Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
File: EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft (raw, json)
Hash identifier: HTIDuRrrNgjNDUmQzyERMgu1S3P3cr6Bl7NSTIVDbIo=
Subject key identifier: B7:E5:CA:4C:B9:B4:37:C3:70:F1:AC:25:1E:E8:09:F4:2A:5A:7B:68
Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Certificate serial: 019EBF5A3F8FF59B8AA5C762B8281C934173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 05:00:23 +0000
Manifest this update: Sat 13 Jun 2026 05:00:23 +0000
Manifest next update: Sun 14 Jun 2026 05:00:23 +0000
Files and hashes: 1: EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl (hash: +CgfzVXu3GsDCsvLOMS6ztYEzwCvIz8Jw1y1ai+Q8U8=)
2: cLW-rzfQIYF9Ip7K5f5c4fVxT_0.roa (hash: kTIIud4RXHLbaB+fDQvEDDvRSMMhyUI+tRML2r+ctcI=)
3: efptImD_TpkXZ0HvFXCba5sHj3E.roa (hash: wBmqE8ohvjFZts4QshaEu8H7uZA38AN2a3RRcLvuOgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:3f:8f:f5:9b:8a:a5:c7:62:b8:28:1c:93:41:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Validity
Not Before: Jun 13 05:00:23 2026 GMT
Not After : Jun 14 05:00:23 2026 GMT
Subject: CN=b7e5ca4cb9b437c370f1ac251ee809f42a5a7b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:13:de:47:c7:cf:a9:1a:2a:f2:88:ce:c5:
d4:24:df:48:d3:10:a9:05:e5:d2:cf:f2:0d:9f:60:
20:c1:b4:5c:ae:3e:b9:86:89:72:e8:e6:65:9a:bb:
33:71:cf:b4:04:70:be:70:6f:be:54:36:e4:0c:f8:
36:eb:31:df:c8:a5:99:9c:6e:27:c7:39:0b:49:6a:
dd:42:48:15:7f:56:a3:95:66:e5:50:1c:52:5d:e7:
b8:a6:9f:61:7d:24:1f:0c:19:de:21:4c:1a:3a:aa:
bf:61:e1:fb:5e:ec:86:38:81:56:1b:13:57:a9:6c:
cd:be:07:e7:4d:71:b8:fb:05:77:72:da:df:e1:14:
64:d7:23:e9:78:ec:f5:7b:b8:e9:0e:79:30:44:3c:
d5:6b:3d:65:8c:c4:70:d8:2f:85:ab:37:4c:ae:7c:
e3:d8:dc:fa:a6:c7:2a:70:4c:05:e1:86:34:5f:94:
da:43:d5:58:3c:7d:70:04:e5:77:bf:30:3b:d4:47:
3f:08:70:12:63:a0:bd:5f:5d:16:e1:41:58:03:b9:
2d:13:63:a7:43:47:fb:8b:04:24:b9:d6:69:8f:d1:
8d:b4:02:ba:ec:76:35:44:9f:73:9b:3b:62:81:d7:
b1:df:6a:0d:ff:3c:6b:9a:89:af:ab:77:ea:dd:2d:
16:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E5:CA:4C:B9:B4:37:C3:70:F1:AC:25:1E:E8:09:F4:2A:5A:7B:68
X509v3 Authority Key Identifier:
keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:8d:53:08:45:19:41:1e:d4:97:be:c1:c1:89:74:4c:5c:ef:
08:b3:ea:69:19:64:06:4e:2e:6b:cc:54:cf:7a:a5:dd:f5:fe:
d3:9c:98:4d:d6:a5:96:dd:1c:3c:bb:38:9a:b2:40:a6:22:73:
fa:e5:cf:39:b7:08:d3:d2:3a:1d:5d:fa:f4:47:76:dd:ff:83:
91:ee:62:46:07:66:8c:8f:50:34:b0:c3:9c:0e:86:ae:ad:e6:
b8:5f:bd:1a:04:42:22:5c:90:09:eb:94:b0:83:20:e7:95:10:
2f:f9:c9:b5:fa:fe:a3:d2:3b:56:51:55:73:e8:80:45:27:76:
c5:68:a7:8b:cb:9f:47:8b:03:76:41:96:35:45:a6:d5:36:eb:
8f:e3:c5:10:5f:c8:a0:94:fc:b5:84:4c:5d:31:8f:3c:23:93:
1e:6a:0f:c1:cc:40:39:3c:e9:5f:0c:a2:21:7c:83:c5:07:47:
fe:27:3f:42:79:62:1d:34:b9:49:9e:b3:1b:38:b6:05:68:68:
ca:c2:3c:e0:3d:69:80:a7:8c:a8:54:72:5e:b6:57:82:58:a3:
16:15:80:dc:fb:60:77:5b:eb:78:60:32:bf:96:16:31:27:1c:
6b:e1:81:f7:0a:51:c5:88:1c:1c:55:9b:e9:fd:0a:29:9d:5a:
b7:e4:8c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:52:31 2026 by rpki-client