
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.mft
File: EdF-IEIvWbbYvS2DB8HXv9jw9YQ.mft (raw, json)
Hash identifier: SuzBeIBaAlgMU2PrRMRPHK0S+oOG5HieennYaXRpEB4=
Subject key identifier: 7D:BF:F8:93:91:2A:97:31:C9:62:C5:DC:22:F2:7F:59:0B:30:FB:EC
Authority key identifier: 11:D1:7E:20:42:2F:59:B6:D8:BD:2D:83:07:C1:D7:BF:D8:F0:F5:84
Certificate issuer: /CN=11d17e20422f59b6d8bd2d8307c1d7bfd8f0f584
Certificate serial: 019FAA875D25FC071F2E7E6A50991B9C99DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:00:25 +0000
Manifest this update: Tue 28 Jul 2026 21:00:25 +0000
Manifest next update: Wed 29 Jul 2026 21:00:25 +0000
Files and hashes: 1: EdF-IEIvWbbYvS2DB8HXv9jw9YQ.crl (hash: GsxaoSwBX9c0MqyJB0WPnAG6lJp2tDBTUq0yyMGDs5w=)
2: bVwbGhBG_CV5IoXeX_1AI4ewEyM.roa (hash: +XMoZ7qLxuL8LJi3clBJZFqP7IHlVTCAAs0BMOcjgWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:5d:25:fc:07:1f:2e:7e:6a:50:99:1b:9c:99:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d17e20422f59b6d8bd2d8307c1d7bfd8f0f584
Validity
Not Before: Jul 28 21:00:25 2026 GMT
Not After : Jul 29 21:00:25 2026 GMT
Subject: CN=7dbff893912a9731c962c5dc22f27f590b30fbec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a1:a1:6a:9b:05:37:a5:56:53:80:b6:f4:ab:
f6:8b:ab:21:b3:48:3b:3f:ac:48:8e:aa:00:f2:2c:
dd:0b:4a:5f:12:26:8b:38:68:69:bd:46:ca:4e:96:
98:b9:0a:f8:cf:70:e9:22:92:a5:70:52:aa:4a:b8:
21:cb:db:95:4a:69:12:e6:a4:17:30:69:e6:1d:71:
69:02:87:dd:79:7a:df:b0:cb:2b:f8:77:4e:c1:2a:
11:e1:b6:e3:ed:c5:f5:2d:7b:b5:2e:64:a9:94:ef:
d3:86:3a:42:11:d1:22:58:62:22:85:f1:08:74:cf:
98:df:c5:b2:1d:79:b0:f4:31:7e:43:cb:81:1f:c9:
ed:81:d0:ea:6b:19:84:61:81:d0:21:c5:06:57:ba:
c0:1d:04:2d:12:52:ca:db:60:40:39:4b:0a:e4:54:
e8:42:d5:a4:23:d2:f3:8b:aa:98:3f:a7:9e:90:35:
f8:d0:de:90:a6:ba:ec:82:04:70:1a:18:69:63:f9:
c7:f0:fd:ce:72:29:57:cd:59:6c:18:66:7b:5c:c2:
0b:b9:a1:44:c3:39:f0:53:db:a0:e6:33:7c:3a:05:
d1:a0:61:c3:44:bc:95:a8:5a:9d:eb:bb:7b:59:b9:
88:e7:11:31:e6:55:a9:19:5e:91:31:95:8d:3b:33:
40:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BF:F8:93:91:2A:97:31:C9:62:C5:DC:22:F2:7F:59:0B:30:FB:EC
X509v3 Authority Key Identifier:
keyid:11:D1:7E:20:42:2F:59:B6:D8:BD:2D:83:07:C1:D7:BF:D8:F0:F5:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:18:10:24:90:40:ae:f5:0d:d0:27:b6:8c:08:aa:1f:ec:61:
a2:1c:c4:0d:e6:52:f4:81:4f:f7:f5:11:8a:b8:aa:b2:fe:99:
cd:d7:be:ef:ac:25:9f:94:8b:47:e1:8f:d3:7b:2f:78:bd:fa:
d5:02:2b:2d:df:51:2a:5b:c1:1a:c6:83:df:88:87:11:1e:d7:
43:90:76:10:3b:50:61:de:06:74:03:6c:3b:36:26:f2:eb:a3:
84:d4:78:5a:1d:fa:9b:30:c8:19:7e:75:5d:6c:4b:17:15:0f:
2c:30:e4:8f:b8:e2:1d:98:a1:08:34:e1:e6:25:f8:c0:58:91:
17:bb:9a:93:6f:6c:06:32:53:62:5e:ae:f6:e9:58:38:d6:b7:
39:29:8d:7d:a5:3c:71:ed:34:e2:49:36:de:04:a1:d7:6b:be:
d6:13:18:12:32:ca:82:eb:b7:82:2b:cd:52:21:90:8c:94:c5:
d2:f8:da:0b:88:d6:09:ea:89:c2:15:be:84:e4:4e:cf:0a:9b:
0b:e5:f0:ad:5b:7a:83:4a:ca:11:e2:4e:bd:16:b0:b5:18:b3:
51:c0:c3:8f:c8:57:11:cb:1e:b1:56:8f:20:ae:73:60:17:a0:
95:26:3c:ed:07:a0:05:e7:fb:78:63:d8:eb:f5:c2:5b:e4:fc:
b4:f0:95:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:45:35 2026 by rpki-client