Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
File: epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft (raw, json)
Hash identifier: rpsjsSDtt8a6BBjTNfS/KBCo+NsyXwq+ObUoS7ZSk5A=
Subject key identifier: A1:6A:2E:DF:91:E4:CB:6A:CA:11:0F:B3:DA:88:04:D7:0F:9A:D2:FC
Authority key identifier: 7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
Certificate issuer: /CN=7a938a935f8baf9cd933906416590d782e7287c7
Certificate serial: 019CAAC703839E6D7D966F7B5FDFCB9D653E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 19:01:35 +0000
Manifest this update: Sun 01 Mar 2026 19:01:35 +0000
Manifest next update: Mon 02 Mar 2026 19:01:35 +0000
Files and hashes: 1: BEwSGx2LrGrF0sGwEj968AwEhBQ.roa (hash: FOuyYaW0tTl+dteUWOtoA2lUPrG6Wb17DxcFxBecsSA=)
2: O1kpwtflKFENDMxtFw4AMwXy_Eg.roa (hash: bFGH8x7w1VMHVR7CRYJvYNDIa0FPd2nWUvLigwhxhc4=)
3: aUl8lpeM_cK5FLKbeF7Bav-pQik.roa (hash: VJooy4RdmsLaFuxZcWrZ5R9B5jb/JnWIuGjdSyDjKws=)
4: epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl (hash: xs9XBhYkoLdgKrwZao5WdPXE8UIJMeYcuk2Wbrp0K4Y=)
5: t_IFzY8Fmcbu_ECs1VYwATKRDVM.roa (hash: zPmzKv9Sv3CWVQ7tS1fG8zEgGyRJzdU51E/8+5c5c+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:03:83:9e:6d:7d:96:6f:7b:5f:df:cb:9d:65:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a938a935f8baf9cd933906416590d782e7287c7
Validity
Not Before: Mar 1 19:01:35 2026 GMT
Not After : Mar 2 19:01:35 2026 GMT
Subject: CN=a16a2edf91e4cb6aca110fb3da8804d70f9ad2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:21:f2:ef:27:2e:c1:43:3c:36:49:f9:b5:0c:
8b:63:36:04:db:97:b3:57:d9:2b:3a:4b:f2:5d:c3:
28:d6:44:81:98:4e:f8:60:37:a8:dc:37:bd:0c:44:
9b:21:0a:ac:ae:88:1a:8c:39:00:ee:fa:e9:c1:9b:
ab:41:dc:78:b4:4e:c8:73:76:07:17:5d:99:b8:b9:
d3:13:09:55:51:b4:fb:38:92:b6:95:2d:fe:56:17:
8c:e0:22:60:a3:ac:43:26:1b:75:3e:28:05:08:db:
29:24:40:3b:41:10:72:ad:55:9b:89:d8:fc:c8:8c:
54:4a:c2:0f:cf:a9:08:dc:91:43:67:c0:af:28:10:
c9:05:65:39:8a:c9:ca:69:44:6e:5a:ad:19:7a:0a:
b2:9c:1c:98:a1:ec:0c:cb:ca:65:2c:7e:48:6f:e2:
d3:d6:06:d7:81:d1:d0:ff:96:7d:45:15:e5:60:f7:
ab:c4:fc:95:49:5d:03:d8:e1:f8:9b:51:a8:9f:14:
fe:aa:48:3a:cb:d5:00:cd:a8:a7:ad:33:ca:43:60:
33:a1:e1:88:d3:2b:41:41:97:d9:17:21:04:b1:49:
67:97:5b:46:75:4f:0d:fc:bd:7d:11:c2:7f:06:1f:
5d:3b:4a:42:81:d7:4f:37:02:fe:8c:9a:83:1a:fe:
5b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6A:2E:DF:91:E4:CB:6A:CA:11:0F:B3:DA:88:04:D7:0F:9A:D2:FC
X509v3 Authority Key Identifier:
