Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
File: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft (raw, json)
Hash identifier: jXVY5SoOLncZydFvRQiE/cNPMuiIABj9blC37r2h49o=
Subject key identifier: 3E:2C:BF:44:AA:60:65:8B:A3:37:84:97:5A:3B:23:3A:BC:2A:D6:2D
Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Certificate issuer: /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Certificate serial: 019DB020F196293575E803700617B6908A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
Manifest number: 1545
Signing time: Tue 21 Apr 2026 13:00:42 +0000
Manifest this update: Tue 21 Apr 2026 13:00:42 +0000
Manifest next update: Wed 22 Apr 2026 13:00:42 +0000
Files and hashes: 1: WVAJdgjbItg7Mo643n_cLFQt5QM.roa (hash: wQEt73D3Ylc7pRRWF2c8VCcNEdJAA1g1dE2/T5MxO+A=)
2: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl (hash: 0B2DNbYNjnC+TI4wwKf9k/qgfs676FeWPNmVfxAIE7Q=)
3: ifkhfkR12chdZx40iDC75Z6ZvtI.roa (hash: VCtx1LYyqYZzs+BoTifxqmMrsa75EWc9KzbMGXKx/XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:20:f1:96:29:35:75:e8:03:70:06:17:b6:90:8a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Validity
Not Before: Apr 21 13:00:42 2026 GMT
Not After : Apr 22 13:00:42 2026 GMT
Subject: CN=3e2cbf44aa60658ba33784975a3b233abc2ad62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fc:7c:73:1a:73:2c:51:7b:cf:7a:13:b7:f7:
61:57:5c:ec:da:a2:8c:62:ec:f4:a1:dd:0d:bd:9a:
17:58:de:56:4c:fe:91:a2:0d:37:d8:5c:6a:7f:e1:
a1:0e:09:03:a0:67:d6:1f:5c:15:56:7e:e5:7f:19:
68:a5:d4:2a:9d:ee:a6:87:06:2e:2b:cb:05:33:16:
97:c7:ec:1a:ac:78:db:12:3e:ed:e4:5d:d2:d3:4b:
f5:ac:30:d3:73:dc:3f:55:cb:c7:8d:40:a7:84:04:
c5:64:a3:b1:41:95:c2:1b:da:32:a9:85:7c:d4:70:
e0:28:9e:09:8c:92:f7:3d:ae:bc:59:d2:2d:e9:03:
13:a6:15:6d:c0:cd:d3:05:03:74:a7:28:20:5d:28:
2f:d3:e5:6f:cf:f7:a0:30:6d:0b:77:ee:73:fd:c0:
6e:48:13:b3:01:bb:d5:3c:bd:e3:4d:d1:ee:20:84:
aa:f3:25:de:e0:ef:7a:e2:60:99:e1:74:e1:b5:f4:
f1:08:81:4a:d6:8f:a9:5f:0d:dd:d9:7b:20:04:f2:
11:0c:06:02:d2:76:0d:76:95:70:ce:ac:99:79:e4:
91:64:c4:c1:c2:b8:3a:c0:d3:81:2c:ac:21:8c:8f:
58:92:36:c0:5c:32:3e:0f:27:56:96:aa:cf:b9:c6:
58:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2C:BF:44:AA:60:65:8B:A3:37:84:97:5A:3B:23:3A:BC:2A:D6:2D
X509v3 Authority Key Identifier:
keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:82:d0:37:d1:f4:0a:b6:70:22:e1:d8:63:6a:48:32:0e:80:
c7:7f:25:64:aa:13:31:78:ec:d7:b5:c0:1a:0c:7c:9a:0f:97:
9f:d6:d5:17:d9:1f:e7:64:7e:f8:01:0c:1c:13:e7:ad:ad:0e:
e8:fd:3c:f0:e8:c5:1e:fe:52:9f:99:e7:8d:a9:d6:6e:62:de:
92:d0:24:8e:8c:de:e6:13:c6:8e:c2:e1:b5:f9:93:5a:e3:f4:
dd:eb:cd:a9:e3:df:43:23:8d:39:e3:b5:63:ca:4a:d4:93:6d:
3d:4b:58:6b:2b:36:5d:67:08:19:06:2e:d1:cf:3c:92:d5:eb:
06:61:37:48:79:83:ed:60:23:09:97:9f:0c:40:93:62:d0:05:
27:0e:73:fb:48:ef:ae:b1:89:4d:d3:20:c4:6c:83:87:55:30:
02:66:63:99:b9:16:b4:62:28:b9:ef:f9:10:d2:36:de:ab:53:
23:c7:b5:2a:08:19:4b:81:e5:5d:f4:29:56:1c:cb:d9:99:09:
48:4c:82:c1:c6:dc:27:6f:23:5c:be:e6:b0:ed:21:f4:84:be:
a2:2c:a0:e4:7f:f8:35:7a:1d:87:74:51:48:80:96:db:b8:cc:
73:62:75:91:25:30:7f:eb:af:5e:6e:00:43:5e:d8:72:fc:ae:
d3:c8:fa:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 21:34:27 2026 by rpki-client