Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
File: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft (raw, json)
Hash identifier: yAFqZp6NBbe2OkT/ewBu3lUEuCDsAsfzAcuYzc5+wh4=
Subject key identifier: 40:22:5D:BF:A5:51:A9:5B:D0:9F:18:E4:1C:C7:DC:47:4C:84:2D:06
Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Certificate issuer: /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Certificate serial: 01A0C40DEA72C14E302860AF71A9FB9DB63F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
Manifest number: 16DD
Signing time: Mon 21 Sep 2026 13:00:41 +0000
Manifest this update: Mon 21 Sep 2026 13:00:41 +0000
Manifest next update: Tue 22 Sep 2026 13:00:41 +0000
Files and hashes: 1: WVAJdgjbItg7Mo643n_cLFQt5QM.roa (hash: wQEt73D3Ylc7pRRWF2c8VCcNEdJAA1g1dE2/T5MxO+A=)
2: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl (hash: 3LNV60l/yzWKExTLvl/1J+JOThkbFex2/kxXTXUvdsI=)
3: ifkhfkR12chdZx40iDC75Z6ZvtI.roa (hash: VCtx1LYyqYZzs+BoTifxqmMrsa75EWc9KzbMGXKx/XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:ea:72:c1:4e:30:28:60:af:71:a9:fb:9d:b6:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Validity
Not Before: Sep 21 13:00:41 2026 GMT
Not After : Sep 22 13:00:41 2026 GMT
Subject: CN=40225dbfa551a95bd09f18e41cc7dc474c842d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fa:8f:55:83:ba:60:b7:d9:e8:e8:0f:92:da:
d7:55:3e:fd:8d:f9:a1:7a:62:f7:2e:f8:11:91:11:
47:00:42:31:c4:e8:62:1e:ec:4d:c4:d7:3c:e8:e6:
7b:3c:c4:7c:5a:29:be:cf:24:be:3f:96:52:6f:a3:
16:a5:01:33:e3:31:e8:64:af:5c:42:6b:60:c7:38:
ac:46:e3:ea:ed:80:aa:79:40:01:43:89:4a:ed:38:
d5:21:34:78:16:4c:3b:71:a7:37:7f:09:63:60:bd:
cc:d7:dc:80:52:57:4b:bc:f7:9e:48:ab:a8:e3:b6:
e8:08:ea:f1:c3:06:60:ae:7e:da:ba:5f:69:19:0f:
a5:a2:83:8b:cc:4f:d5:70:db:8b:52:5f:bb:6e:20:
99:c9:58:42:a4:84:b7:7b:35:09:d6:6e:16:62:0c:
f0:a4:17:6a:e9:4a:bf:00:20:08:e1:f6:6c:11:34:
48:e0:f8:9f:bd:6a:ab:2d:de:a0:d5:66:12:bb:25:
c9:a8:6a:18:78:87:51:2c:ee:1c:b8:ac:21:72:d9:
00:ac:79:fd:7d:59:30:b9:66:74:8f:e3:4c:b6:c3:
f5:24:53:af:ba:43:a0:88:c2:4c:9b:c2:0a:dc:fc:
92:3e:a7:05:10:d1:3e:52:be:01:b7:35:91:8b:8a:
03:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:22:5D:BF:A5:51:A9:5B:D0:9F:18:E4:1C:C7:DC:47:4C:84:2D:06
X509v3 Authority Key Identifier:
keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:17:64:fd:a1:3a:28:86:b0:7f:41:38:d5:53:d0:af:77:de:
1a:03:ae:8b:ed:e6:7f:c2:85:94:92:01:5d:c6:51:e5:57:02:
55:4d:4c:a1:32:ba:3f:12:8b:b1:fd:8d:2e:11:c9:df:82:48:
f9:b0:32:a1:f8:d6:d4:81:70:f6:ad:08:37:3d:0b:0d:7f:28:
ed:df:2b:d4:17:cc:8b:7b:c5:99:88:3f:1a:75:a3:96:9d:bb:
4e:44:14:2f:fe:ed:63:bf:5b:2a:a8:97:ab:49:ae:8a:8b:12:
1a:00:46:d6:1e:26:81:68:a1:31:70:21:d5:dc:26:15:e0:d4:
53:64:bf:b0:14:ee:3f:ae:5f:70:5e:27:ab:b8:89:62:c5:e2:
00:78:b3:6a:db:ba:9b:44:1a:a8:b0:d6:18:09:ea:b0:25:f4:
86:30:c5:cb:56:69:0b:7e:95:8b:1e:e4:e2:df:09:f7:89:df:
e8:c4:2f:da:09:2a:d3:06:3e:54:36:f7:e7:5f:da:d6:47:c0:
a8:3c:eb:e0:fa:f5:c1:2d:93:c3:fe:89:9a:0a:0f:f3:1e:30:
b7:05:94:85:f3:67:b7:8a:dd:c8:a7:fa:33:4b:a1:34:fe:42:
42:cc:58:06:d6:ba:e9:3a:88:f2:d8:7b:ac:c9:a6:a5:c4:29:
30:11:f5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:48:56 2026 by rpki-client