Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
File: 1-EplWZr7nYcnw9uUfv-64uW4U9E.mft (raw, json)
Hash identifier: FeXNpDbVCinFu3HOZ/LHT7EFYpwpq+FM62OYZc+O6Lk=
Subject key identifier: AA:76:8B:15:B9:AA:F2:D1:9B:5D:39:12:4A:A8:4A:5D:98:F8:3B:73
Authority key identifier: F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1
Certificate issuer: /CN=f84a65599afb9d8727c3db947effbae2e5b853d1
Certificate serial: 019D25F1F78E250806D3CC1567B1F05566C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
Manifest number: 0E25
Signing time: Wed 25 Mar 2026 17:01:47 +0000
Manifest this update: Wed 25 Mar 2026 17:01:47 +0000
Manifest next update: Thu 26 Mar 2026 17:01:47 +0000
Files and hashes: 1: 1-EplWZr7nYcnw9uUfv-64uW4U9E.crl (hash: 4mQh/DXMdCfSDvsOqRl2Q1rVCXKKKDftLM0Y7RGzaMo=)
2: PYSOuEJKXfFv96PrgahNaZWMo90.roa (hash: 1YHoKoxpfqieDN1YXiLCsR8fSH3v1YL6XK2N4m5fa+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:f7:8e:25:08:06:d3:cc:15:67:b1:f0:55:66:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84a65599afb9d8727c3db947effbae2e5b853d1
Validity
Not Before: Mar 25 17:01:47 2026 GMT
Not After : Mar 26 17:01:47 2026 GMT
Subject: CN=aa768b15b9aaf2d19b5d39124aa84a5d98f83b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:23:32:de:02:fb:5c:82:10:ef:af:14:10:e5:
6f:b5:ee:3e:d6:68:85:fb:41:de:e1:c9:55:f0:78:
dd:a6:a3:ba:4d:8d:7b:a3:97:4d:b8:c7:74:90:4f:
bc:3b:50:25:75:00:1f:f3:89:b9:66:60:30:a0:02:
c4:09:4f:e0:b5:fc:3b:60:ea:05:f1:f7:5f:e0:28:
e9:49:24:76:f9:b4:95:70:d0:e8:9b:27:fa:d1:d2:
99:22:f7:7e:9f:3b:dd:06:05:f2:46:b8:84:46:dd:
50:d5:5e:d8:7c:60:fd:8a:43:14:1c:06:7c:07:7e:
15:8b:ea:22:3f:26:1c:11:a2:6a:7e:71:8a:de:02:
2f:c0:5c:f3:eb:ae:8f:63:79:07:67:0b:9a:ca:9b:
3a:46:54:18:ac:73:7e:e3:90:6f:14:13:2c:da:3e:
e0:1b:b9:e7:a3:8c:b5:eb:21:3b:52:de:aa:38:f7:
5a:ba:3a:f9:3d:0f:8c:3b:34:52:4e:c3:8b:f3:db:
02:94:d4:4f:18:ba:dd:37:f6:35:36:17:76:03:1a:
5d:e1:de:09:f1:d9:74:bb:6f:e7:5c:33:c8:01:1a:
b3:d1:1b:f7:1d:e9:6e:80:f2:13:90:8c:b6:7a:ad:
ff:0a:77:20:1e:ba:c1:d1:e5:28:15:7b:b7:bd:45:
2a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:76:8B:15:B9:AA:F2:D1:9B:5D:39:12:4A:A8:4A:5D:98:F8:3B:73
X509v3 Authority Key Identifier:
keyid:F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c2:7e:bd:c4:19:d5:80:a1:29:66:2b:8e:15:b5:42:93:f7:
9c:24:a7:5a:03:13:03:7c:72:bb:37:ae:c7:bc:fb:47:ea:f2:
9c:78:12:04:f0:f5:4e:da:17:64:a4:a2:56:d3:3a:96:a6:74:
56:41:b0:1d:54:74:ca:21:29:98:8d:62:72:3b:c6:65:69:41:
33:1d:f7:c9:82:26:70:24:41:ef:58:9b:13:33:1c:b3:8f:7a:
93:8e:12:23:00:04:d1:a5:e7:c1:ac:62:74:c5:5a:00:29:38:
da:15:6b:fe:76:a6:50:2b:9e:f1:72:91:4a:42:60:0e:b7:6f:
39:cb:54:59:fc:fc:4f:fd:28:9b:0c:15:09:cb:c0:45:59:af:
2d:4b:12:ec:ed:45:92:6a:65:6b:ab:92:8d:54:a4:42:7c:72:
c1:9c:5b:3e:bc:b6:67:2e:50:16:dc:e6:8e:ca:b9:2c:d0:7e:
63:e9:34:98:0f:a3:e8:cd:f3:34:94:c0:54:be:2f:4d:f1:01:
02:e3:72:80:70:5f:c8:c3:68:ea:91:3e:79:6d:1c:1e:d7:b2:
db:e2:9f:81:5c:9e:cc:44:c6:3f:c4:99:bc:75:c9:ec:0e:f1:
4a:35:c5:77:67:6c:b1:17:0b:a6:96:1a:2c:f1:04:e2:95:e5:
ca:49:28:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:56 2026 by rpki-client