Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
File: 1-EplWZr7nYcnw9uUfv-64uW4U9E.mft (raw, json)
Hash identifier: /oAcnpbmDpOQQGJOj07DiBLOEJqokMrfcCm3znI53sw=
Subject key identifier: FB:48:2B:9D:1E:18:D1:83:25:72:25:F0:08:99:CA:B2:5E:35:D0:26
Authority key identifier: F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1
Certificate issuer: /CN=f84a65599afb9d8727c3db947effbae2e5b853d1
Certificate serial: 019E1D231E5B1687067FD2D9EF46465634F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
Manifest number: 0EA5
Signing time: Tue 12 May 2026 17:01:41 +0000
Manifest this update: Tue 12 May 2026 17:01:41 +0000
Manifest next update: Wed 13 May 2026 17:01:41 +0000
Files and hashes: 1: 1-EplWZr7nYcnw9uUfv-64uW4U9E.crl (hash: P/yDktAHmMIpDVHqujL4uM5R4kENyTBEePVi1fxtODw=)
2: PYSOuEJKXfFv96PrgahNaZWMo90.roa (hash: 1YHoKoxpfqieDN1YXiLCsR8fSH3v1YL6XK2N4m5fa+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:1e:5b:16:87:06:7f:d2:d9:ef:46:46:56:34:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84a65599afb9d8727c3db947effbae2e5b853d1
Validity
Not Before: May 12 17:01:41 2026 GMT
Not After : May 13 17:01:41 2026 GMT
Subject: CN=fb482b9d1e18d183257225f00899cab25e35d026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:42:a1:09:1b:38:73:38:05:36:9f:a5:ee:e2:
f7:e4:1a:fe:dc:c6:92:25:df:81:27:a6:88:fc:fc:
21:45:a8:95:04:40:7d:7a:80:7c:e9:27:1b:1e:00:
c3:58:91:16:d4:71:a1:29:7e:ed:1d:19:8f:a2:00:
d3:3b:cd:3a:5c:e0:d3:86:03:75:aa:80:c5:ad:92:
af:4d:01:2c:57:11:62:69:df:f7:31:48:65:76:cc:
b3:0e:f6:9c:d7:97:a0:a0:0e:70:fe:5a:43:76:bc:
7d:84:71:ab:58:73:4a:a5:58:e3:f0:37:81:77:6e:
4e:4f:fc:e9:d3:98:b7:5b:58:b4:d3:1d:7c:18:86:
f4:34:9a:22:80:be:ae:09:ed:04:10:f8:c9:4a:fb:
13:65:26:bb:47:a4:6d:c0:06:19:c4:58:e8:57:1d:
4a:c1:0c:5c:5a:3a:ac:c3:4e:fd:5d:31:64:7c:49:
fd:07:d1:cf:48:7a:f2:66:52:af:ad:d6:68:02:07:
c3:d0:2a:51:0d:44:58:96:37:17:0e:0e:2e:b9:11:
5c:18:86:dd:8d:d4:f0:b6:f1:ac:ba:46:be:b0:49:
e9:ca:fc:a6:4f:1d:5e:2e:4d:16:9b:f5:dc:6d:c0:
3d:b5:f0:5d:ed:0e:eb:27:e6:00:20:d8:ec:4d:29:
d3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:48:2B:9D:1E:18:D1:83:25:72:25:F0:08:99:CA:B2:5E:35:D0:26
X509v3 Authority Key Identifier:
keyid:F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:bb:e8:35:00:40:d2:5b:5c:9c:ac:cb:13:94:fd:4f:3a:6a:
87:d3:25:87:23:cb:66:20:c7:f0:f6:8f:e3:70:47:7d:52:b8:
78:80:b6:59:cc:0b:02:34:c0:22:e1:de:dc:e0:73:0f:3f:24:
d2:ef:ad:af:97:bc:33:8f:58:9c:b8:8a:e3:e3:c7:1b:8e:aa:
ba:c0:0e:c2:cc:b2:67:78:58:ab:67:35:84:cd:be:3f:e7:30:
b6:1c:c7:e4:54:79:0f:f2:f0:9e:f2:91:7a:68:16:1a:b3:ef:
ab:22:33:ba:fe:c0:a6:31:98:3b:18:08:a3:2a:5d:62:12:07:
0a:89:cf:2e:88:2e:2b:b7:48:3a:b0:af:a5:6c:42:6f:5c:51:
3b:ab:48:52:5a:cc:56:42:80:91:59:04:0e:dd:f5:26:0b:14:
57:6f:21:4a:af:d8:02:28:6d:63:53:ef:91:1f:bf:3d:6a:c1:
1a:e0:e3:e4:30:3e:d7:31:b5:a0:94:29:84:fd:6f:53:6e:e5:
61:12:71:2b:a9:72:c7:e9:b5:f8:42:c3:11:c3:c8:2e:3a:7a:
36:e5:bb:44:24:3c:19:7f:51:f6:c8:4f:c2:fe:7a:ad:fc:05:
dc:e1:d1:6a:e5:43:fe:e5:e5:85:84:42:6a:81:66:4d:e7:8c:
96:a8:37:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:49 2026 by rpki-client