Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/ePm3BijarZOvGIoiOYKNssKcFOw.mft
File: ePm3BijarZOvGIoiOYKNssKcFOw.mft (raw, json)
Hash identifier: 7FRfo4fh+X1xpGwOAxAUThFCoLBoMazhzSO4zmkqX24=
Subject key identifier: 0E:C8:8B:E3:F5:0F:16:71:A3:52:73:DA:C4:01:AF:21:DF:F4:5A:7C
Authority key identifier: 78:F9:B7:06:28:DA:AD:93:AF:18:8A:22:39:82:8D:B2:C2:9C:14:EC
Certificate issuer: /CN=78f9b70628daad93af188a2239828db2c29c14ec
Certificate serial: 019FAC77000E2FBC7BF959A00C37E8C45846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ePm3BijarZOvGIoiOYKNssKcFOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/ePm3BijarZOvGIoiOYKNssKcFOw.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:47 +0000
Manifest this update: Wed 29 Jul 2026 06:01:47 +0000
Manifest next update: Thu 30 Jul 2026 06:01:47 +0000
Files and hashes: 1: BdwGlkaptmMT9Oh-8i7s6EZ-lCA.roa (hash: 8vib6Tz+/3825HdXsp3W0N9Y0J7CwoyzAF/LuiUg6r4=)
2: ePm3BijarZOvGIoiOYKNssKcFOw.crl (hash: i/tv7Bt9JTc3VZSUBxqPGZQ5LmbMOuScfu6CIccBCfc=)
3: hvXJQwktftb5k-sez33-2gLNy90.roa (hash: qOdKnAhQY1wXAT9d0tCrBPyjUg+jlgDeauw2jlOhLCY=)
4: lK5aoSeePB6ZndyRPiM_BJq60J0.roa (hash: 9QEXPPwUc0DPoKULU+qtdfAfIA6UqP1XKN+kslkbGBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/ePm3BijarZOvGIoiOYKNssKcFOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/ePm3BijarZOvGIoiOYKNssKcFOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ePm3BijarZOvGIoiOYKNssKcFOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:77:00:0e:2f:bc:7b:f9:59:a0:0c:37:e8:c4:58:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78f9b70628daad93af188a2239828db2c29c14ec
Validity
Not Before: Jul 29 06:01:47 2026 GMT
Not After : Jul 30 06:01:47 2026 GMT
Subject: CN=0ec88be3f50f1671a35273dac401af21dff45a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cb:f4:83:9f:b8:9a:e5:03:9f:14:32:41:f6:
f6:64:e3:99:fe:d9:bc:4c:fa:85:f2:13:9c:c0:c3:
a9:6e:fd:1f:f4:79:ed:23:fc:19:0a:ba:20:ad:4b:
12:f2:2a:89:d4:55:b7:82:0f:e8:cf:30:55:c0:04:
fb:b4:a0:20:62:d0:3d:56:18:6a:68:36:77:4a:a9:
8b:ca:fe:54:fb:c5:7e:4f:80:df:ca:2f:38:1a:4d:
97:7d:a6:74:6e:5d:6f:67:f7:2a:b6:5c:58:0b:e4:
86:26:90:0d:2c:1f:a1:35:76:0c:48:1f:35:2c:20:
8e:18:93:9b:16:dc:70:62:74:2f:9a:de:df:94:cb:
03:12:2b:c3:02:13:b0:76:03:3c:47:ef:c6:6f:d8:
6e:2a:1a:d6:da:67:10:60:dd:c8:56:41:82:0d:5b:
ed:70:e7:2c:47:02:ad:76:8f:6f:dd:8a:b1:1b:b1:
4e:ce:2c:aa:c9:cb:51:c0:13:65:32:dc:0b:ce:c0:
48:00:71:5c:e5:51:06:08:c9:11:22:e5:23:5c:53:
53:60:82:dd:47:05:92:66:62:f1:03:ca:e7:e8:94:
f6:92:df:6a:9f:f3:9a:f4:c3:e3:5b:a0:71:fb:8a:
65:e4:b3:ad:9f:3e:3d:a4:fb:36:06:ef:3e:2c:4a:
95:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C8:8B:E3:F5:0F:16:71:A3:52:73:DA:C4:01:AF:21:DF:F4:5A:7C
X509v3 Authority Key Identifier:
keyid:78:F9:B7:06:28:DA:AD:93:AF:18:8A:22:39:82:8D:B2:C2:9C:14:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePm3BijarZOvGIoiOYKNssKcFOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/ePm3BijarZOvGIoiOYKNssKcFOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/ePm3BijarZOvGIoiOYKNssKcFOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:0f:02:2f:62:0a:3e:28:96:7f:2c:0e:86:31:c2:05:b2:52:
3f:3f:2b:77:91:20:e4:b9:08:27:01:49:3e:ad:8b:5d:3f:53:
31:3f:c5:75:94:37:bb:b8:15:49:e9:77:9b:9d:f9:17:1f:51:
5c:25:7f:01:15:0c:2c:c9:04:02:4c:41:12:15:6e:92:6c:6b:
6c:9f:e4:16:3b:8d:66:04:e1:38:75:0e:c8:e1:43:3f:56:fa:
2b:4d:b4:eb:ab:c4:5f:18:a3:08:45:54:6c:e0:c6:83:35:27:
44:a4:3c:a6:9d:c9:18:fe:38:dd:55:1d:95:a2:02:5c:51:33:
e4:f4:7d:3e:ca:da:1d:ca:94:10:5e:eb:e1:e6:9b:e1:9d:ab:
0c:63:f0:8b:75:13:63:09:7a:54:0e:de:7f:bf:47:fd:52:c7:
2f:62:e8:01:f3:6a:9d:cb:e6:4e:65:a8:35:52:0e:39:99:62:
05:6b:b2:20:20:17:e1:d7:14:44:5d:6b:6c:6e:e2:31:78:5e:
a1:3c:e9:87:e6:6f:fb:8f:7f:25:8b:49:89:4b:0a:fc:36:09:
a1:ec:d4:c7:78:4b:aa:ee:14:36:0d:ca:ac:0d:a4:7a:66:a0:
e3:eb:f9:3e:98:4b:71:f7:2f:f1:df:bc:fe:68:a6:cd:c9:37:
06:a1:7d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:21:08 2026 by rpki-client