
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
File: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft (raw, json)
Hash identifier: 1U2PrjnICpBm+uBZhoNIivBtWiP0BthKCWHMLb0xqNY=
Subject key identifier: AC:98:BD:C1:1C:67:D4:BF:2A:ED:51:57:73:42:D1:95:16:9E:A8:FE
Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Certificate issuer: /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Certificate serial: 01A15AB06103C65931E851EBCA9D3D71FE14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
Manifest number: 172B
Signing time: Tue 20 Oct 2026 19:01:10 +0000
Manifest this update: Tue 20 Oct 2026 19:01:10 +0000
Manifest next update: Wed 21 Oct 2026 19:01:10 +0000
Files and hashes: 1: WVAJdgjbItg7Mo643n_cLFQt5QM.roa (hash: wQEt73D3Ylc7pRRWF2c8VCcNEdJAA1g1dE2/T5MxO+A=)
2: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl (hash: zDXMgi5oJxdAGFotR4oJKFXlLQbTglFwhRevAUK9WLA=)
3: ifkhfkR12chdZx40iDC75Z6ZvtI.roa (hash: VCtx1LYyqYZzs+BoTifxqmMrsa75EWc9KzbMGXKx/XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:b0:61:03:c6:59:31:e8:51:eb:ca:9d:3d:71:fe:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Validity
Not Before: Oct 20 19:01:10 2026 GMT
Not After : Oct 21 19:01:10 2026 GMT
Subject: CN=ac98bdc11c67d4bf2aed51577342d195169ea8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:99:b9:5c:59:c3:5c:3c:fb:2e:0d:93:ff:13:
f8:23:22:86:5a:35:12:d0:27:ea:27:9b:a2:87:36:
6c:19:82:63:66:fb:d0:44:b5:dc:46:be:9f:ca:81:
a4:e4:c3:96:3b:b1:a8:d6:c5:ac:0e:f9:7f:64:f5:
e3:56:bf:c0:8f:96:41:08:49:e6:53:74:9a:93:6c:
23:13:eb:13:8b:79:b6:27:4b:32:85:b7:de:50:84:
22:da:0f:f6:52:46:6a:9b:d9:51:ef:b2:bd:ad:51:
57:66:f4:af:a8:85:27:42:11:af:84:68:bf:fe:7e:
00:2d:00:44:79:5e:a9:8e:86:89:34:50:96:03:9c:
82:59:dc:36:91:09:d1:f3:f9:3e:7f:d9:17:5d:24:
ab:f1:09:78:95:3b:a1:05:d7:66:7d:a2:d0:05:29:
d5:7c:6b:49:c2:b8:58:16:b5:3f:9b:93:ae:aa:ea:
7b:18:f6:cd:04:8d:b4:55:11:02:25:dd:58:64:83:
12:d7:7e:4a:5c:d4:e2:e4:24:6b:2c:2f:84:51:cd:
fe:29:b9:1c:48:81:0a:c1:20:63:ff:cb:46:86:32:
b5:92:0d:1c:c5:79:26:e3:9d:38:bd:f1:4f:6e:4f:
73:5b:c3:18:bd:5d:a6:70:95:05:d3:a2:76:38:df:
75:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:98:BD:C1:1C:67:D4:BF:2A:ED:51:57:73:42:D1:95:16:9E:A8:FE
X509v3 Authority Key Identifier:
keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:41:5e:10:2a:7b:c0:f1:a2:18:4e:bc:ba:27:f5:6f:53:1c:
4e:11:d5:8d:1c:be:70:e5:6d:22:87:99:2c:90:0f:b3:f2:52:
93:43:4e:8a:77:0d:de:89:95:60:9d:66:e5:77:90:b3:67:e3:
63:d4:6e:06:0d:54:66:e1:55:26:17:84:09:d1:a5:33:ba:8b:
aa:7b:1a:d5:05:b1:6a:2c:46:75:6f:93:ae:95:9d:c2:59:84:
4e:26:80:42:6d:51:39:00:b5:62:4b:2f:fa:6c:e5:16:d8:d3:
57:10:80:b3:18:87:8f:65:5b:f7:89:bf:be:be:03:25:b9:a6:
2f:33:1b:d0:99:fe:1b:31:13:65:4e:8c:a7:7d:a9:73:40:29:
18:de:4d:6f:5c:1b:90:00:8c:cc:d6:ea:af:b1:04:24:86:81:
c4:cb:ef:7f:86:4b:48:86:03:65:99:55:a0:46:9e:b3:e0:1a:
44:88:04:06:dd:70:62:59:79:6b:c3:e7:0d:08:59:4d:ab:a8:
98:14:6d:93:1b:46:1f:5c:73:50:45:58:a4:0d:a9:5c:a3:c8:
23:ea:67:74:d8:32:1b:ef:86:81:83:65:e2:15:0f:43:50:2f:
1c:c9:69:40:0f:07:88:94:92:65:37:78:e7:a6:98:3d:4a:48:
0c:2c:8b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 02:55:39 2026 by rpki-client