Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
File: epJLjlyQurMK5Ys1ZN2qF837EIU.mft (raw, json)
Hash identifier: 24+wIXM1paC8fOz5aMlmJcCTAzPa8ZfgMKe7FY1NraY=
Subject key identifier: B2:0F:DB:AE:08:3E:28:AD:C8:B6:71:30:EC:78:1A:86:57:88:AC:7C
Authority key identifier: 7A:92:4B:8E:5C:90:BA:B3:0A:E5:8B:35:64:DD:AA:17:CD:FB:10:85
Certificate issuer: /CN=7a924b8e5c90bab30ae58b3564ddaa17cdfb1085
Certificate serial: 019D3977B07C7C073212DC1DB46CD2C32589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 12:00:38 +0000
Manifest this update: Sun 29 Mar 2026 12:00:38 +0000
Manifest next update: Mon 30 Mar 2026 12:00:38 +0000
Files and hashes: 1: Z76nZ5nI801iAmD3AB5yQJ-rPQg.roa (hash: mySiqQ6DoaxlXWJI/8R41UPuL/Gn5DnjGC/YLKdLsNg=)
2: epJLjlyQurMK5Ys1ZN2qF837EIU.crl (hash: AcubMxfHAR7lWikfk6h6IGD92uu6djMdBzRD/pVEwJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:b0:7c:7c:07:32:12:dc:1d:b4:6c:d2:c3:25:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a924b8e5c90bab30ae58b3564ddaa17cdfb1085
Validity
Not Before: Mar 29 12:00:38 2026 GMT
Not After : Mar 30 12:00:38 2026 GMT
Subject: CN=b20fdbae083e28adc8b67130ec781a865788ac7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:05:0d:9a:2e:63:d0:c0:60:22:ea:f5:f3:78:
7c:3b:e1:26:33:dc:ff:4a:3e:bf:84:4d:74:3b:16:
c4:59:18:3a:c3:c1:5e:7d:d3:c6:fb:6e:4c:bd:df:
2f:3b:e4:15:18:19:a4:37:34:ff:d7:8b:ae:04:8b:
e6:95:be:dd:71:2d:0f:55:1a:12:01:d3:a2:73:37:
e5:a5:7b:93:94:fa:86:63:02:fa:0b:c0:ce:5d:b0:
35:df:9b:5a:c0:c0:5e:c3:21:31:a0:50:7c:27:e0:
e4:87:33:ab:ca:21:69:ec:2f:15:db:66:7a:b6:6f:
a7:ce:b3:47:42:b5:a5:2e:97:d0:84:a4:2d:6b:76:
ff:d8:38:9a:e1:5e:35:45:00:2f:b7:37:0c:77:72:
2a:01:c1:10:5c:e7:a8:f2:7b:48:5f:f9:45:54:bb:
23:75:67:ab:cb:3f:10:0b:a8:1e:95:a1:f6:e6:0f:
6f:ca:36:d0:17:46:86:a7:d6:f0:6b:29:be:21:46:
f3:b3:ae:45:5c:72:78:f3:a9:d2:a2:d5:c5:c8:06:
78:50:a5:46:38:b9:69:6a:6c:c0:d1:70:1e:49:41:
2b:c4:b5:a2:a9:0b:f3:e6:b8:4e:cd:9f:83:e7:c8:
4f:20:e6:42:19:64:ce:50:4c:21:b0:3b:aa:da:63:
52:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0F:DB:AE:08:3E:28:AD:C8:B6:71:30:EC:78:1A:86:57:88:AC:7C
X509v3 Authority Key Identifier:
keyid:7A:92:4B:8E:5C:90:BA:B3:0A:E5:8B:35:64:DD:AA:17:CD:FB:10:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:9d:14:16:1e:46:86:48:0e:46:c6:02:91:75:4a:90:aa:75:
d7:ab:b6:dc:b0:59:e4:f4:2e:47:cc:7a:48:a9:2f:05:b5:b4:
