Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
File: epJLjlyQurMK5Ys1ZN2qF837EIU.mft (raw, json)
Hash identifier: nc221GCuDHig7636g+almuyBCnw0EoDWT9QU7WS6GEg=
Subject key identifier: B0:A5:44:3B:93:CD:DB:B9:22:58:AB:4E:8C:C5:49:4C:67:49:75:8C
Authority key identifier: 7A:92:4B:8E:5C:90:BA:B3:0A:E5:8B:35:64:DD:AA:17:CD:FB:10:85
Certificate issuer: /CN=7a924b8e5c90bab30ae58b3564ddaa17cdfb1085
Certificate serial: 019CAA8FF835DACBE909132CFD3F26A218CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 18:01:27 +0000
Manifest this update: Sun 01 Mar 2026 18:01:27 +0000
Manifest next update: Mon 02 Mar 2026 18:01:27 +0000
Files and hashes: 1: Z76nZ5nI801iAmD3AB5yQJ-rPQg.roa (hash: mySiqQ6DoaxlXWJI/8R41UPuL/Gn5DnjGC/YLKdLsNg=)
2: epJLjlyQurMK5Ys1ZN2qF837EIU.crl (hash: rL9KUZLP8grPEBbBMBQwDByYK2FEXQuwllqaUuEp7z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:f8:35:da:cb:e9:09:13:2c:fd:3f:26:a2:18:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a924b8e5c90bab30ae58b3564ddaa17cdfb1085
Validity
Not Before: Mar 1 18:01:27 2026 GMT
Not After : Mar 2 18:01:27 2026 GMT
Subject: CN=b0a5443b93cddbb92258ab4e8cc5494c6749758c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7b:41:64:bb:7a:6c:47:ae:d7:33:ff:58:11:
93:f4:c5:05:fa:f3:f2:1b:00:f7:91:d9:77:42:23:
c3:ae:d0:cc:4a:33:2f:a9:13:5c:90:f5:60:8c:c5:
89:5a:8d:4c:98:49:af:0e:07:7c:2c:be:33:cb:7e:
ab:ac:6b:86:f6:06:43:e7:8c:5a:49:ed:95:2d:54:
1d:0a:53:d9:aa:85:bd:79:15:e7:b5:e9:5c:cf:dd:
1f:32:49:a5:49:4d:da:23:b0:da:f3:c6:a4:60:16:
8e:7c:45:28:e2:87:2a:c5:af:6d:ff:6d:1b:ab:41:
45:eb:fb:c7:24:e2:9b:30:23:4b:06:6b:0f:cb:80:
93:95:7b:dd:e8:fb:c6:52:be:d4:56:1e:97:ef:8c:
ca:80:2f:a1:26:55:a9:b3:4d:62:10:2b:0c:22:70:
49:51:90:53:a6:36:53:5c:9f:f9:f4:c5:bc:3c:c3:
68:84:27:d4:74:ce:b2:24:2d:1d:2e:e3:4f:90:9b:
cf:42:d1:b2:99:f1:b7:46:ac:27:d4:c1:76:27:58:
60:4a:20:dc:f4:db:a2:5d:45:56:c7:d1:c0:3c:0b:
bc:86:d6:78:a9:d9:fc:be:04:37:6f:01:bc:7f:0c:
e8:f5:28:52:89:80:b2:0b:db:4b:bf:05:6e:f2:fb:
fa:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A5:44:3B:93:CD:DB:B9:22:58:AB:4E:8C:C5:49:4C:67:49:75:8C
X509v3 Authority Key Identifier:
keyid:7A:92:4B:8E:5C:90:BA:B3:0A:E5:8B:35:64:DD:AA:17:CD:FB:10:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:29:07:3a:1b:05:13:4d:12:dc:05:81:2a:7f:4a:49:cd:5c:
b8:c2:f7:c5:8f:7c:6a:b2:6c:8a:86:dc:03:e3:07:76:00:29:
be:43:2d:a6:67:89:c7:93:16:80:b6:01:59:10:5a:40:a9:52:
1a:43:1e:0d:79:ea:3b:57:2c:3c:60:57:3a:98:6f:67:cc:2f:
fb:81:b2:24:a6:6e:e4:68:a2:46:59:1b:9d:a5:cf:71:2a:c9:
b3:8b:32:2d:a0:55:e4:9a:69:d9:fd:ea:94:89:03:1e:5a:78:
64:6b:f5:8c:7d:c5:1a:f6:1b:27:51:ee:0d:25:01:4f:7c:9a:
35:9d:7d:d3:98:12:6a:0b:9b:4a:7d:47:51:03:e1:da:73:4b:
07:91:c0:6c:c9:dd:e6:12:be:6c:34:2b:6c:b0:26:76:44:7d:
03:a4:c0:26:95:0a:8a:95:34:5b:a5:b4:49:4c:be:36:fb:7a:
1b:ec:7a:bb:b7:cb:43:dd:b8:3e:ef:0d:55:74:a1:18:b9:39:
da:b7:8e:68:9d:9e:0e:26:fb:96:11:b4:e4:75:72:c4:7f:a5:
78:14:cf:fd:dd:60:17:0e:53:63:68:18:df:8c:f3:db:a8:87:
2c:62:ac:40:8e:6a:16:5d:58:79:66:e1:63:db:3c:d2:f0:d9:
77:9e:a3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:13 2026 by rpki-client