Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
File: edEPco1kmadJrlkC6PqIPxrdRRc.mft (raw, json)
Hash identifier: EUGl5JXqWom1Bqn2xFZdFgy4Y6sPWIsWptnFM40axXc=
Subject key identifier: 8B:66:8C:6B:41:56:F5:44:8D:A8:D8:A2:8D:1C:28:DB:00:6E:A1:FB
Authority key identifier: 79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17
Certificate issuer: /CN=79d10f728d6499a749ae5902e8fa883f1add4517
Certificate serial: 019CAB6B37B21328C2DA70540942551A3D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
Manifest number: 1368
Signing time: Sun 01 Mar 2026 22:00:56 +0000
Manifest this update: Sun 01 Mar 2026 22:00:56 +0000
Manifest next update: Mon 02 Mar 2026 22:00:56 +0000
Files and hashes: 1: cA3aNPgSvOncWgLq6bBFasg5G0s.roa (hash: QhdH/rusqlTfEwtA92QrkPPt5X2EYpI1lbZsumMOaWg=)
2: edEPco1kmadJrlkC6PqIPxrdRRc.crl (hash: FjIHQ3MYHjRUowz9gnnNlC3o2WPP2Qb3EeBOyGZDcek=)
3: lrcggll5IwEWJaXAEarEFjeln_4.roa (hash: A3enJWPIF9/BoTUOABHy2zjKfwPohwCjBujb09CAGVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:37:b2:13:28:c2:da:70:54:09:42:55:1a:3d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d10f728d6499a749ae5902e8fa883f1add4517
Validity
Not Before: Mar 1 22:00:56 2026 GMT
Not After : Mar 2 22:00:56 2026 GMT
Subject: CN=8b668c6b4156f5448da8d8a28d1c28db006ea1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:af:6e:f9:b0:f4:78:e9:f0:1e:a0:f3:9e:0f:
c2:a2:30:38:8e:ac:46:73:cb:b7:ce:2d:45:f3:f7:
e2:92:78:99:02:b3:57:f1:15:99:71:87:25:1c:d3:
6a:8a:47:f9:ce:f7:e5:f1:5d:6d:00:ba:ab:d6:ce:
e6:3e:c2:95:4c:72:12:d2:65:32:1e:e1:76:9c:4d:
b3:3b:01:5c:c5:29:09:53:04:cd:ab:1d:41:17:37:
ea:a4:6a:31:cd:53:70:9a:e6:c8:ef:fa:65:85:e7:
de:be:9a:64:d7:d9:f1:40:7b:9a:29:9a:81:a7:70:
29:99:a3:0c:68:91:6c:f2:fb:bb:a9:0c:14:d9:1c:
2e:85:2d:03:bb:6a:ec:75:02:49:56:03:ba:ec:0e:
99:39:24:f7:0f:32:35:8f:ee:ed:72:69:b3:39:03:
1c:9a:04:5e:62:12:8c:de:bf:36:24:7d:b5:84:37:
20:8c:48:8e:c1:21:e0:d2:2d:f8:87:f3:29:d1:16:
91:35:5b:ff:76:88:10:fb:3e:3d:7f:8c:2e:5c:44:
f9:c0:33:68:b6:36:fd:9e:00:d5:38:f1:74:ee:1c:
cd:f7:c4:73:e8:4e:4a:7d:fe:06:aa:34:39:a8:e3:
51:8e:ed:14:f9:e0:eb:0c:7d:08:dd:58:b4:9b:73:
6b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:66:8C:6B:41:56:F5:44:8D:A8:D8:A2:8D:1C:28:DB:00:6E:A1:FB
X509v3 Authority Key Identifier:
keyid:79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6a:5f:d9:16:c5:a5:af:43:7d:f7:bc:f2:63:16:42:5a:85:
