Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/ePm3BijarZOvGIoiOYKNssKcFOw.mft
File: ePm3BijarZOvGIoiOYKNssKcFOw.mft (raw, json)
Hash identifier: r1Ey6RzUoQKkBKDCIVIXJxow9nwnc1owYnzb9tZviWY=
Subject key identifier: 15:F9:D4:40:95:27:C2:83:96:5C:9E:58:4E:72:AC:DA:2F:32:C6:05
Authority key identifier: 78:F9:B7:06:28:DA:AD:93:AF:18:8A:22:39:82:8D:B2:C2:9C:14:EC
Certificate issuer: /CN=78f9b70628daad93af188a2239828db2c29c14ec
Certificate serial: 01A08C7ADC5D743384246573D2C081BAA750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ePm3BijarZOvGIoiOYKNssKcFOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/ePm3BijarZOvGIoiOYKNssKcFOw.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:00:56 +0000
Manifest this update: Thu 10 Sep 2026 18:00:56 +0000
Manifest next update: Fri 11 Sep 2026 18:00:56 +0000
Files and hashes: 1: BdwGlkaptmMT9Oh-8i7s6EZ-lCA.roa (hash: 8vib6Tz+/3825HdXsp3W0N9Y0J7CwoyzAF/LuiUg6r4=)
2: ePm3BijarZOvGIoiOYKNssKcFOw.crl (hash: VloTO6V+U74kZOMDcHDcvBDtljiWEjPCLeV0gOBa4wk=)
3: hvXJQwktftb5k-sez33-2gLNy90.roa (hash: qOdKnAhQY1wXAT9d0tCrBPyjUg+jlgDeauw2jlOhLCY=)
4: lK5aoSeePB6ZndyRPiM_BJq60J0.roa (hash: 9QEXPPwUc0DPoKULU+qtdfAfIA6UqP1XKN+kslkbGBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/ePm3BijarZOvGIoiOYKNssKcFOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/ePm3BijarZOvGIoiOYKNssKcFOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ePm3BijarZOvGIoiOYKNssKcFOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:dc:5d:74:33:84:24:65:73:d2:c0:81:ba:a7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78f9b70628daad93af188a2239828db2c29c14ec
Validity
Not Before: Sep 10 18:00:56 2026 GMT
Not After : Sep 11 18:00:56 2026 GMT
Subject: CN=15f9d4409527c283965c9e584e72acda2f32c605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:82:04:0e:71:f7:45:3f:32:8c:63:60:ea:b0:
02:39:75:ab:5d:5a:48:45:36:7e:fb:3b:77:7f:5a:
ba:70:85:d6:f9:1a:17:0b:f1:6b:8b:fc:9c:6a:e5:
83:7e:8b:59:2b:16:93:c4:dd:a7:d1:3a:b9:dd:b6:
3b:44:7d:c7:ea:1f:e0:bc:36:3e:17:7f:f9:13:2f:
72:11:66:b7:f4:2c:8e:bc:c7:8c:f1:0c:84:5c:8f:
2a:93:6f:a1:ac:0a:3d:8c:fc:8c:c5:1d:2d:22:3f:
c1:28:9c:86:7f:d3:71:37:44:dc:b7:1e:8b:22:e4:
87:08:b0:05:1a:d1:9e:b1:63:ea:aa:95:5a:5d:54:
6b:e8:dc:bc:22:c7:32:05:9a:75:ce:8d:20:e5:a9:
a5:06:f0:05:21:1c:e5:a2:5c:43:10:68:eb:05:67:
c6:dd:62:78:c4:9a:7e:52:f0:c6:75:e6:37:67:92:
66:a0:cf:b7:39:02:ff:31:ac:aa:df:c6:51:91:e6:
55:60:67:4c:99:8f:74:26:67:8f:d1:bf:8c:be:8c:
09:8c:43:10:71:34:38:25:83:39:41:5d:b8:96:68:
c9:43:bd:be:62:ff:13:ed:8b:15:50:5d:ad:d7:01:
7f:50:9b:c6:84:2c:b5:59:e3:70:aa:6f:1f:65:7e:
6f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F9:D4:40:95:27:C2:83:96:5C:9E:58:4E:72:AC:DA:2F:32:C6:05
X509v3 Authority Key Identifier:
keyid:78:F9:B7:06:28:DA:AD:93:AF:18:8A:22:39:82:8D:B2:C2:9C:14:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePm3BijarZOvGIoiOYKNssKcFOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/ePm3BijarZOvGIoiOYKNssKcFOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/ePm3BijarZOvGIoiOYKNssKcFOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:35:9d:68:68:49:f2:9a:24:a6:07:95:4c:c4:8b:b2:ad:f4:
24:c8:9a:61:39:7d:a5:b2:eb:c4:d0:66:c6:b2:01:9d:37:a4:
01:0c:c8:dd:a4:b4:90:59:22:50:c5:84:dc:26:9c:76:04:5c:
e6:3c:92:1b:94:bb:0c:15:c0:a2:f4:9b:f7:8b:a8:9f:54:b8:
bc:7a:99:ac:41:b3:49:dd:3a:b9:1a:29:2a:28:f1:0d:54:1d:
11:6c:85:85:69:ac:73:10:13:86:eb:8b:52:dd:70:83:ca:a0:
f1:bd:5f:5b:ec:2a:e0:35:88:1a:0a:cc:bb:16:5b:6b:0a:cf:
20:2d:87:37:03:79:32:ea:2f:47:d1:6e:d8:e1:1f:b3:9f:b8:
92:3b:5c:01:c8:c7:ac:82:e0:d6:8f:c0:11:15:81:28:bd:af:
a4:f2:45:d8:0e:6e:44:ad:55:50:0d:1f:0d:45:0a:89:51:4e:
81:18:58:21:6c:38:2d:d1:3e:5e:9f:68:9a:d7:da:ac:20:e8:
a5:f7:d7:89:00:3d:6b:c2:c5:0b:98:f3:06:5e:fd:22:74:dd:
7b:08:d8:84:37:ab:4a:9a:57:b7:da:85:0e:71:14:43:46:35:
29:5d:66:1f:a1:73:e9:bc:9f:e3:72:d7:a6:fd:16:21:ca:1c:
7e:8a:c7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:37:03 2026 by rpki-client