Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
File: epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft (raw, json)
Hash identifier: CLF3RWMUg2AIfGW70ySoy/DJ9u8O6padFel8Lsmtgiw=
Subject key identifier: 7A:22:DE:E0:1A:16:72:4E:1D:25:5F:F9:62:DE:9A:0F:B7:F1:47:6B
Authority key identifier: 7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
Certificate issuer: /CN=7a938a935f8baf9cd933906416590d782e7287c7
Certificate serial: 019D9A3EF8AE4DFBCFCD759C05F6AB9A2308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 07:01:51 +0000
Manifest this update: Fri 17 Apr 2026 07:01:51 +0000
Manifest next update: Sat 18 Apr 2026 07:01:51 +0000
Files and hashes: 1: BEwSGx2LrGrF0sGwEj968AwEhBQ.roa (hash: FOuyYaW0tTl+dteUWOtoA2lUPrG6Wb17DxcFxBecsSA=)
2: O1kpwtflKFENDMxtFw4AMwXy_Eg.roa (hash: bFGH8x7w1VMHVR7CRYJvYNDIa0FPd2nWUvLigwhxhc4=)
3: aUl8lpeM_cK5FLKbeF7Bav-pQik.roa (hash: VJooy4RdmsLaFuxZcWrZ5R9B5jb/JnWIuGjdSyDjKws=)
4: epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl (hash: Mjkp1OvYyWyN8J4aXVdK+VNavCrO6nFjq7JrvpwpL6E=)
5: t_IFzY8Fmcbu_ECs1VYwATKRDVM.roa (hash: zPmzKv9Sv3CWVQ7tS1fG8zEgGyRJzdU51E/8+5c5c+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:f8:ae:4d:fb:cf:cd:75:9c:05:f6:ab:9a:23:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a938a935f8baf9cd933906416590d782e7287c7
Validity
Not Before: Apr 17 07:01:51 2026 GMT
Not After : Apr 18 07:01:51 2026 GMT
Subject: CN=7a22dee01a16724e1d255ff962de9a0fb7f1476b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ca:e7:49:a4:96:97:5e:20:6c:30:65:be:e4:
ba:81:d9:48:0c:77:3d:1d:aa:15:f8:88:27:32:7b:
a8:d8:7a:b3:da:f8:a4:6a:d6:92:3e:b1:be:e5:6a:
21:46:d2:1f:bc:64:51:1e:3b:e0:46:c3:6c:59:14:
93:33:a8:52:7f:bd:33:78:e9:6f:65:40:8a:14:2a:
ba:4c:e0:9a:cd:69:dd:21:25:06:bc:52:1b:fb:1a:
5e:a8:db:0d:b3:28:0d:56:3e:81:98:0e:46:6b:b8:
77:67:20:e2:e4:65:6a:60:3b:a2:aa:90:74:20:2d:
9a:4e:e2:be:59:27:31:d6:fe:52:19:02:4f:f5:09:
2c:f7:13:11:03:55:17:de:b7:cd:4e:03:ff:66:96:
44:c1:aa:7b:a2:cd:c4:36:0b:6d:23:9a:b2:87:aa:
a3:97:44:18:a5:7d:de:ff:86:b6:ee:45:b4:a5:33:
be:61:09:9a:2b:9e:67:59:d2:cd:f2:da:1d:cd:44:
da:e2:93:f8:64:7f:dd:cb:c3:0c:51:e1:c7:2b:25:
47:59:c8:fe:00:18:ef:a0:52:43:6d:69:7a:0c:6c:
14:7d:80:57:fb:01:c6:47:d7:c9:5c:33:cc:5e:99:
4f:05:d2:87:60:f1:70:cf:d8:2c:76:be:74:0e:40:
f9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:22:DE:E0:1A:16:72:4E:1D:25:5F:F9:62:DE:9A:0F:B7:F1:47:6B
X509v3 Authority Key Identifier:
keyid:7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:1c:78:4e:1d:46:cc:d8:70:38:79:ad:ac:93:b0:c2:af:81:
a8:30:6d:00:9c:77:95:3d:15:ac:7e:0f:3a:a9:a7:2a:19:ed:
d6:8c:35:b6:64:2f:88:3c:a5:cb:08:af:c3:ad:18:4f:90:84:
12:dc:f0:38:fa:93:41:83:4b:71:ec:df:51:3a:3f:82:64:e9:
80:7f:a2:bf:75:5a:10:3c:65:69:d1:29:21:bc:f7:c3:7b:8e:
df:21:d7:1d:92:93:23:56:13:4b:3e:09:43:35:67:59:2a:d1:
cc:12:2c:af:76:85:32:dd:aa:9f:85:1e:a4:ec:5a:15:18:63:
9e:75:bc:cc:83:cd:02:2a:af:59:07:f8:f4:f9:a0:44:e4:71:
f4:6e:ea:c1:77:e0:c7:b0:c5:8a:0e:4d:c3:a9:dc:cd:22:a4:
ba:06:46:49:d1:68:3f:d9:2b:0d:18:96:76:20:b6:df:b7:c4:
dc:fa:5b:6a:ed:5d:83:29:87:c0:bb:1a:97:f8:16:27:c7:6d:
9f:0b:c0:fc:28:75:19:29:0a:08:a7:a6:0e:b0:c4:4c:84:f6:
be:86:60:78:c6:55:ab:82:5b:cf:d1:03:5b:72:28:f9:dc:0e:
0c:83:5d:b5:aa:61:ef:9a:36:73:95:c8:75:b2:a7:4e:7f:b9:
e7:36:9a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:07:45 2026 by rpki-client