Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
File: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft (raw, json)
Hash identifier: oP4ZTSAW8CiRJ5iacn2XmswgHoEaD0CptlHen6G9Iz8=
Subject key identifier: 6D:95:CA:06:F4:1B:CD:40:7B:AB:02:23:43:7B:C6:9E:2A:F6:53:8F
Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Certificate issuer: /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Certificate serial: 01A1DE02B3DF665603D643F0E50E8EC04A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
Manifest number: 176F
Signing time: Sun 15 Nov 2026 07:01:21 +0000
Manifest this update: Sun 15 Nov 2026 07:01:21 +0000
Manifest next update: Mon 16 Nov 2026 07:01:21 +0000
Files and hashes: 1: WVAJdgjbItg7Mo643n_cLFQt5QM.roa (hash: wQEt73D3Ylc7pRRWF2c8VCcNEdJAA1g1dE2/T5MxO+A=)
2: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl (hash: ZClFgEdKFPD4ijxtx+b/xN6UCW6jAQrGcbhzX+4SOnA=)
3: ifkhfkR12chdZx40iDC75Z6ZvtI.roa (hash: VCtx1LYyqYZzs+BoTifxqmMrsa75EWc9KzbMGXKx/XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:b3:df:66:56:03:d6:43:f0:e5:0e:8e:c0:4a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Validity
Not Before: Nov 15 07:01:21 2026 GMT
Not After : Nov 16 07:01:21 2026 GMT
Subject: CN=6d95ca06f41bcd407bab0223437bc69e2af6538f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e4:38:ad:2e:07:3c:34:64:94:9f:6a:48:44:
0f:e1:c4:05:cd:15:55:28:cf:f9:0a:56:5a:2d:a1:
23:e4:5c:4c:bb:ca:91:d4:06:f9:7d:0d:c7:cc:af:
57:fe:03:ab:b9:f2:95:49:ec:48:cf:9c:cb:25:9f:
0a:6c:07:5d:4a:2a:46:39:50:95:46:9d:9d:50:4e:
1c:a6:83:4f:b8:2f:10:a9:43:e8:9c:75:40:ae:bd:
f2:35:04:67:4f:fb:ae:47:4b:f6:cc:a2:27:ed:e0:
5d:51:f9:e6:f8:8b:76:f0:95:ad:b6:ad:9a:8c:b5:
a0:18:88:88:62:ba:52:e1:e3:b0:e6:17:9c:d8:eb:
7e:3f:0f:ca:09:28:f7:64:df:b4:f6:87:c5:c7:2d:
42:a2:6f:34:09:9e:1d:dd:48:6d:11:83:a2:12:fb:
66:2d:4a:33:43:c5:dc:93:c8:45:2b:d6:fc:54:85:
50:84:92:1f:67:10:14:d8:d1:a1:44:cd:3f:27:2a:
b1:82:f0:af:e6:bf:5d:27:e5:72:a4:c2:24:56:bc:
2a:d6:f8:ea:a5:de:d1:1d:a4:1c:80:64:56:b4:51:
67:7d:bd:e5:7d:08:c8:4c:ce:c0:31:ff:7e:51:71:
b8:7a:40:a9:9b:73:aa:2e:7d:8a:1f:81:41:4e:74:
d1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:95:CA:06:F4:1B:CD:40:7B:AB:02:23:43:7B:C6:9E:2A:F6:53:8F
X509v3 Authority Key Identifier:
keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3a:57:fa:f1:9e:c2:f0:00:1b:30:4c:ce:dc:97:bd:56:51:
8a:51:a3:a6:1e:4c:17:a8:33:e4:a1:0b:27:14:0c:8d:f8:48:
1d:8f:60:a1:f4:f1:96:88:2f:3e:ff:69:83:78:fc:b4:ef:72:
1f:f9:8b:ae:a5:41:0f:25:77:54:eb:1d:7f:87:5d:ea:a9:a2:
12:56:a2:2d:fe:e8:e1:58:5e:22:4b:68:73:8d:05:8b:72:8d:
c2:c2:d0:14:1d:fb:ca:36:7e:dc:f2:f6:1f:34:c9:6e:e8:c8:
c6:fa:ff:8d:74:c7:15:c3:58:bd:32:37:76:01:9a:18:a7:ec:
79:34:d8:42:be:2b:b3:b5:ae:c4:19:68:b1:99:d6:fe:02:3f:
3f:2b:3f:5c:36:1f:81:48:51:47:35:a5:11:4f:68:26:f9:b4:
2f:52:9e:b5:87:05:c6:10:cb:88:37:52:f5:f0:b7:41:3d:bd:
ee:c3:79:7a:55:28:41:87:5a:eb:16:02:be:41:0c:3d:55:74:
87:e1:6b:83:4d:db:b6:32:b3:95:42:ab:cc:b4:76:c7:f4:f8:
2b:aa:f1:d1:16:69:3a:5f:50:2b:00:fb:e4:c1:66:84:e5:0e:
f8:43:a1:45:0f:a3:48:a8:60:d4:4c:27:75:46:1a:7c:a8:d7:
7d:fa:48:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:51:28 2026 by rpki-client