Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
File: 1-EplWZr7nYcnw9uUfv-64uW4U9E.mft (raw, json)
Hash identifier: Lqq8nz5NMxyemaBVK9sJPSlcy999CUXYGHqqtme4f/A=
Subject key identifier: 0A:09:49:A6:1D:73:58:AF:99:E0:C2:16:26:72:6A:11:20:46:C5:7E
Authority key identifier: F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1
Certificate issuer: /CN=f84a65599afb9d8727c3db947effbae2e5b853d1
Certificate serial: 019CAC47095C00EEFD8FD4C8337C34D884B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
Manifest number: 0DE6
Signing time: Mon 02 Mar 2026 02:01:02 +0000
Manifest this update: Mon 02 Mar 2026 02:01:02 +0000
Manifest next update: Tue 03 Mar 2026 02:01:02 +0000
Files and hashes: 1: 1-EplWZr7nYcnw9uUfv-64uW4U9E.crl (hash: 335OiHtUxn1krw7n8YZkSe09OfHQ6inv/ZySPixhcHs=)
2: PYSOuEJKXfFv96PrgahNaZWMo90.roa (hash: 1YHoKoxpfqieDN1YXiLCsR8fSH3v1YL6XK2N4m5fa+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:09:5c:00:ee:fd:8f:d4:c8:33:7c:34:d8:84:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84a65599afb9d8727c3db947effbae2e5b853d1
Validity
Not Before: Mar 2 02:01:02 2026 GMT
Not After : Mar 3 02:01:02 2026 GMT
Subject: CN=0a0949a61d7358af99e0c21626726a112046c57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5c:6c:fd:f2:dd:e2:9b:a1:fa:49:2e:14:50:
7d:01:ee:d9:da:39:67:23:6c:5f:88:dc:28:58:ef:
45:c3:ff:c9:3b:12:4d:81:fb:f9:f6:1d:aa:67:73:
a8:88:b6:09:eb:6f:f6:35:4a:ca:bd:70:14:5d:61:
f1:3c:48:b0:f1:8e:61:12:6c:7b:19:9a:de:bb:8e:
cf:a5:a2:ec:aa:17:25:23:7a:f8:c2:e2:61:4d:29:
af:1e:29:a6:56:69:1c:cb:49:2e:61:55:a4:23:05:
ac:e9:49:36:3a:a6:06:88:02:3d:e3:a8:41:64:d3:
cd:c8:21:51:26:ea:98:ec:43:35:d8:4b:99:8c:ae:
22:1f:57:c5:f0:24:45:d7:cf:d3:41:c4:2b:a3:a4:
cf:da:30:09:ca:0d:38:52:ce:2a:b9:77:ae:d2:09:
2a:df:9c:b3:09:7b:1e:8a:d2:07:7b:73:b0:6e:fb:
d9:c0:4d:78:a6:23:7e:c3:40:a0:68:cb:cb:43:40:
82:c3:6c:00:bb:4d:e1:87:41:8f:4f:5e:8a:a3:d6:
66:9f:0f:a7:30:60:d9:be:dc:53:8a:ca:dd:41:c6:
aa:f2:e2:bd:cf:db:3a:4f:89:0d:93:f8:74:b7:21:
b9:af:8b:4c:a7:76:71:cc:a6:8e:fe:94:c0:72:b6:
6b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:09:49:A6:1D:73:58:AF:99:E0:C2:16:26:72:6A:11:20:46:C5:7E
X509v3 Authority Key Identifier:
keyid:F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c5:79:b3:4c:c2:b1:f7:27:40:68:2e:e3:cd:e5:58:8b:18:
d4:23:06:0b:ff:8a:63:0b:28:b6:51:57:0d:3e:15:56:b6:78:
a1:ae:f0:18:ae:97:ff:ef:68:36:c9:17:58:26:b6:f2:a4:70:
1f:40:43:4d:fa:14:40:4c:26:70:f9:f6:fe:c6:b9:9a:29:38:
10:ea:51:b6:a8:77:b3:e6:f7:50:a1:08:1f:85:a5:e0:5b:53:
d5:4b:83:1c:fd:be:7e:5e:a7:42:2c:5a:40:de:ac:3e:05:46:
26:a3:0e:6f:ab:ca:fd:4d:24:48:c0:c2:9f:27:5f:2b:ef:97:
63:a5:d7:c3:3c:0b:d2:79:5c:39:47:fb:3b:71:d2:4e:ad:ce:
61:26:82:0e:b5:b3:c6:f4:9d:ab:d0:99:ae:6d:fe:7a:eb:60:
7b:88:81:1e:f6:60:c4:3d:65:79:48:63:1f:f5:ef:a0:7b:91:
35:5f:20:ee:ce:c9:d3:94:79:4b:a5:2e:67:aa:64:6d:83:1e:
4f:e9:a7:1e:bd:17:e7:e8:b6:2c:dd:2d:94:1e:8b:7a:81:a7:
7b:1a:76:bb:91:59:9e:3a:86:3f:15:52:44:ed:97:cd:63:09:
17:19:e7:a3:6b:34:91:57:de:4c:3a:24:0a:f7:77:0a:fa:fa:
17:5d:c3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:22:40 2026 by rpki-client