Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
File: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft (raw, json)
Hash identifier: xLLDU2Dgrfwt9wVj84lLWFQS78VnFw1Zd8bDrShSuxI=
Subject key identifier: 52:22:19:3B:39:6B:3F:9C:A4:42:A7:56:0F:1B:BF:CB:EC:FE:48:69
Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Certificate issuer: /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Certificate serial: 019D2AE10971E38A76010B2621387438AE5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
Manifest number: 1500
Signing time: Thu 26 Mar 2026 16:01:24 +0000
Manifest this update: Thu 26 Mar 2026 16:01:24 +0000
Manifest next update: Fri 27 Mar 2026 16:01:24 +0000
Files and hashes: 1: WVAJdgjbItg7Mo643n_cLFQt5QM.roa (hash: wQEt73D3Ylc7pRRWF2c8VCcNEdJAA1g1dE2/T5MxO+A=)
2: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl (hash: I9uh8hY2oE3AO7EG7c/Div7EAUrlnu4bdcG3v83ZqJE=)
3: ifkhfkR12chdZx40iDC75Z6ZvtI.roa (hash: VCtx1LYyqYZzs+BoTifxqmMrsa75EWc9KzbMGXKx/XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:09:71:e3:8a:76:01:0b:26:21:38:74:38:ae:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Validity
Not Before: Mar 26 16:01:24 2026 GMT
Not After : Mar 27 16:01:24 2026 GMT
Subject: CN=5222193b396b3f9ca442a7560f1bbfcbecfe4869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:66:1c:ed:d6:7e:d4:f7:24:83:f1:ff:43:8b:
7d:7d:05:4f:3e:03:66:a9:33:2d:eb:e3:f8:94:c4:
73:ba:ff:ab:26:32:e1:33:cb:73:1f:91:21:21:4e:
62:0b:d6:b8:db:c4:85:3a:ae:ba:80:ca:28:21:6e:
dd:f0:0c:9f:1f:67:20:92:96:2f:10:26:ab:9a:e1:
2a:d5:b5:5f:e6:24:a5:2f:3a:b9:42:7d:6b:0a:cd:
c2:f9:3d:b5:6a:b9:26:8f:f5:27:05:29:38:09:57:
ba:66:da:70:9c:46:ac:26:cf:49:ec:c6:19:a8:c4:
5a:3a:d1:83:44:99:fb:8e:bf:a7:4b:36:42:31:fa:
02:7d:fc:29:2d:86:e7:7b:26:b1:ae:92:c1:99:6d:
dd:43:b7:0b:e2:bf:37:ae:9b:1b:2c:34:b8:3f:46:
8a:51:5e:e9:3a:07:fb:e4:df:88:df:8a:e3:cc:ce:
7d:0d:80:de:30:d9:b2:8b:b6:a3:8d:e7:3b:1a:c3:
44:68:e0:1b:ae:88:f6:1c:4b:0e:69:fc:20:68:b0:
c4:03:00:1b:00:d0:8b:12:59:9d:43:a7:df:91:a4:
27:84:94:1c:bd:e2:f5:62:87:ab:71:d9:73:32:8a:
c6:88:40:73:b4:ae:cf:ac:4d:01:65:d4:6e:a7:7b:
1e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:22:19:3B:39:6B:3F:9C:A4:42:A7:56:0F:1B:BF:CB:EC:FE:48:69
X509v3 Authority Key Identifier:
keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:65:c0:36:a2:4d:eb:12:dc:3b:ef:ab:18:67:cb:de:00:f3:
9d:ea:a0:ea:d8:5e:0e:af:23:17:5c:09:e9:8f:87:59:9a:c0:
ab:a7:c1:3e:08:12:23:2c:92:63:c1:0b:fe:91:79:5e:b6:c6:
45:fc:32:6a:68:3e:ce:5a:ca:bf:9c:ba:9b:9b:88:77:d7:af:
22:31:db:82:e7:8e:0e:f5:44:f8:fd:82:af:7f:ff:af:ff:a8:
5b:cf:1a:0b:09:e2:a1:5f:ee:41:df:69:69:9d:24:4c:e8:6b:
15:d6:0a:41:16:b5:b0:0d:1a:78:45:dc:6e:ba:53:08:ff:d1:
93:ff:66:95:08:34:b3:58:83:9c:98:f1:aa:00:0f:3c:68:81:
3e:23:d9:4a:8b:9c:7d:d8:0c:72:9e:8d:48:78:31:aa:36:4e:
4d:03:3e:66:4a:04:1e:43:45:55:8b:ad:7a:63:59:94:c7:d5:
2c:09:db:0e:7d:0b:fe:21:fe:ca:8d:0d:d0:22:7f:8a:8f:42:
d4:22:45:66:63:f5:f6:24:38:da:d7:8d:70:c5:85:f3:8e:35:
56:f3:19:c9:2b:7e:01:0d:64:fd:98:3c:3b:fc:14:da:d0:80:
45:d1:9e:56:4e:63:fb:c3:57:a2:66:7a:da:62:c7:dd:e9:9f:
49:be:c3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:33 2026 by rpki-client