Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
File: EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft (raw, json)
Hash identifier: pM52zFytj+BNCoyKM5VqFRBI4VomWV2JViLW/d1LLlk=
Subject key identifier: 46:F7:A7:3E:CA:36:10:E2:DC:02:E3:FE:26:A7:22:C9:D2:08:59:E3
Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Certificate serial: 01A0C10CD018590C39604350A62E6707D2C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
Manifest number: 1A64
Signing time: Sun 20 Sep 2026 23:00:37 +0000
Manifest this update: Sun 20 Sep 2026 23:00:37 +0000
Manifest next update: Mon 21 Sep 2026 23:00:37 +0000
Files and hashes: 1: EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl (hash: OBZMlp24XOkVQZW6Cx8PtGMvZZ9SI0QeKpt+fuBTOy4=)
2: cLW-rzfQIYF9Ip7K5f5c4fVxT_0.roa (hash: kTIIud4RXHLbaB+fDQvEDDvRSMMhyUI+tRML2r+ctcI=)
3: efptImD_TpkXZ0HvFXCba5sHj3E.roa (hash: wBmqE8ohvjFZts4QshaEu8H7uZA38AN2a3RRcLvuOgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0c:d0:18:59:0c:39:60:43:50:a6:2e:67:07:d2:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Validity
Not Before: Sep 20 23:00:37 2026 GMT
Not After : Sep 21 23:00:37 2026 GMT
Subject: CN=46f7a73eca3610e2dc02e3fe26a722c9d20859e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e8:00:8c:a8:29:7b:99:44:dd:74:3c:ce:dd:
4d:2c:3b:2d:9d:97:af:51:86:ae:4e:c6:ea:c2:0d:
5f:aa:1e:e4:81:ff:bc:0d:12:d0:1e:f1:09:89:1f:
31:95:f1:14:61:c1:d7:96:42:c9:e7:a4:c4:d0:42:
36:39:7e:91:6f:5f:27:2b:7e:47:ea:09:24:2d:41:
85:35:67:e1:cc:66:e9:ac:d3:2e:d6:dc:6f:21:c5:
51:46:f3:da:b5:f5:a9:2c:02:23:76:b1:ae:1e:59:
ea:a8:a6:50:8b:9d:60:a8:7c:6b:6b:4a:90:b6:60:
f4:f3:fe:56:f6:4d:fa:89:43:4e:21:b7:d5:36:a8:
9e:da:db:36:f5:59:ce:aa:2a:b0:8a:ed:72:61:ae:
d1:1f:de:c2:0c:8f:82:00:ab:86:8e:b9:27:50:75:
16:dc:8c:12:6d:92:ef:69:c7:db:32:f7:d9:25:04:
1c:b0:c4:be:ab:3d:9e:9f:6c:ec:b3:2d:f8:d4:7a:
e1:2d:f9:6b:e5:a3:fd:9f:0a:c6:39:32:e6:d6:66:
58:ad:80:ac:e1:1a:9e:89:65:92:f1:e6:07:ee:35:
5c:c8:f9:1e:11:c9:be:33:4d:62:2d:af:91:24:6b:
85:88:21:cf:cf:dc:d7:0b:6d:1e:db:cb:fe:39:6a:
c8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F7:A7:3E:CA:36:10:E2:DC:02:E3:FE:26:A7:22:C9:D2:08:59:E3
X509v3 Authority Key Identifier:
keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:01:3b:dc:c3:75:70:08:83:46:c0:88:31:c1:f7:eb:27:d9:
c6:91:25:c7:82:86:46:1d:31:a2:db:c2:72:53:9b:da:00:72:
d4:9b:cb:7e:ea:a5:81:d6:43:99:a1:d1:66:37:87:3f:a4:c6:
3c:54:0f:25:0c:10:d6:81:19:7f:39:48:37:12:9f:91:31:71:
67:3b:43:bd:9e:5a:26:64:42:9f:80:57:55:b4:cb:10:6e:91:
0e:4e:dd:fa:4b:4b:e7:42:38:4b:51:64:12:53:d8:47:ab:18:
d6:ca:c2:8a:dc:e8:1e:fe:bf:46:75:a7:ba:82:f3:48:bf:92:
0f:a5:ef:bb:75:de:17:0b:c8:1b:2c:d4:72:f9:2d:a2:96:b8:
01:f7:c2:31:28:99:ac:4f:e3:ba:3f:93:87:cc:0d:1a:bc:91:
82:9d:df:36:65:66:a1:7c:05:d5:b5:d2:46:48:5b:54:94:22:
af:6c:ad:e2:a7:f2:11:49:28:0a:c2:ed:32:ad:27:48:14:46:
ca:2e:02:84:5e:04:e0:f4:6e:58:5e:0d:e4:ef:cc:78:f8:75:
e0:e2:93:db:12:50:07:c4:2b:ae:21:2d:b3:6d:34:bf:7a:e6:
60:f3:ca:2f:96:ce:c8:d2:80:40:7b:48:81:97:4f:69:4b:65:
4f:b8:80:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:10:07 2026 by rpki-client