Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
File: epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft (raw, json)
Hash identifier: RcEo2VsqINUMdnSXVkyS0Xz6iMHDfLytFTXGXnhf2fw=
Subject key identifier: 42:20:8B:2E:3F:E2:55:4E:FB:DF:89:11:E6:71:3D:0B:07:D7:EA:AA
Authority key identifier: 7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
Certificate issuer: /CN=7a938a935f8baf9cd933906416590d782e7287c7
Certificate serial: 019FA974E47F1C2FC31275070EF58CDEE51B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 16:00:37 +0000
Manifest this update: Tue 28 Jul 2026 16:00:37 +0000
Manifest next update: Wed 29 Jul 2026 16:00:37 +0000
Files and hashes: 1: BEwSGx2LrGrF0sGwEj968AwEhBQ.roa (hash: FOuyYaW0tTl+dteUWOtoA2lUPrG6Wb17DxcFxBecsSA=)
2: O1kpwtflKFENDMxtFw4AMwXy_Eg.roa (hash: bFGH8x7w1VMHVR7CRYJvYNDIa0FPd2nWUvLigwhxhc4=)
3: aUl8lpeM_cK5FLKbeF7Bav-pQik.roa (hash: VJooy4RdmsLaFuxZcWrZ5R9B5jb/JnWIuGjdSyDjKws=)
4: epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl (hash: XAaG0lk1F93zkRzIkevu5Gm2GZTjJCY9PMptJPz3t0Y=)
5: t_IFzY8Fmcbu_ECs1VYwATKRDVM.roa (hash: zPmzKv9Sv3CWVQ7tS1fG8zEgGyRJzdU51E/8+5c5c+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:e4:7f:1c:2f:c3:12:75:07:0e:f5:8c:de:e5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a938a935f8baf9cd933906416590d782e7287c7
Validity
Not Before: Jul 28 16:00:37 2026 GMT
Not After : Jul 29 16:00:37 2026 GMT
Subject: CN=42208b2e3fe2554efbdf8911e6713d0b07d7eaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c0:c2:5e:9b:6c:b2:3c:8a:5a:e0:65:45:95:
d3:46:52:fe:80:2c:ce:b2:c9:3b:66:db:72:32:03:
f8:65:3c:e0:26:eb:23:ed:8f:a3:93:75:5f:c9:9a:
eb:98:ef:cd:ba:57:5a:0f:7a:f6:4c:ec:d3:56:de:
cd:09:23:39:d9:d3:5e:0c:81:d2:16:bc:27:5f:83:
b0:2f:a8:13:02:47:e8:a5:35:e0:6e:3e:f0:87:bb:
4c:52:de:6e:02:22:5f:16:cf:66:d1:3e:74:8a:c9:
45:29:5f:2a:1a:f2:2b:73:68:f9:10:0a:64:c2:4c:
a1:62:65:98:5a:d9:8f:8e:db:de:8b:b8:a1:24:3d:
0f:e0:ee:27:7a:52:12:fe:b1:06:0e:b8:fa:53:75:
85:94:be:c0:56:5c:18:6e:d0:d1:aa:01:e4:01:06:
68:92:41:9f:9a:f5:07:d8:8c:f2:4f:db:06:32:81:
e0:fc:5f:11:2e:0f:af:eb:fd:61:47:e4:3e:4f:87:
84:93:1a:29:ef:6f:c8:d7:6e:9d:94:ae:bf:63:d7:
69:d5:c1:cf:81:d6:70:9b:f6:e7:06:f8:6f:b2:23:
aa:58:d3:c6:07:db:8f:1c:dd:36:b9:82:c0:92:33:
7d:a5:e0:83:df:dd:cb:70:79:00:85:07:57:f8:93:
58:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:20:8B:2E:3F:E2:55:4E:FB:DF:89:11:E6:71:3D:0B:07:D7:EA:AA
X509v3 Authority Key Identifier:
keyid:7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:69:3e:e7:e9:0c:e4:d6:30:64:5a:40:e8:62:23:3d:78:80:
8c:65:6b:38:2e:d3:7b:93:58:ec:3f:7b:9d:26:5d:e6:5c:01:
5f:61:88:28:9c:a2:2e:49:ce:68:01:9c:58:30:ba:5c:c5:3f:
64:2e:17:a2:fb:b2:d8:29:7c:ea:4a:e8:e5:dc:21:45:74:b7:
ed:84:47:56:c4:90:13:ba:ea:66:c7:3c:d1:90:16:cc:6c:79:
47:69:8e:eb:eb:c0:d9:9b:1c:59:87:64:03:7c:93:7f:4d:75:
40:53:dd:69:78:e2:c9:7b:b0:1a:4e:6d:a2:c5:e3:d3:90:13:
9f:6a:c1:29:ca:0b:3a:ad:00:01:20:6e:b5:ea:87:87:b6:21:
df:bf:b0:38:80:fa:5a:9e:c6:37:75:47:41:b3:0a:1e:f7:16:
4d:62:2b:88:3a:7b:f1:ad:b5:d6:a4:2e:d2:f1:8f:cd:e7:0b:
2b:af:ca:58:2a:56:0e:13:33:ec:ea:d1:de:4a:e6:0f:49:c3:
78:dd:52:89:94:d5:85:19:32:cd:93:36:97:83:2a:32:df:cf:
a7:7e:ca:13:53:d8:a9:67:73:d5:96:52:67:d4:84:54:49:2a:
47:71:fe:0f:8c:f6:53:b0:75:f9:63:e5:03:47:61:1d:e9:e0:
00:81:8d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:34:27 2026 by rpki-client