Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
File: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft (raw, json)
Hash identifier: qUgySYqcjAm/10EEq5HwWDOmoxs0ypokecVhyjTZNTU=
Subject key identifier: B1:B1:6F:6F:B6:41:C5:42:DA:F3:3D:2A:B6:8F:B1:CF:BD:7C:71:8F
Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Certificate issuer: /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Certificate serial: 01A06F16404EBCA72056B5DFC955E689392B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
Manifest number: 16B1
Signing time: Sat 05 Sep 2026 01:02:04 +0000
Manifest this update: Sat 05 Sep 2026 01:02:04 +0000
Manifest next update: Sun 06 Sep 2026 01:02:04 +0000
Files and hashes: 1: WVAJdgjbItg7Mo643n_cLFQt5QM.roa (hash: wQEt73D3Ylc7pRRWF2c8VCcNEdJAA1g1dE2/T5MxO+A=)
2: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl (hash: rec3AyeSo0lLx5vpMIA4kg6PLq7lYjQhFdmA+g4tQHQ=)
3: ifkhfkR12chdZx40iDC75Z6ZvtI.roa (hash: VCtx1LYyqYZzs+BoTifxqmMrsa75EWc9KzbMGXKx/XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:16:40:4e:bc:a7:20:56:b5:df:c9:55:e6:89:39:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Validity
Not Before: Sep 5 01:02:04 2026 GMT
Not After : Sep 6 01:02:04 2026 GMT
Subject: CN=b1b16f6fb641c542daf33d2ab68fb1cfbd7c718f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cc:72:b5:dd:4a:8a:aa:53:4e:9e:8c:f1:61:
6e:10:21:89:24:d8:d8:36:02:bd:d3:84:4b:0c:b6:
cd:e8:0f:b1:cc:04:ca:42:16:c9:d0:41:e8:04:c6:
ce:b4:f3:25:1d:35:76:23:d1:fe:a4:1e:0b:69:0b:
bf:44:d3:b1:b7:b3:70:c3:84:cb:07:b2:bc:e8:2e:
ed:1e:6a:2a:36:5b:40:b4:5e:0d:41:da:9f:8a:93:
d6:71:e4:a1:43:9a:27:0e:ad:0f:17:61:64:59:c6:
18:f5:b9:f3:db:66:d8:ab:02:ac:46:d3:6f:44:73:
a9:6e:c7:13:5a:17:6e:c2:47:06:0d:90:ca:7a:dc:
7b:3e:99:6a:6f:76:b9:de:2d:47:66:ad:8f:d4:d6:
e1:12:bd:8d:69:dd:83:71:ab:f7:50:3d:02:0a:49:
2c:8d:e0:9c:16:ac:b6:07:58:6e:89:71:28:9f:b7:
be:ec:7d:e2:02:d9:54:57:95:6f:c5:a5:9b:6f:29:
1e:66:ea:3a:16:a3:ca:d0:03:33:d3:02:84:05:22:
e9:35:d0:4f:4d:e1:35:05:2a:bb:7e:7a:85:92:37:
d2:f1:53:a3:31:0e:78:ed:4f:8b:1b:8e:75:ff:fb:
22:aa:85:a9:a5:6b:29:00:2c:ba:09:53:dc:47:d2:
8e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B1:6F:6F:B6:41:C5:42:DA:F3:3D:2A:B6:8F:B1:CF:BD:7C:71:8F
X509v3 Authority Key Identifier:
keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:3a:2f:4c:ad:4a:46:62:cb:75:88:d2:29:eb:22:ba:bd:2b:
a4:66:9f:1b:c3:da:31:88:cb:27:5e:ac:50:04:cf:9f:06:58:
c2:31:5f:4d:ac:ba:5d:42:cb:b8:ea:06:0e:46:9c:c2:26:19:
a0:5c:7f:02:c6:61:19:bd:ff:09:00:1c:51:c0:f1:80:f0:53:
ce:d5:52:b9:d8:2a:31:0f:fb:de:ad:35:fd:b7:15:94:58:92:
b7:97:ba:2e:a9:0c:2f:ce:2d:cc:59:12:f5:31:89:5a:37:5b:
8a:2c:1d:40:b7:f7:51:8a:ee:b5:bf:71:2c:aa:45:f9:ee:a6:
9c:b9:26:eb:91:b2:2b:f1:9d:1a:e1:eb:93:1f:e9:1b:cd:95:
93:b4:fc:f2:e5:ce:aa:21:a7:aa:6e:20:00:b6:66:30:31:4e:
c9:83:db:6f:a6:03:e6:a2:df:6d:3c:09:d1:72:5c:d3:f6:2a:
34:82:8b:91:2b:b8:70:d7:62:02:b2:16:e5:19:62:db:91:f8:
ab:5b:30:5d:d0:30:24:98:52:ce:83:be:12:88:87:f3:b6:0d:
9c:32:53:85:fc:8d:5a:2e:28:74:12:ee:d4:a2:ab:32:cf:ac:
43:5a:6e:84:f8:99:32:20:58:29:88:8a:50:2a:55:07:0b:08:
79:51:b3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:06:27 2026 by rpki-client