Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
File: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft (raw, json)
Hash identifier: CfCK5tF+HrmakQscP+iDqYzYds9VX9lDaj3SN2ox3YQ=
Subject key identifier: D4:D8:17:53:9F:D9:33:88:A3:23:37:BA:B9:BF:6D:3F:CA:8B:4C:CA
Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Certificate issuer: /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Certificate serial: 019CAB6B6FB66B13BC8754EB5CC45457C03D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
Manifest number: 14BE
Signing time: Sun 01 Mar 2026 22:01:10 +0000
Manifest this update: Sun 01 Mar 2026 22:01:10 +0000
Manifest next update: Mon 02 Mar 2026 22:01:10 +0000
Files and hashes: 1: WVAJdgjbItg7Mo643n_cLFQt5QM.roa (hash: wQEt73D3Ylc7pRRWF2c8VCcNEdJAA1g1dE2/T5MxO+A=)
2: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl (hash: hLpMa+rLBXVE9a3PUPYVK2wKBw6GXN8FfFdJ2eWuJnE=)
3: ifkhfkR12chdZx40iDC75Z6ZvtI.roa (hash: VCtx1LYyqYZzs+BoTifxqmMrsa75EWc9KzbMGXKx/XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:6f:b6:6b:13:bc:87:54:eb:5c:c4:54:57:c0:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Validity
Not Before: Mar 1 22:01:10 2026 GMT
Not After : Mar 2 22:01:10 2026 GMT
Subject: CN=d4d817539fd93388a32337bab9bf6d3fca8b4cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2a:1d:18:9e:2f:19:87:c1:68:db:6b:d2:87:
05:be:eb:a6:d9:50:a7:6b:80:2c:f7:5b:30:67:e5:
17:02:10:6e:29:85:fb:4b:72:f9:2f:1f:92:8d:9a:
7b:a8:ca:3c:5f:7b:ea:72:d8:7c:55:e4:f1:00:5d:
16:aa:e9:41:bb:0b:86:2c:b0:4b:ad:a2:28:bf:c4:
73:82:d6:64:cc:63:15:1b:e5:c7:d7:cc:fc:15:58:
e5:86:6a:74:f7:79:6a:2d:e7:80:6b:86:a9:8e:3b:
60:c5:a3:14:54:19:92:89:10:33:cf:0e:47:a4:f1:
6c:98:9a:ab:44:e2:ad:52:10:e9:0f:58:03:4d:43:
09:3f:e5:d2:0d:24:65:53:ab:dc:16:e6:f3:5f:cc:
d6:a5:d4:e4:9c:70:68:c0:60:cb:63:57:c2:71:5e:
d0:bd:5f:1c:f4:76:81:59:11:e9:bb:90:0b:fc:58:
ae:0b:5b:f2:c9:e3:bd:33:c1:e4:f7:0d:0c:d5:a5:
3c:b2:77:fa:c1:61:34:db:42:57:7c:68:41:60:3c:
ee:f5:18:f6:93:4f:56:f7:ef:f4:5f:95:f9:d8:cb:
e2:54:61:30:26:d1:fc:a4:11:68:75:a5:40:b2:96:
67:f4:a9:95:3f:d8:08:78:19:4e:ca:7a:8a:3a:19:
e8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D8:17:53:9F:D9:33:88:A3:23:37:BA:B9:BF:6D:3F:CA:8B:4C:CA
X509v3 Authority Key Identifier:
keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:20:80:10:ce:b7:72:31:b6:93:bb:d1:99:06:ba:58:40:f4:
45:b2:ae:2c:80:d2:ae:ba:07:35:2b:b4:e2:9e:da:e3:3d:8d:
66:68:58:fa:78:e7:5f:d7:be:37:d6:34:67:cf:c5:77:01:45:
37:f2:f9:25:97:9e:6f:e5:10:a4:76:e6:d9:dc:d4:6c:20:7a:
ef:f0:cc:f2:bb:df:18:37:48:d2:ef:a7:a8:5a:26:99:66:61:
d8:c5:83:65:ad:92:24:e3:78:1a:1f:e6:a5:27:32:71:69:13:
32:4f:a1:26:b8:b6:db:63:91:25:e9:47:99:19:31:c9:20:1d:
92:f2:e3:0e:ae:92:cb:e6:c4:f4:0c:1b:e7:7e:4a:fb:4b:88:
ac:f3:38:78:4d:d6:d9:d9:c8:e9:75:64:f1:6f:37:87:ce:34:
21:73:75:f7:0c:d8:b7:a8:77:74:49:1f:22:9f:4b:60:47:d6:
2d:7b:bd:32:0f:a1:df:36:86:21:bd:5e:5b:98:11:02:bb:93:
83:4e:d3:d1:12:13:f8:f6:d1:ef:b2:1c:25:23:00:c7:06:79:
93:aa:d6:f0:7d:43:77:2c:51:65:48:1b:4d:fd:e0:8f:67:fc:
21:a2:09:ac:78:b8:f4:49:4b:bc:7b:94:33:0b:cc:cc:36:45:
b6:00:28:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:27 2026 by rpki-client