fc:df:24:84:38:3e:e6:9e:83:d1:c7:55:65:97:c5:af:3e:e5:
ce:11:78:40:8b:c5:27:0a:e5:b5:12:b5:09:19:01:97:01:c0:
6f:06:76:a8:88:10:91:30:c3:30:4b:9c:17:f7:a0:de:37:fc:
28:86:ca:d9:35:5f:99:1f:58:50:cc:50:09:37:b2:40:48:53:
93:76:0a:62:7e:27:e8:37:0f:1e:d5:db:50:db:b8:50:a7:5d:
ad:3d:9e:82:36:a8:00:f7:3a:a7:ea:91:bb:a0:c1:83:34:ad:
b4:07:a0:c8:ca:58:b9:0e:60:ea:6e:4e:36:27:9d:ea:9e:6b:
4a:b6:98:27:90:c5:35:25:e9:ba:f3:b4:f9:53:bb:13:44:6b:
6e:4e:6d:cb:e6:fe:3f:d1:1a:a8:5e:e2:78:7b:3b:3f:ee:06:
e2:b1:54:cc:24:82:8a:09:8a:e7:52:74:b6:7b:09:7c:ec:7a:
e5:81:ee:8b:5d:8e:c9:7b:71:43:5c:e9:f2:cf:25:6d:09:7c:
fe:e8:33:84:f9:19:0b:a6:a1:b2:a2:97:3b:49:a6:05:e4:b7:
ff:42:30:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d7B8fAcyEtwdtGzSwyWJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhOTI0YjhlNWM5MGJhYjMwYWU1OGIzNTY0ZGRhYTE3Y2Rm
YjEwODUwHhcNMjYwMzI5MTIwMDM4WhcNMjYwMzMwMTIwMDM4WjAzMTEwLwYDVQQD
EyhiMjBmZGJhZTA4M2UyOGFkYzhiNjcxMzBlYzc4MWE4NjU3ODhhYzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQUNmi5j0MBgIur183h8O+EmM9z/
Sj6/hE10OxbEWRg6w8FefdPG+25Mvd8vO+QVGBmkNzT/14uuBIvmlb7dcS0PVRoS
AdOiczflpXuTlPqGYwL6C8DOXbA135tawMBewyExoFB8J+DkhzOryiFp7C8V22Z6
tm+nzrNHQrWlLpfQhKQta3b/2Dia4V41RQAvtzcMd3IqAcEQXOeo8ntIX/lFVLsj
dWeryz8QC6gelaH25g9vyjbQF0aGp9bwaym+IUbzs65FXHJ486nSotXFyAZ4UKVG
OLlpamzA0XAeSUErxLWiqQvz5rhOzZ+D58hPIOZCGWTOUEwhsDuq2mNSiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIP264IPiityLZxMOx4GoZXiKx8MB8GA1UdIwQY
MBaAFHqSS45ckLqzCuWLNWTdqhfN+xCFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXBKTGpseVF1ck1LNVlzMVpOMnFGODM3RUlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS83YTkyNzktNjlmNS00YTA5LThjYWUt
ZWRiMzBiMDJiNWJhLzEvZXBKTGpseVF1ck1LNVlzMVpOMnFGODM3RUlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS83YTkyNzktNjlmNS00YTA5LThjYWUtZWRiMzBiMDJiNWJh
LzEvZXBKTGpseVF1ck1LNVlzMVpOMnFGODM3RUlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJ0UFh5G
hkgORsYCkXVKkKp116u23LBZ5PQuR8x6SKkvBbW0/N8khDg+5p6D0cdVZZfFrz7l
zhF4QIvFJwrltRK1CRkBlwHAbwZ2qIgQkTDDMEucF/eg3jf8KIbK2TVfmR9YUMxQ
CTeyQEhTk3YKYn4n6DcPHtXbUNu4UKddrT2egjaoAPc6p+qRu6DBgzSttAegyMpY
uQ5g6m5ONied6p5rSraYJ5DFNSXpuvO0+VO7E0Rrbk5ty+b+P9EaqF7ieHs7P+4G
4rFUzCSCigmK51J0tnsJfOx65YHui12OyXtxQ1zp8s8lbQl8/ugzhPkZC6ahsqKX
O0mmBeS3/0IwxA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:44 2026 by rpki-client