Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
File: S-EpiiFeXkt9HgWoX7xZHDifnd0.mft (raw, json)
Hash identifier: 3Za9YF333Yr6bRG/Vfcyh2qsbQJbeGN9zddLGtWzt8o=
Subject key identifier: 62:2C:85:BB:FD:A3:B6:16:E2:A8:A4:6F:62:7B:21:3E:AF:A0:E7:B7
Authority key identifier: 4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD
Certificate issuer: /CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd
Certificate serial: 019D38D32EF69C68A46FF70C2E17E20C6E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
Manifest number: 1568
Signing time: Sun 29 Mar 2026 09:00:57 +0000
Manifest this update: Sun 29 Mar 2026 09:00:57 +0000
Manifest next update: Mon 30 Mar 2026 09:00:57 +0000
Files and hashes: 1: S-EpiiFeXkt9HgWoX7xZHDifnd0.crl (hash: tLfw3WZWHKYTWXnKJJ9TMg/Lo7Yd+Jcr//GM7A6hg7c=)
2: ckaCM0ljBckHax5w4M6j9Dmi6Rc.roa (hash: D3AXy9P3YTGg9/JH6jTq3HL+lqbCncKHq8NI3RwK6m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:2e:f6:9c:68:a4:6f:f7:0c:2e:17:e2:0c:6e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd
Validity
Not Before: Mar 29 09:00:57 2026 GMT
Not After : Mar 30 09:00:57 2026 GMT
Subject: CN=622c85bbfda3b616e2a8a46f627b213eafa0e7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:62:11:b9:53:58:09:c6:ed:8e:11:d5:6a:31:
bb:bd:99:25:51:21:47:8b:67:7d:5d:83:33:5c:a5:
f9:9d:46:59:b4:ba:dc:eb:d0:87:9c:f1:16:cb:e8:
4b:ff:fc:77:b2:1d:e2:88:ea:04:18:c0:d9:d4:e2:
c9:7c:99:2e:30:ae:09:b8:45:cf:64:49:e7:a4:a3:
35:6a:31:8a:c4:2e:ba:db:42:1a:af:95:7a:96:d2:
ab:9f:a5:d1:7c:e6:e3:94:e2:1e:2e:71:e1:60:21:
4e:d3:34:1d:0c:74:e5:51:92:2f:a7:47:8a:b9:19:
90:82:b1:f5:a0:19:9e:dc:90:0b:68:35:9d:aa:59:
25:bc:11:c8:8e:11:fc:72:71:6e:19:2d:d1:d6:70:
47:80:9b:ec:aa:72:3c:77:ef:4c:b4:7f:a0:8e:dc:
05:58:16:06:ab:79:c0:bb:71:aa:b6:20:0e:38:5d:
1b:5d:85:c3:8c:8e:6c:af:65:da:54:9b:76:54:2e:
b2:73:8e:ab:ba:6a:1b:b3:ef:1d:d8:c3:8c:94:e6:
bc:ca:37:30:2f:43:4f:37:5f:b2:3c:96:2a:07:e7:
03:45:f6:c1:c6:7a:7c:2d:c8:b3:cf:d5:9b:1c:14:
e4:00:23:94:cc:de:97:ac:8d:88:c1:77:db:5c:e9:
0b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2C:85:BB:FD:A3:B6:16:E2:A8:A4:6F:62:7B:21:3E:AF:A0:E7:B7
X509v3 Authority Key Identifier:
keyid:4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:94:48:1f:27:dc:a9:af:8b:18:c7:8f:88:09:0f:67:ba:4a:
60:d4:ef:10:5a:49:40:3c:37:e5:d3:20:d7:a1:50:8f:86:44:
e9:b9:72:bf:8b:0a:3a:b3:90:0b:79:fe:30:2a:fc:cc:4e:67:
14:b0:eb:c9:51:2b:c6:9d:56:7f:c9:fd:08:5d:d9:08:40:76:
92:ef:6c:9a:6a:e5:2f:4e:92:d2:bb:78:92:3c:82:ec:10:94:
48:4c:d8:76:15:c8:d5:99:39:02:6d:bd:15:d7:c3:f7:91:bd:
8d:9b:a2:aa:69:3c:e9:fe:cc:33:34:0e:37:97:e7:7f:88:1a:
4e:a4:60:a2:82:a1:ed:97:b1:06:ba:10:c2:1b:0d:cc:25:39:
37:71:76:80:88:37:68:ea:4a:ee:04:12:6d:26:a1:33:94:88:
1d:cb:53:5d:a0:35:6d:8d:ad:ec:0f:3f:59:67:64:6d:cf:0c:
57:46:9f:59:24:f1:b6:91:e7:44:5c:79:64:33:82:04:ef:90:
12:d4:dc:5e:48:2e:ae:15:29:25:e8:73:30:85:4b:42:f6:5b:
d0:17:13:25:44:6b:56:2d:8d:ba:05:53:e5:ef:31:23:56:23:
ca:d5:ba:73:cb:a4:b2:bf:94:5e:43:c5:50:81:dd:cb:7b:10:
11:28:48:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:19 2026 by rpki-client