Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
File: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft (raw, json)
Hash identifier: 7c9Eikd3PtkyThBbv9Lp/IMG/+60kRaYpe1Cql80EAU=
Subject key identifier: E1:EF:3D:B5:86:0F:04:21:C1:AA:50:BC:73:AC:75:99:32:7F:52:7C
Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Certificate issuer: /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Certificate serial: 019D98F47D50B51A1051CD08DE724980A352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
Manifest number: 1539
Signing time: Fri 17 Apr 2026 01:00:52 +0000
Manifest this update: Fri 17 Apr 2026 01:00:52 +0000
Manifest next update: Sat 18 Apr 2026 01:00:52 +0000
Files and hashes: 1: WVAJdgjbItg7Mo643n_cLFQt5QM.roa (hash: wQEt73D3Ylc7pRRWF2c8VCcNEdJAA1g1dE2/T5MxO+A=)
2: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl (hash: iOY0+vsYHh5u4D2CuYB0lhKZXwsXmjqlH2L+5dlhnM4=)
3: ifkhfkR12chdZx40iDC75Z6ZvtI.roa (hash: VCtx1LYyqYZzs+BoTifxqmMrsa75EWc9KzbMGXKx/XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:7d:50:b5:1a:10:51:cd:08:de:72:49:80:a3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Validity
Not Before: Apr 17 01:00:52 2026 GMT
Not After : Apr 18 01:00:52 2026 GMT
Subject: CN=e1ef3db5860f0421c1aa50bc73ac7599327f527c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3c:53:06:d8:b8:13:5a:a9:8b:10:dc:76:ea:
1c:85:9b:70:40:86:37:12:09:86:bd:88:68:78:0c:
e6:b9:3b:f6:07:8c:10:0d:67:d8:c6:87:25:07:3c:
fb:20:91:8d:08:d1:8b:4f:8a:48:a7:0c:89:c1:f4:
cf:9d:6e:7d:9c:b3:e0:05:a0:a3:a2:f7:1d:1a:08:
4f:e2:07:6f:30:3a:b6:e5:ad:05:88:a8:a5:87:29:
e1:1d:34:0d:83:45:15:8c:05:41:94:aa:97:8c:89:
46:8d:6a:3d:54:9f:b5:7b:35:fc:8a:12:b0:1c:16:
dc:57:bb:f9:65:db:56:38:8f:1b:0f:99:ef:73:9d:
c1:59:27:d5:bf:42:a6:db:75:5b:41:9f:28:44:f3:
07:de:b3:06:fc:68:39:37:be:e6:56:72:fe:28:71:
9a:f3:fa:5e:93:f6:08:cc:6e:3a:ff:f2:b9:29:59:
51:53:12:e9:28:c0:8b:68:8a:58:d1:47:05:32:06:
06:bf:b5:86:0e:67:da:17:ab:b2:ba:6b:11:ee:ee:
73:0a:0b:34:ba:4e:33:de:20:01:30:50:c1:1b:73:
f3:72:0a:82:4f:03:5c:56:ed:0f:14:4c:10:ba:50:
c1:dc:4b:06:cb:0d:21:39:db:94:d6:48:d2:a8:f5:
a9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EF:3D:B5:86:0F:04:21:C1:AA:50:BC:73:AC:75:99:32:7F:52:7C
X509v3 Authority Key Identifier:
keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b0:86:ee:d5:66:eb:df:cb:63:f6:e6:9d:31:ba:ac:7d:9c:
01:ac:91:9a:e6:9f:87:8c:aa:b4:f2:3f:55:e8:86:3c:fa:ff:
c7:a4:9c:f3:36:65:13:84:79:57:8b:f3:25:8c:0b:2b:de:f0:
15:b3:8d:76:96:37:45:e4:02:45:78:d5:c5:5a:57:5b:15:4e:
8d:c6:fe:47:3d:aa:3a:19:e7:3d:45:b8:97:14:8b:30:5a:3f:
e4:49:df:30:d0:22:62:c5:96:14:22:c5:73:48:6e:b9:b5:e2:
b2:5d:39:7d:3a:3a:95:c9:8d:5e:41:a8:aa:31:8a:3b:2c:9a:
5f:3a:52:4f:7b:64:5c:ee:ce:db:10:4c:01:1f:3a:55:06:18:
95:91:13:a1:e6:c9:16:4a:31:f2:54:cc:c6:51:ed:90:2e:27:
cc:95:55:be:1c:4d:06:dc:e7:9a:ad:8b:e0:05:dc:9c:08:c5:
1e:7f:5a:7b:aa:e1:08:c0:fe:fc:01:ee:ad:c0:b4:fe:44:d7:
af:4d:fe:34:c5:2c:c7:28:fc:03:a5:a4:8d:a1:fa:a1:55:8f:
ce:12:9b:14:f6:32:5d:4f:a2:70:a0:e7:2f:90:f1:7d:09:19:
f6:d4:5c:44:32:77:40:58:5f:ba:56:b3:69:17:d8:d2:11:2a:
5e:ee:71:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:54:06 2026 by rpki-client