Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
File: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft (raw, json)
Hash identifier: A8OIy/jS46YBPHo71cuOn7bXHaAO7iRRmzf6Pq1Hn94=
Subject key identifier: 67:CB:A1:B2:CA:41:6D:A0:A3:58:14:31:5F:02:4D:8F:A7:D9:B4:76
Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Certificate issuer: /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Certificate serial: 01A0CFA46379DBD841A0340C052338632968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
Manifest number: 16E3
Signing time: Wed 23 Sep 2026 19:00:52 +0000
Manifest this update: Wed 23 Sep 2026 19:00:52 +0000
Manifest next update: Thu 24 Sep 2026 19:00:52 +0000
Files and hashes: 1: WVAJdgjbItg7Mo643n_cLFQt5QM.roa (hash: wQEt73D3Ylc7pRRWF2c8VCcNEdJAA1g1dE2/T5MxO+A=)
2: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl (hash: WFCCAmtarmsCy7I+hAZuuGX3ApRzwCjTqn8z+d4/jLg=)
3: ifkhfkR12chdZx40iDC75Z6ZvtI.roa (hash: VCtx1LYyqYZzs+BoTifxqmMrsa75EWc9KzbMGXKx/XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:63:79:db:d8:41:a0:34:0c:05:23:38:63:29:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Validity
Not Before: Sep 23 19:00:52 2026 GMT
Not After : Sep 24 19:00:52 2026 GMT
Subject: CN=67cba1b2ca416da0a35814315f024d8fa7d9b476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7a:70:3b:d4:ad:c0:7a:1d:1d:fd:6e:5f:c2:
5a:8f:6d:e3:68:45:88:3d:3f:de:0d:ff:fb:73:fe:
e6:0c:c5:0b:d3:24:48:86:4c:d0:7c:a4:1f:d3:87:
64:27:d8:80:ff:da:2d:ac:66:d5:a2:40:09:3e:01:
78:2c:ff:a5:40:e2:77:a9:32:29:78:68:ec:47:b2:
b8:e9:69:4d:42:19:3d:0d:cb:cb:85:70:19:3a:1f:
bf:90:91:f4:f7:64:47:1a:c1:b9:d5:74:e5:5a:99:
5f:62:f8:c1:fe:67:b6:fa:53:57:c6:92:e2:78:b0:
b2:42:1d:c6:43:3b:ee:bf:c8:44:48:41:37:d6:b8:
1a:e8:4d:42:4a:37:b8:7e:dd:30:69:aa:3f:8a:82:
59:96:37:50:05:89:66:e3:bc:2c:36:f1:e0:db:f7:
95:24:f6:70:e4:67:74:73:7f:a2:14:b8:93:8e:df:
c0:95:df:bf:88:a0:08:dc:58:c4:24:af:6f:d8:c5:
f8:06:31:86:d9:d7:35:ed:09:ff:5f:d9:15:a2:ba:
58:40:56:7d:2f:61:3e:f0:e8:db:b7:20:52:1d:de:
05:da:f1:5c:05:cf:99:64:f2:67:e1:81:76:ab:32:
ff:78:57:ca:15:f8:f8:c8:c3:5c:05:17:2b:bd:c3:
33:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CB:A1:B2:CA:41:6D:A0:A3:58:14:31:5F:02:4D:8F:A7:D9:B4:76
X509v3 Authority Key Identifier:
keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:5d:ca:f3:59:0e:9d:44:e2:80:11:0c:f7:44:b7:c1:ab:e8:
21:7e:17:0c:66:5d:e3:f1:1e:b7:6c:dd:7c:9c:98:13:da:f5:
c9:a5:ba:2c:77:29:32:d0:81:4e:14:aa:15:89:67:8c:70:37:
dd:b2:60:75:f5:a3:56:87:5c:d7:ff:c0:34:2b:bd:7e:70:ba:
fb:76:da:ed:a7:c4:ad:d9:ca:6d:d6:f6:f5:16:af:2c:cc:57:
7c:07:34:9e:24:5f:1d:71:d8:62:e9:27:68:b6:e6:9b:d5:94:
c7:96:1e:0e:f8:c6:aa:82:cb:94:c7:87:84:c9:e3:9a:03:09:
14:1b:d5:f6:64:b3:d9:6f:a8:17:36:ee:dc:c8:0e:b1:29:be:
99:16:60:f4:57:bc:88:eb:a3:2f:6e:ee:eb:40:3d:b4:8f:21:
fd:53:d6:b9:60:7b:03:2b:fb:3f:95:7a:5e:a0:b3:33:0b:3c:
0d:5b:5a:01:f0:10:4c:27:e2:b2:38:2a:95:9a:15:60:b5:fb:
33:5e:a5:54:88:7e:91:6b:87:0e:ee:de:ed:68:aa:dc:92:39:
40:34:c9:dd:f4:0a:3e:76:aa:bd:68:61:56:be:b8:40:ca:26:
45:73:d8:e1:d1:a2:16:a6:f1:d7:0e:45:79:d6:ec:b8:da:94:
91:20:7a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:04:25 2026 by rpki-client