21:5c:f0:4b:64:9a:cf:a2:59:fd:d1:d6:5d:da:87:a0:bc:6f:
82:68:f1:36:fd:ea:d7:cc:f2:df:5d:42:28:c7:39:cf:bb:fc:
b5:d5:f7:a0:ca:ee:1c:25:5c:f3:f6:f4:5c:b1:65:3f:7a:18:
0b:04:98:41:fc:77:5c:3c:eb:2c:e2:8a:ac:52:00:c3:23:8b:
37:21:3d:5e:c6:35:b1:5a:1c:aa:dc:60:3d:dd:10:77:ff:3f:
a9:47:60:5f:27:d3:ee:cc:30:7d:2b:c7:ba:0d:c1:94:05:eb:
02:c6:60:9d:f7:74:c4:d6:bd:ed:1e:fa:29:52:a0:26:96:da:
25:7c:18:8f:eb:e6:21:dc:6f:aa:2e:b7:a2:f3:5a:3d:29:8d:
ad:a2:b1:16:37:ad:27:dc:f8:20:a0:e8:ea:bc:a3:b2:e1:4a:
19:25:33:00:b1:5c:05:a4:05:87:88:3e:85:47:5b:ca:b0:56:
7d:60:18:d0:37:53:ff:ae:d0:11:50:0f:5b:96:0c:a1:5c:96:
95:91:c0:85:44:68:49:56:99:2f:46:e9:4c:90:ec:4e:05:1d:
9e:7e:0b:c2:ea:57:db:4e:70:c3:a7:2f:58:ea:fd:d9:81:e4:
c6:83:5e:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrazeyEyjC2nBUCUJVGj05MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZDEwZjcyOGQ2NDk5YTc0OWFlNTkwMmU4ZmE4ODNmMWFk
ZDQ1MTcwHhcNMjYwMzAxMjIwMDU2WhcNMjYwMzAyMjIwMDU2WjAzMTEwLwYDVQQD
Eyg4YjY2OGM2YjQxNTZmNTQ0OGRhOGQ4YTI4ZDFjMjhkYjAwNmVhMWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6q9u+bD0eOnwHqDzng/CojA4jqxG
c8u3zi1F8/fikniZArNX8RWZcYclHNNqikf5zvfl8V1tALqr1s7mPsKVTHIS0mUy
HuF2nE2zOwFcxSkJUwTNqx1BFzfqpGoxzVNwmubI7/plhefevppk19nxQHuaKZqB
p3ApmaMMaJFs8vu7qQwU2RwuhS0Du2rsdQJJVgO67A6ZOST3DzI1j+7tcmmzOQMc
mgReYhKM3r82JH21hDcgjEiOwSHg0i34h/Mp0RaRNVv/dogQ+z49f4wuXET5wDNo
tjb9ngDVOPF07hzN98Rz6E5Kff4GqjQ5qONRju0U+eDrDH0I3Vi0m3NrsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItmjGtBVvVEjajYoo0cKNsAbqH7MB8GA1UdIwQY
MBaAFHnRD3KNZJmnSa5ZAuj6iD8a3UUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWRFUGNvMWttYWRKcmxrQzZQcUlQeHJkUlJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wYjI2NDEtYmZiNS00ZTc1LWEzZTgt
YjlmMDVlMzE1MjNhLzEvZWRFUGNvMWttYWRKcmxrQzZQcUlQeHJkUlJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8wYjI2NDEtYmZiNS00ZTc1LWEzZTgtYjlmMDVlMzE1MjNh
LzEvZWRFUGNvMWttYWRKcmxrQzZQcUlQeHJkUlJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmpf2RbF
pa9Dffe88mMWQlqFIVzwS2Saz6JZ/dHWXdqHoLxvgmjxNv3q18zy311CKMc5z7v8
tdX3oMruHCVc8/b0XLFlP3oYCwSYQfx3XDzrLOKKrFIAwyOLNyE9XsY1sVocqtxg
Pd0Qd/8/qUdgXyfT7swwfSvHug3BlAXrAsZgnfd0xNa97R76KVKgJpbaJXwYj+vm
Idxvqi63ovNaPSmNraKxFjetJ9z4IKDo6ryjsuFKGSUzALFcBaQFh4g+hUdbyrBW
fWAY0DdT/67QEVAPW5YMoVyWlZHAhURoSVaZL0bpTJDsTgUdnn4LwupX205ww6cv
WOr92YHkxoNeOA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:05 2026 by rpki-client