Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
File: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft (raw, json)
Hash identifier: H5qrXV35lphv7Gdt4iJOqwohz/8hMYz5wM1VrsCq17w=
Subject key identifier: 84:D2:CF:8E:8C:54:20:9C:AA:59:8B:03:F0:C0:44:7B:FC:97:3D:6D
Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Certificate issuer: /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Certificate serial: 019FAA1A51F55C2A35791DFEFE0908FC7505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
Manifest number: 164B
Signing time: Tue 28 Jul 2026 19:01:19 +0000
Manifest this update: Tue 28 Jul 2026 19:01:19 +0000
Manifest next update: Wed 29 Jul 2026 19:01:19 +0000
Files and hashes: 1: WVAJdgjbItg7Mo643n_cLFQt5QM.roa (hash: wQEt73D3Ylc7pRRWF2c8VCcNEdJAA1g1dE2/T5MxO+A=)
2: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl (hash: k+O8IIZz72z8igT+rCr0toqmASZTPAsNKdaTnmVkun0=)
3: ifkhfkR12chdZx40iDC75Z6ZvtI.roa (hash: VCtx1LYyqYZzs+BoTifxqmMrsa75EWc9KzbMGXKx/XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:51:f5:5c:2a:35:79:1d:fe:fe:09:08:fc:75:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Validity
Not Before: Jul 28 19:01:19 2026 GMT
Not After : Jul 29 19:01:19 2026 GMT
Subject: CN=84d2cf8e8c54209caa598b03f0c0447bfc973d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c7:3d:bc:94:33:82:54:4c:f9:d5:26:de:e2:
7e:9b:ad:2b:66:03:24:8d:1a:af:ae:ec:0f:c4:7a:
a6:b2:d7:c6:aa:54:3d:f4:4d:6c:52:ac:91:56:43:
85:35:0a:19:73:0a:01:50:05:42:cc:34:ab:f7:c5:
b4:6c:22:22:6d:1f:90:55:8d:10:a7:d8:94:b7:0d:
a8:09:63:f3:95:b2:17:7e:1d:2e:e4:4b:9b:95:ca:
2e:7d:f7:cf:36:f1:79:a0:1f:a1:e2:03:cb:77:0d:
f6:ef:93:95:7e:46:af:5b:1c:6c:10:2e:0d:75:97:
f2:93:d9:9a:4c:02:60:d3:61:2e:97:bf:27:ea:2d:
40:13:79:00:54:dd:4f:f2:60:bb:27:f9:70:68:b1:
dc:00:73:e6:d2:ab:d7:9f:e0:f5:55:61:04:13:85:
78:a4:e6:19:6a:ef:76:90:cb:db:b8:e6:97:a8:48:
30:16:29:90:9d:02:41:37:ca:8c:6b:3e:3b:e1:e1:
9c:67:fb:82:fc:94:74:0a:f9:0d:5e:0d:4c:56:9a:
a3:bf:de:97:44:b4:0e:e5:2d:69:12:43:24:1f:d1:
ee:23:e4:55:6f:70:c0:8d:df:5f:16:e8:8b:bf:48:
e2:9f:d8:69:eb:8d:62:91:01:2b:a5:1e:65:1b:7f:
3f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D2:CF:8E:8C:54:20:9C:AA:59:8B:03:F0:C0:44:7B:FC:97:3D:6D
X509v3 Authority Key Identifier:
keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:9c:ad:fb:1d:ba:07:a4:60:f8:02:e8:28:91:be:53:b3:33:
9c:e0:0f:cc:4b:d9:61:0b:aa:2c:d2:f5:3a:20:3c:81:08:82:
fa:b1:ea:ff:5f:2f:af:fd:d7:e2:ca:5e:37:7e:58:69:b9:4e:
59:be:a2:3c:ef:c3:f5:99:fb:e0:38:5e:cd:75:3f:56:17:94:
b1:9d:fa:2b:b4:89:a2:40:ff:a1:a1:3d:0a:7e:ad:97:2f:7e:
61:f7:b2:3b:c2:c7:07:47:8b:27:66:58:7e:08:8d:19:2d:c8:
7e:47:ea:71:7d:aa:87:15:f9:48:0f:85:86:d9:83:05:98:8a:
98:01:fa:d1:b9:27:0f:80:7b:e9:c1:a4:06:74:78:8d:ec:2e:
de:c6:67:0c:8c:f4:4c:53:c4:52:7e:3f:24:d3:0b:69:8e:44:
86:26:66:61:24:1d:74:d9:e9:83:f2:8b:b8:5e:8d:84:67:23:
d5:8f:3d:c9:07:f7:ad:14:36:70:6e:3c:ae:6c:8e:29:c0:1d:
25:55:71:73:20:04:e3:3f:23:37:a3:13:82:3c:13:61:62:01:
2d:db:2a:ed:7c:82:20:7f:00:63:c1:a0:01:f1:f8:55:01:12:
66:92:75:39:a1:f8:62:87:f3:14:5f:b7:55:01:79:97:c6:3c:
65:b5:b5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:39:38 2026 by rpki-client