Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
File: S-EpiiFeXkt9HgWoX7xZHDifnd0.mft (raw, json)
Hash identifier: kUWI79vVzxT2RYWJB33jjIk+nyS+yIP3lyrvCD5Rf/0=
Subject key identifier: 94:44:F3:B9:4A:9A:F3:47:71:C1:69:F3:DE:FB:8A:27:7B:0A:FB:84
Authority key identifier: 4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD
Certificate issuer: /CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd
Certificate serial: 019CABD98056B20F0A0AB5534DB28F78396B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
Manifest number: 151F
Signing time: Mon 02 Mar 2026 00:01:23 +0000
Manifest this update: Mon 02 Mar 2026 00:01:23 +0000
Manifest next update: Tue 03 Mar 2026 00:01:23 +0000
Files and hashes: 1: S-EpiiFeXkt9HgWoX7xZHDifnd0.crl (hash: Siod198HomVZp7Qu128kmvS7R+n+Qc86qeAEw/uq7ZM=)
2: ckaCM0ljBckHax5w4M6j9Dmi6Rc.roa (hash: D3AXy9P3YTGg9/JH6jTq3HL+lqbCncKHq8NI3RwK6m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:80:56:b2:0f:0a:0a:b5:53:4d:b2:8f:78:39:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd
Validity
Not Before: Mar 2 00:01:23 2026 GMT
Not After : Mar 3 00:01:23 2026 GMT
Subject: CN=9444f3b94a9af34771c169f3defb8a277b0afb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0e:dd:aa:f3:a8:94:c0:c5:78:36:69:be:72:
a8:d7:c2:50:aa:3c:d6:ac:12:70:f2:e3:f5:38:14:
5c:3c:1e:76:d1:b2:af:1d:9d:01:0a:80:c3:78:01:
89:a4:0b:ae:f7:73:25:08:75:1d:54:73:57:3c:b0:
aa:83:2f:8b:07:4a:90:a5:79:25:d8:84:a6:8d:c9:
21:37:b3:7b:37:83:72:36:85:65:5b:ad:c1:32:64:
a1:15:a0:0e:5d:4a:cc:b2:e5:c1:f9:85:77:65:bf:
56:57:c5:95:51:42:aa:7b:24:8c:95:4a:96:4c:2a:
35:27:42:7b:66:ad:0e:23:78:f2:8a:2f:e4:7e:83:
09:84:a2:46:ef:ff:a2:49:3f:00:ea:01:3f:7b:ab:
6c:53:fb:7d:c8:11:2c:99:36:e0:58:f9:e0:54:d3:
99:57:4b:d1:9a:89:7b:a9:d9:37:c2:76:6c:ac:99:
1a:89:3d:a0:38:63:bb:28:99:c8:7f:cd:6d:e0:83:
ba:96:59:f2:a6:f2:7b:8c:be:5c:77:68:8a:de:93:
a9:af:87:cf:ed:0b:67:0c:cf:53:df:2c:d1:84:58:
4e:33:ea:3c:39:38:76:f6:48:d8:b6:1a:da:e1:15:
ab:c6:7f:bf:66:85:95:3c:2c:37:9e:0f:aa:81:67:
23:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:44:F3:B9:4A:9A:F3:47:71:C1:69:F3:DE:FB:8A:27:7B:0A:FB:84
X509v3 Authority Key Identifier:
keyid:4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:51:52:41:be:8d:4e:5f:03:5e:ca:d1:47:dc:50:91:a2:d4:
d0:4f:93:b9:c8:c7:63:26:60:7d:5f:1d:43:b1:16:9a:86:82:
28:52:19:95:29:f6:ac:75:57:8b:b7:0f:01:91:56:bc:94:a4:
72:d4:fd:a1:e0:aa:e6:1a:e7:95:7d:45:d7:dc:23:52:b0:3b:
67:d4:1b:8b:43:9a:44:b6:e6:aa:62:eb:1b:ae:59:81:f0:be:
cc:11:fa:5d:0f:d4:19:7b:5e:43:41:7c:f5:ff:f3:84:bc:dc:
cf:c7:1a:b0:2b:93:f6:2e:03:01:9b:35:b1:dc:8a:cb:06:9a:
e7:45:bf:d8:de:4b:e1:1b:77:bc:06:a5:45:7f:6b:6a:90:5f:
3a:9a:81:83:e5:a6:11:d3:95:d0:fe:95:aa:93:bd:85:ac:da:
24:58:64:c5:e1:44:97:b5:e4:cd:82:60:6e:6d:39:db:f2:a0:
4c:5e:a2:a3:7f:40:e5:1b:15:5f:c3:98:1c:4e:58:0d:6c:75:
60:89:f9:33:b0:32:5e:ee:6f:a0:48:f4:11:33:b1:0c:3c:80:
07:66:06:b0:64:f6:3a:fb:87:04:b4:e0:09:55:f2:02:57:a5:
c0:37:ca:0a:22:8d:64:5b:9d:b9:89:72:af:d9:1d:de:69:20:
f5:34:b9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:17:57 2026 by rpki-client