Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
File: epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft (raw, json)
Hash identifier: onAGdIbjAtoLnMqg1NT5HxmnACs9iTl5oE9o853+oSA=
Subject key identifier: 01:F5:FF:9B:FE:D2:A0:F2:59:32:94:E7:54:6A:45:FB:78:81:33:85
Authority key identifier: 7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
Certificate issuer: /CN=7a938a935f8baf9cd933906416590d782e7287c7
Certificate serial: 019F82D58A940E1D244117C9D06092A6E370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
Manifest number: 19BE
Signing time: Tue 21 Jul 2026 04:01:00 +0000
Manifest this update: Tue 21 Jul 2026 04:01:00 +0000
Manifest next update: Wed 22 Jul 2026 04:01:00 +0000
Files and hashes: 1: BEwSGx2LrGrF0sGwEj968AwEhBQ.roa (hash: FOuyYaW0tTl+dteUWOtoA2lUPrG6Wb17DxcFxBecsSA=)
2: O1kpwtflKFENDMxtFw4AMwXy_Eg.roa (hash: bFGH8x7w1VMHVR7CRYJvYNDIa0FPd2nWUvLigwhxhc4=)
3: aUl8lpeM_cK5FLKbeF7Bav-pQik.roa (hash: VJooy4RdmsLaFuxZcWrZ5R9B5jb/JnWIuGjdSyDjKws=)
4: epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl (hash: sQzvKPVlwkdnxBiN7h/W/J991r3lK4vyB62rTXI31IY=)
5: t_IFzY8Fmcbu_ECs1VYwATKRDVM.roa (hash: zPmzKv9Sv3CWVQ7tS1fG8zEgGyRJzdU51E/8+5c5c+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:d5:8a:94:0e:1d:24:41:17:c9:d0:60:92:a6:e3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a938a935f8baf9cd933906416590d782e7287c7
Validity
Not Before: Jul 21 04:01:00 2026 GMT
Not After : Jul 22 04:01:00 2026 GMT
Subject: CN=01f5ff9bfed2a0f2593294e7546a45fb78813385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8b:90:6d:c5:44:eb:23:7b:01:82:26:30:ca:
62:62:aa:ce:bb:43:6b:c3:c3:01:6d:2b:21:5c:f0:
3f:04:81:c2:52:6f:d7:6d:e0:bd:fd:b3:ea:79:fa:
23:d1:2c:af:98:7f:42:80:28:9f:8f:08:9e:73:e8:
32:df:c7:df:c1:76:5a:ce:10:43:b2:88:9f:c7:49:
f2:a3:5e:c8:d5:8c:be:64:c9:a5:f6:8c:18:e6:6d:
5d:5b:21:d9:ee:8e:0a:c3:e8:3b:62:14:9a:99:2d:
81:24:73:c8:24:9e:11:fa:b5:75:cd:d7:17:29:68:
18:0a:04:8a:1a:51:8b:50:2e:14:d0:d1:01:7f:98:
14:b4:1d:5c:fa:3b:45:37:78:65:e6:cb:1d:45:24:
d9:72:0a:a6:ee:0c:2a:ae:12:7f:89:e5:51:06:e7:
e7:9a:b3:29:80:a5:ef:d0:40:dd:23:fc:00:87:23:
bc:a7:55:4c:18:8e:3b:f7:9f:cd:c3:e3:27:b4:04:
39:0c:61:6c:3a:fe:55:d7:fc:78:4f:f4:ff:9b:63:
1a:8e:ab:3d:4a:00:96:c8:3a:99:8a:56:77:9a:4d:
c3:8c:40:e9:b7:c1:56:29:f7:8c:53:02:f7:bb:bf:
30:1b:3c:e3:df:63:b0:f7:c3:f9:c1:ec:58:0c:2d:
5a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F5:FF:9B:FE:D2:A0:F2:59:32:94:E7:54:6A:45:FB:78:81:33:85
X509v3 Authority Key Identifier:
keyid:7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:82:b0:fa:86:3d:64:42:0d:e9:6a:df:85:2c:90:e3:64:ad:
2a:4e:6d:68:da:54:32:af:60:79:ee:b3:15:c6:aa:7d:b0:bf:
ab:e5:d3:a3:77:c3:ef:c2:32:8c:35:75:40:07:10:5b:81:cf:
06:55:b2:ed:93:f9:26:cb:a0:6c:61:60:b2:d4:93:75:02:2f:
8c:e6:b0:43:68:f4:6b:dd:dc:ff:ba:4f:4b:68:de:e5:3a:c0:
c4:8d:53:91:11:07:7f:b1:e4:d1:15:09:93:aa:49:48:d8:c0:
29:cd:6a:8f:0f:ba:4b:e9:45:1c:51:2a:0e:bf:6d:a9:a2:d6:
39:80:ab:1b:a1:4f:21:c3:05:eb:a5:74:2b:76:7d:cb:03:2a:
74:00:c8:31:62:c9:1a:93:f4:41:1a:b6:65:92:9f:55:0b:fc:
57:38:20:31:af:f0:1e:c8:8e:1d:2c:21:d6:48:9b:07:b0:45:
4e:da:4c:83:0d:18:dd:06:b8:1b:5e:3d:56:aa:4e:e2:b2:24:
ca:f4:f8:7b:67:4a:5e:a5:19:da:ac:0f:9f:e8:40:c3:fc:35:
7c:d9:b7:25:37:e8:fa:a1:b1:0b:18:5c:fa:6a:6f:e6:63:94:
d6:2a:f4:f9:b7:e3:e5:c2:f3:a9:b1:59:52:92:a1:7e:db:e0:
a0:9a:49:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:08:29 2026 by rpki-client