Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
File: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft (raw, json)
Hash identifier: 8pnz1bqcKwMf0698h09YiIpwGtT+WyMLaK7aLISDg8Y=
Subject key identifier: E7:85:69:06:B6:8F:F4:E2:A3:DD:41:A4:22:82:AB:96:72:37:EC:1B
Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Certificate issuer: /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Certificate serial: 019D2704C51B9EF12F9249A4093221EC7805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
Manifest number: 14FE
Signing time: Wed 25 Mar 2026 22:01:57 +0000
Manifest this update: Wed 25 Mar 2026 22:01:57 +0000
Manifest next update: Thu 26 Mar 2026 22:01:57 +0000
Files and hashes: 1: WVAJdgjbItg7Mo643n_cLFQt5QM.roa (hash: wQEt73D3Ylc7pRRWF2c8VCcNEdJAA1g1dE2/T5MxO+A=)
2: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl (hash: I1BWdSO8ulzIQJoSWU4GuDQbg6yTiGFhpcwrb0rCi4M=)
3: ifkhfkR12chdZx40iDC75Z6ZvtI.roa (hash: VCtx1LYyqYZzs+BoTifxqmMrsa75EWc9KzbMGXKx/XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:c5:1b:9e:f1:2f:92:49:a4:09:32:21:ec:78:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Validity
Not Before: Mar 25 22:01:57 2026 GMT
Not After : Mar 26 22:01:57 2026 GMT
Subject: CN=e7856906b68ff4e2a3dd41a42282ab967237ec1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1f:a3:c3:aa:15:c9:52:09:c3:32:5b:e0:6c:
52:f8:52:88:7c:dc:0f:9b:6b:fe:92:e5:2b:13:44:
06:c6:80:0a:8f:ba:c8:1a:85:fe:23:92:df:72:d1:
bb:6e:54:8f:6d:29:9a:64:d3:66:db:a1:7a:23:d3:
6b:a0:3c:e0:2a:65:d0:44:b7:76:36:3c:73:f6:2d:
56:3f:35:52:27:ac:38:4a:aa:57:55:96:f8:fb:4f:
0a:fb:ed:0e:de:72:2b:07:62:f5:98:89:8b:25:00:
9c:4a:da:e2:a7:9a:7a:b1:7f:69:a2:0d:0a:a2:d5:
47:f3:c4:fc:09:c2:93:60:70:ab:40:ca:87:41:a7:
21:13:a7:e0:58:e9:d0:1a:21:ea:09:4d:bd:24:2e:
54:4d:0b:98:fe:06:9f:21:f7:47:f9:0b:e8:0b:f4:
43:d8:b8:18:c1:f1:47:13:2f:ce:5e:ad:9b:15:54:
d0:09:8a:90:26:4d:a5:a4:0e:0e:26:5f:c3:90:4c:
c7:bf:1b:74:8c:31:50:7c:03:51:c6:fb:8f:3f:c2:
14:50:50:bc:99:9d:1e:de:ca:31:cb:f5:c2:08:31:
f2:a5:d3:45:46:7e:c2:89:5b:0d:32:65:88:b8:dd:
f8:b6:5d:ce:b7:21:ab:1a:cb:38:b6:3b:99:52:16:
70:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:85:69:06:B6:8F:F4:E2:A3:DD:41:A4:22:82:AB:96:72:37:EC:1B
X509v3 Authority Key Identifier:
keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:6f:db:dc:78:49:03:df:d6:8d:96:6a:51:5c:ad:a0:b1:93:
