Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
File: 1-EplWZr7nYcnw9uUfv-64uW4U9E.mft (raw, json)
Hash identifier: HAsEaNpJrUBoBM1kya6XEyIUkFEIV+bsNtQrvQyjC1A=
Subject key identifier: 0F:4B:0A:2B:5A:81:C3:D6:FB:FB:19:F6:B3:E5:28:3E:28:17:7E:11
Authority key identifier: F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1
Certificate issuer: /CN=f84a65599afb9d8727c3db947effbae2e5b853d1
Certificate serial: 019E30720713903B4A31ED0916C6840808E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
Manifest number: 0EAF
Signing time: Sat 16 May 2026 11:00:39 +0000
Manifest this update: Sat 16 May 2026 11:00:39 +0000
Manifest next update: Sun 17 May 2026 11:00:39 +0000
Files and hashes: 1: 1-EplWZr7nYcnw9uUfv-64uW4U9E.crl (hash: GU71JlowFhMzjNEpM6h/coQNshnnYdFubrEyKsApkBc=)
2: PYSOuEJKXfFv96PrgahNaZWMo90.roa (hash: 1YHoKoxpfqieDN1YXiLCsR8fSH3v1YL6XK2N4m5fa+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:07:13:90:3b:4a:31:ed:09:16:c6:84:08:08:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84a65599afb9d8727c3db947effbae2e5b853d1
Validity
Not Before: May 16 11:00:39 2026 GMT
Not After : May 17 11:00:39 2026 GMT
Subject: CN=0f4b0a2b5a81c3d6fbfb19f6b3e5283e28177e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:da:26:fc:37:af:fc:46:8d:76:22:57:71:5a:
8a:ec:a7:af:6a:b0:27:cb:62:94:e0:c9:e8:19:1a:
2c:d8:63:5d:59:b8:a6:81:02:b5:ab:5b:66:eb:0b:
68:20:ac:69:3b:2b:ee:90:ba:8c:31:a5:43:d2:d4:
dd:4a:73:05:8c:8c:e1:5b:f6:a1:11:6b:13:a1:a3:
40:e6:e3:b2:c8:08:ad:24:b4:b9:9c:70:b7:e8:f1:
52:9e:fc:52:34:ee:fe:18:ac:f5:c5:4d:d4:d0:d9:
11:41:90:6c:4b:15:94:75:ff:ee:4a:eb:e9:62:44:
7b:71:a1:cb:2b:40:3a:d2:78:97:be:4b:b5:7b:fd:
11:2f:3b:dc:93:2a:5c:97:77:10:3c:92:3d:c6:9f:
d5:46:66:d3:d8:4f:fc:74:bf:a1:f9:20:a6:8b:d1:
72:fb:8d:69:a8:73:8d:3b:3d:27:49:7c:72:93:0f:
ab:38:1c:f4:73:d0:3f:35:55:ac:0a:2b:48:ee:d8:
05:c3:3a:2f:dd:a6:70:ce:e1:43:23:5b:ff:c7:c6:
52:49:fd:60:73:e2:4b:f2:98:71:55:31:39:8d:12:
75:66:3b:33:68:b5:9a:fc:c7:e2:92:d8:8e:90:98:
c9:36:45:bb:e2:76:7a:dc:78:69:89:c1:5c:6c:40:
4e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4B:0A:2B:5A:81:C3:D6:FB:FB:19:F6:B3:E5:28:3E:28:17:7E:11
X509v3 Authority Key Identifier:
keyid:F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9e:ab:02:cf:09:74:e1:ed:c9:e0:4a:d6:e9:90:96:89:e3:
07:7d:cf:9e:35:ca:ea:1d:5a:d6:12:19:e4:f0:0c:11:dc:32:
a1:fe:f2:b7:f6:2d:26:cd:12:96:87:28:8b:e3:64:93:55:0b:
24:52:73:15:0a:7e:a6:a1:8f:b8:98:cd:90:ed:6e:b0:b8:c1:
48:18:99:f8:c9:2b:aa:45:2c:59:96:5a:ef:d2:f2:e9:48:df:
78:0b:5b:a4:e0:28:05:87:f8:8e:c3:4c:97:8f:17:06:19:4b:
04:62:72:54:7b:2b:0d:73:55:1f:a8:1c:14:20:be:2d:c7:93:
9f:a8:c3:93:fc:68:69:e6:71:f6:98:b3:98:88:63:e7:5d:f5:
f8:07:9e:26:93:75:0b:ae:09:b4:94:aa:e1:3e:fb:42:13:fa:
f9:01:79:18:83:50:9b:30:49:29:dc:b0:03:fc:a7:0b:b1:82:
8f:ff:2b:60:65:bc:0e:17:a4:0b:00:73:80:97:43:9f:61:af:
b7:63:ba:b7:b4:3f:60:df:67:54:33:11:65:d8:46:70:ac:91:
50:dd:c3:c0:72:e8:64:8e:2a:d5:a7:aa:1d:70:1a:bc:4d:63:
36:ae:aa:a5:75:56:cd:97:ef:23:d1:26:1c:d0:7d:34:72:2c:
9a:b1:4d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:29 2026 by rpki-client