Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1c1505-3ef7-487d-ab31-9faeade33199/1/EP2-FFUvDDi6gz5jijB3qvuk5ts.mft
File: EP2-FFUvDDi6gz5jijB3qvuk5ts.mft (raw, json)
Hash identifier: gVrZcHAfZsLo9kv6+3ymWrK2Pt/iLFI8+2cHrDE8mx8=
Subject key identifier: 42:68:E1:B0:2F:C5:1E:A4:EC:45:6C:2D:31:19:39:92:CC:22:5F:6D
Authority key identifier: 10:FD:BE:14:55:2F:0C:38:BA:83:3E:63:8A:30:77:AA:FB:A4:E6:DB
Certificate issuer: /CN=10fdbe14552f0c38ba833e638a3077aafba4e6db
Certificate serial: 019FA74FB31BEA6C210189C8801F6339808F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EP2-FFUvDDi6gz5jijB3qvuk5ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1c1505-3ef7-487d-ab31-9faeade33199/1/EP2-FFUvDDi6gz5jijB3qvuk5ts.mft
Manifest number: 05
Signing time: Tue 28 Jul 2026 06:00:45 +0000
Manifest this update: Tue 28 Jul 2026 06:00:45 +0000
Manifest next update: Wed 29 Jul 2026 06:00:45 +0000
Files and hashes: 1: EP2-FFUvDDi6gz5jijB3qvuk5ts.crl (hash: 7MY00iyT6wdNSU6cFp/oM3VwrsqBxj8yElvubc1EbhE=)
2: H7q4kz0RynAHprvrCBHVQwemyck.asa (hash: lF4HoOFJdk/5+3/3TmvUoLKkxen3fP0BoEBpUizxP1w=)
3: I9bUjs_WyDHQNZpk7Nuatvrcz0I.roa (hash: k05gbe5peZwSMmhQKob6xOpxfqygYsGePFzjNLbY8GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1c1505-3ef7-487d-ab31-9faeade33199/1/EP2-FFUvDDi6gz5jijB3qvuk5ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1c1505-3ef7-487d-ab31-9faeade33199/1/EP2-FFUvDDi6gz5jijB3qvuk5ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/EP2-FFUvDDi6gz5jijB3qvuk5ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:4f:b3:1b:ea:6c:21:01:89:c8:80:1f:63:39:80:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10fdbe14552f0c38ba833e638a3077aafba4e6db
Validity
Not Before: Jul 28 06:00:45 2026 GMT
Not After : Jul 29 06:00:45 2026 GMT
Subject: CN=4268e1b02fc51ea4ec456c2d31193992cc225f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:49:87:4b:04:96:83:b1:45:cc:0d:0f:0f:3b:
69:25:5a:9c:61:ea:c5:fb:93:ce:29:c8:fa:fd:7a:
3d:e2:52:ee:c2:46:2f:77:4c:53:68:d7:a6:76:be:
64:de:28:28:31:0c:30:67:a4:6f:c9:e9:07:c1:1f:
db:74:ae:80:33:93:71:88:9d:c2:99:2c:22:d1:d1:
db:48:2b:28:a3:ab:9f:05:f6:50:00:f3:dd:c9:91:
ad:b8:fd:41:0c:0c:cf:ef:c7:54:8a:dc:c8:19:13:
a4:03:d2:31:31:28:b4:70:2b:48:6b:da:a2:fa:a2:
ad:e7:2d:3d:50:3b:d2:d7:e7:86:33:16:ec:99:7a:
a7:ef:bc:c8:30:0a:42:24:b6:bd:31:38:4b:41:f7:
41:ed:b4:11:14:88:12:c4:02:64:ee:7b:89:f2:84:
68:9d:1d:e0:07:d2:e4:21:e4:cd:cf:78:86:10:ee:
7c:13:1c:4b:35:cc:af:f7:ca:76:50:50:63:c2:0e:
d3:9c:d8:3f:bf:6d:61:89:40:ec:52:6f:b9:44:2f:
a9:60:30:16:7e:72:ec:c5:01:39:05:76:7e:a5:62:
57:ee:14:88:15:2e:ed:ff:a2:2e:38:24:2a:0b:1f:
4a:0f:10:53:3c:ec:8a:d8:35:69:a2:36:39:90:c6:
e5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:68:E1:B0:2F:C5:1E:A4:EC:45:6C:2D:31:19:39:92:CC:22:5F:6D
X509v3 Authority Key Identifier:
keyid:10:FD:BE:14:55:2F:0C:38:BA:83:3E:63:8A:30:77:AA:FB:A4:E6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EP2-FFUvDDi6gz5jijB3qvuk5ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1c1505-3ef7-487d-ab31-9faeade33199/1/EP2-FFUvDDi6gz5jijB3qvuk5ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1c1505-3ef7-487d-ab31-9faeade33199/1/EP2-FFUvDDi6gz5jijB3qvuk5ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:4f:3c:a6:30:4d:98:82:a7:a7:98:a5:e6:ac:31:07:9d:0d:
a8:58:36:24:c9:6e:36:9e:bc:eb:95:9b:a4:82:67:58:ed:f7:
3e:10:51:23:52:f2:82:1a:84:bd:1a:eb:70:c8:2a:09:61:21:
29:de:02:1e:37:3e:7f:7d:fe:7e:31:d2:2b:25:58:f9:63:60:
8b:ca:eb:b0:d6:eb:52:82:e7:d8:b2:2c:f2:45:14:87:ee:a3:
ea:5c:03:b2:8d:21:df:0b:4d:41:ad:95:65:fc:b8:6e:eb:00:
fa:4d:10:fe:63:56:72:98:92:29:df:cc:21:bb:57:ef:1d:21:
e6:05:6f:a1:a1:48:48:a8:7e:3f:88:43:d1:c9:57:75:f8:fc:
72:67:cb:5e:6a:ba:fe:8b:d5:ed:47:a6:7c:54:20:b1:59:e2:
7c:1a:da:26:51:dd:88:03:c7:52:d9:ca:9e:54:62:24:23:f2:
4b:c1:f2:92:43:c6:b3:e6:f2:01:88:23:57:d6:c2:08:82:72:
00:ad:04:4d:e2:a8:b0:75:54:87:8b:27:12:b3:47:41:d5:d3:
b8:d1:c0:3e:ef:85:17:70:92:53:f0:2e:4f:f3:5b:be:29:d2:
37:1c:a7:7f:f4:7e:52:24:54:58:d0:90:b6:b3:30:bf:dd:7e:
f9:cc:19:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:32:42 2026 by rpki-client