f:73:f5:8d:6b:72:53:e5:35:13:f6:fb:60:c3:8c:4b:8f:
9c:0b:99:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:37 2026 by rpki-client