keyid:7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e0:61:88:93:52:8f:d8:cc:6f:eb:cb:34:5a:b8:37:a0:6a:
1d:84:9d:51:b4:44:b3:9c:dd:64:37:64:14:15:7e:a2:f6:80:
7e:a3:24:af:14:b0:31:44:98:b3:01:02:77:f1:dc:d1:e4:d9:
cd:12:f9:30:b3:b3:21:10:b2:42:58:fa:b6:18:ee:ff:7a:b9:
d4:61:1d:6a:d8:02:47:85:67:8a:a1:0d:2f:aa:de:62:00:ad:
12:8a:de:68:61:ca:ca:6f:87:85:36:df:2a:e2:45:9c:7d:df:
43:d0:c4:ad:aa:2f:71:93:fa:85:80:b3:7a:6c:87:d4:a6:0c:
90:0e:ae:2a:f8:5b:2e:f3:e5:ce:1a:fc:1b:67:59:5e:30:0b:
c9:79:d8:e1:2c:55:a4:12:7c:fe:22:08:99:71:c6:2d:9d:04:
ca:70:bd:5f:c5:94:24:38:6e:b2:c3:01:30:19:10:88:7d:46:
9c:b4:5f:08:39:b0:ff:e3:14:84:f5:2d:19:7f:38:32:e1:66:
d5:48:c8:2e:9c:b1:de:1e:41:69:7b:6e:2e:86:6d:7b:e3:a4:
87:cb:ae:17:d8:c3:c8:b0:52:e1:d9:7e:80:64:d2:21:12:34:
c0:7f:62:f6:77:87:50:69:f9:30:ba:b1:c7:14:1d:e2:be:c9:
34:43:cb:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxwODnm19lm97X9/LnWU+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhOTM4YTkzNWY4YmFmOWNkOTMzOTA2NDE2NTkwZDc4MmU3
Mjg3YzcwHhcNMjYwMzAxMTkwMTM1WhcNMjYwMzAyMTkwMTM1WjAzMTEwLwYDVQQD
EyhhMTZhMmVkZjkxZTRjYjZhY2ExMTBmYjNkYTg4MDRkNzBmOWFkMmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSHy7ycuwUM8Nkn5tQyLYzYE25ez
V9krOkvyXcMo1kSBmE74YDeo3De9DESbIQqsrogajDkA7vrpwZurQdx4tE7Ic3YH
F12ZuLnTEwlVUbT7OJK2lS3+VheM4CJgo6xDJht1PigFCNspJEA7QRByrVWbidj8
yIxUSsIPz6kI3JFDZ8CvKBDJBWU5isnKaURuWq0ZegqynByYoewMy8plLH5Ib+LT
1gbXgdHQ/5Z9RRXlYPerxPyVSV0D2OH4m1GonxT+qkg6y9UAzainrTPKQ2AzoeGI
0ytBQZfZFyEEsUlnl1tGdU8N/L19EcJ/Bh9dO0pCgddPNwL+jJqDGv5bEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFqLt+R5MtqyhEPs9qIBNcPmtL8MB8GA1UdIwQY
MBaAFHqTipNfi6+c2TOQZBZZDXgucofHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXBPS2sxLUxyNXpaTTVCa0Zsa05lQzV5aDhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9mZjBiZmMtMjZmZS00NDEyLWEyMzIt
MzE5OTlmM2FkZDM2LzEvZXBPS2sxLUxyNXpaTTVCa0Zsa05lQzV5aDhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9mZjBiZmMtMjZmZS00NDEyLWEyMzItMzE5OTlmM2FkZDM2
LzEvZXBPS2sxLUxyNXpaTTVCa0Zsa05lQzV5aDhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeeBhiJNS
j9jMb+vLNFq4N6BqHYSdUbREs5zdZDdkFBV+ovaAfqMkrxSwMUSYswECd/Hc0eTZ
zRL5MLOzIRCyQlj6thju/3q51GEdatgCR4VniqENL6reYgCtEoreaGHKym+HhTbf
KuJFnH3fQ9DEraovcZP6hYCzemyH1KYMkA6uKvhbLvPlzhr8G2dZXjALyXnY4SxV
pBJ8/iIImXHGLZ0EynC9X8WUJDhussMBMBkQiH1GnLRfCDmw/+MUhPUtGX84MuFm
1UjILpyx3h5BaXtuLoZte+Okh8uuF9jDyLBS4dl+gGTSIRI0wH9i9neHUGn5MLqx
xxQd4r7JNEPL3Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:46 2026 by rpki-client