Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft
File: ePsJmqQwgayDle4LkMzxqIRPjWQ.mft (raw, json)
Hash identifier: 61X7R6mRyJHl/ZEXLSsgsHQfCjcfOwDuMJPr8hTfHik=
Subject key identifier: 96:0D:64:56:07:8E:6C:11:E1:1A:59:4D:01:EA:CA:EF:D4:15:4C:47
Authority key identifier: 78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64
Certificate issuer: /CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64
Certificate serial: 019D9A74963AF0384E7C15FDEF31688B4CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft
Manifest number: 1020
Signing time: Fri 17 Apr 2026 08:00:25 +0000
Manifest this update: Fri 17 Apr 2026 08:00:25 +0000
Manifest next update: Sat 18 Apr 2026 08:00:25 +0000
Files and hashes: 1: QbuCVG1sfh_qrKSvUTqqkkFtShU.roa (hash: vVlbCWR3CeEofOXACZ7iuxfcagqufnEEze+JXa0aiW8=)
2: UaN_1fjhpEGb9PtMuS2VXdx_MDY.roa (hash: Iztx2alVydZOs1RecbqbrO4/NgXon+AnLrachil2CRY=)
3: WrADKUB6oNgRudH0eNNDASCTWGs.roa (hash: 6wA2NVUu2434Y8q07bK3lOi84PICECNqgtQRT6NlYII=)
4: ePsJmqQwgayDle4LkMzxqIRPjWQ.crl (hash: ehlxUldlN7eKAuN2noYLjFJHBYcyKdjAPWzFcY0kz68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:96:3a:f0:38:4e:7c:15:fd:ef:31:68:8b:4c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64
Validity
Not Before: Apr 17 08:00:25 2026 GMT
Not After : Apr 18 08:00:25 2026 GMT
Subject: CN=960d6456078e6c11e11a594d01eacaefd4154c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8e:31:70:30:1f:f7:5e:bf:b1:b8:06:c3:ef:
e1:8b:d5:e6:66:0f:1d:b4:a0:50:9d:f8:7d:92:52:
d5:dc:23:6b:e4:f4:1d:ca:13:e8:00:df:a0:e8:36:
0c:22:00:71:76:e2:86:96:7b:4a:b7:cc:84:5d:30:
05:42:5a:dd:97:ea:70:5d:e2:d0:1e:dd:84:7d:df:
72:b3:d7:72:d7:ab:5b:ce:03:7c:c2:41:54:23:58:
73:42:6a:f6:43:b8:d7:6f:e7:97:f3:4f:6f:98:9a:
45:33:f1:a2:ee:c2:7e:9c:49:63:42:22:b6:83:eb:
56:01:c0:d3:d5:f7:1a:c3:8b:db:74:be:d0:ba:cb:
90:0f:d0:19:95:dc:30:13:9b:c7:33:bc:4a:45:cd:
ed:eb:15:67:d8:68:2d:38:56:94:d0:6f:32:fd:df:
20:ac:f7:15:cf:fe:45:4c:68:b0:86:a3:2c:54:c0:
69:0e:49:50:51:73:31:89:fe:bb:7a:c2:63:24:38:
4f:b5:10:df:93:e5:4b:71:55:79:4f:f9:fb:a1:ee:
17:e7:66:fc:2f:68:90:d6:a5:b9:fa:df:d3:99:c1:
54:f0:18:f7:95:86:50:61:3c:78:85:d1:6d:3f:64:
a8:ab:63:b8:c8:c8:55:e9:99:fc:39:23:fa:30:18:
d4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0D:64:56:07:8E:6C:11:E1:1A:59:4D:01:EA:CA:EF:D4:15:4C:47
X509v3 Authority Key Identifier:
keyid:78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:9c:49:35:fa:5f:3b:e2:6b:89:79:5e:d0:7a:f3:b4:6e:f1:
0d:08:75:51:4b:f6:db:e9:fe:fc:a0:73:fa:27:6c:32:ac:b3:
3b:98:b9:fe:76:0d:6a:cf:0f:01:d8:c8:11:94:67:25:6d:a8:
29:c2:c6:cd:f5:09:4b:5f:86:5f:19:cf:a8:43:41:ca:fd:eb:
b5:cc:ee:ee:b7:5b:60:00:c3:36:e3:32:cc:58:57:08:99:e4:
d8:bb:d4:b9:06:23:5d:f0:82:42:59:70:f5:70:09:1e:8f:2f:
0d:52:93:0c:fe:80:68:89:ee:6c:ff:a6:51:b2:c4:60:2c:64:
8e:51:39:b6:9d:59:1e:a4:b2:9b:40:bb:f4:60:11:a1:0b:f2:
26:2b:42:5d:f4:bd:f1:e3:a6:9d:85:91:04:6a:2d:c7:50:85:
d7:ee:1d:2d:2a:e5:07:52:d0:36:04:a4:9c:9f:93:e7:0f:68:
e8:41:d0:d5:d4:50:88:e2:fc:c3:49:e1:6a:f0:9a:54:0c:25:
bb:fb:de:cf:2e:61:54:4b:a5:66:1e:46:81:14:47:b6:a9:7a:
77:ae:94:03:0d:a9:99:0e:51:51:dd:8c:53:91:c0:2d:44:7e:
38:1b:f6:07:fc:f5:d0:68:46:37:bb:49:59:d4:b8:52:a3:4f:
50:5a:fc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:33:15 2026 by rpki-client