b9:f8:38:69:81:9f:39:e9:e8:de:cb:ce:a6:80:83:56:c2:2d:
b9:50:68:9e:94:69:b2:96:31:26:70:3a:18:ab:fd:45:97:2a:
2e:dc:06:ea:1f:20:7e:c5:dc:c7:cb:7e:6e:6d:47:bc:99:ea:
b1:df:0c:b3:ec:4e:86:51:b6:e9:ce:dd:23:95:50:66:20:ec:
0f:36:39:6f:1f:c1:05:71:c4:91:37:aa:86:60:bc:db:38:85:
99:ca:7e:bc:56:55:1d:3b:0f:65:c0:3a:53:c2:9d:81:ba:8d:
57:c3:6a:a4:63:19:05:60:bc:80:4e:dc:a0:34:b3:8e:3b:ca:
0c:e7:22:dd:c2:d4:01:7e:f2:52:53:d9:24:c2:38:29:de:b6:
34:8d:db:61:5b:df:be:ba:39:33:8c:de:c2:ae:4b:9a:c9:f5:
13:75:9c:35:d5:24:c4:62:6e:ed:a3:71:8f:83:d3:59:45:29:
80:4e:51:98:d3:5a:06:7b:46:53:55:67:12:d5:99:f0:58:09:
54:68:0e:c5:d5:0b:c4:cb:56:e7:ef:f1:9a:a3:fb:6a:0c:7c:
22:84:20:55:42:e9:67:f7:e9:1b:64:f0:40:f8:d2:c6:e0:1d:
71:90:a7:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBMUbnvEvkkmkCTIh7HgFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhOTFiMzQxNTNkYTBkNWQxMjFjZmY0MzI1OWZjZDllM2Ri
ZmM3ZDQwHhcNMjYwMzI1MjIwMTU3WhcNMjYwMzI2MjIwMTU3WjAzMTEwLwYDVQQD
EyhlNzg1NjkwNmI2OGZmNGUyYTNkZDQxYTQyMjgyYWI5NjcyMzdlYzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB+jw6oVyVIJwzJb4GxS+FKIfNwP
m2v+kuUrE0QGxoAKj7rIGoX+I5LfctG7blSPbSmaZNNm26F6I9NroDzgKmXQRLd2
Njxz9i1WPzVSJ6w4SqpXVZb4+08K++0O3nIrB2L1mImLJQCcStrip5p6sX9pog0K
otVH88T8CcKTYHCrQMqHQachE6fgWOnQGiHqCU29JC5UTQuY/gafIfdH+QvoC/RD
2LgYwfFHEy/OXq2bFVTQCYqQJk2lpA4OJl/DkEzHvxt0jDFQfANRxvuPP8IUUFC8
mZ0e3soxy/XCCDHypdNFRn7CiVsNMmWIuN34tl3OtyGrGss4tjuZUhZwWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOeFaQa2j/Tio91BpCKCq5ZyN+wbMB8GA1UdIwQY
MBaAFHqRs0FT2g1dEhz/QyWfzZ49v8fUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXBHelFWUGFEVjBTSFA5REpaX05uajJfeDlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81M2Y2NTItMDFiMS00MmYyLTg1ZTkt
NGRjYjIzZmRiMDZhLzEvZXBHelFWUGFEVjBTSFA5REpaX05uajJfeDlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81M2Y2NTItMDFiMS00MmYyLTg1ZTktNGRjYjIzZmRiMDZh
LzEvZXBHelFWUGFEVjBTSFA5REpaX05uajJfeDlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkG/b3HhJ
A9/WjZZqUVytoLGTufg4aYGfOeno3svOpoCDVsItuVBonpRpspYxJnA6GKv9RZcq
LtwG6h8gfsXcx8t+bm1HvJnqsd8Ms+xOhlG26c7dI5VQZiDsDzY5bx/BBXHEkTeq
hmC82ziFmcp+vFZVHTsPZcA6U8KdgbqNV8NqpGMZBWC8gE7coDSzjjvKDOci3cLU
AX7yUlPZJMI4Kd62NI3bYVvfvro5M4zewq5Lmsn1E3WcNdUkxGJu7aNxj4PTWUUp
gE5RmNNaBntGU1VnEtWZ8FgJVGgOxdULxMtW5+/xmqP7agx8IoQgVULpZ/fpG2Tw
QPjSxuAdcZCniQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:13:28 2026 by rpki-client