Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
File: epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft (raw, json)
Hash identifier: DLdUwPUVGezY5Zvkcjat2cYpkXm3NwD0sh6dHedYuek=
Subject key identifier: 51:7A:15:73:C7:1F:07:9F:02:90:C6:FC:D8:76:3F:CD:5B:4C:01:51
Authority key identifier: 7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
Certificate issuer: /CN=7a938a935f8baf9cd933906416590d782e7287c7
Certificate serial: 019D284D8F175FD27B07433F5959795C7CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 04:01:04 +0000
Manifest this update: Thu 26 Mar 2026 04:01:04 +0000
Manifest next update: Fri 27 Mar 2026 04:01:04 +0000
Files and hashes: 1: BEwSGx2LrGrF0sGwEj968AwEhBQ.roa (hash: FOuyYaW0tTl+dteUWOtoA2lUPrG6Wb17DxcFxBecsSA=)
2: O1kpwtflKFENDMxtFw4AMwXy_Eg.roa (hash: bFGH8x7w1VMHVR7CRYJvYNDIa0FPd2nWUvLigwhxhc4=)
3: aUl8lpeM_cK5FLKbeF7Bav-pQik.roa (hash: VJooy4RdmsLaFuxZcWrZ5R9B5jb/JnWIuGjdSyDjKws=)
4: epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl (hash: UGvswEfbctPQCIflDP+nKlqxejlTpC2bImWe4pVO5vc=)
5: t_IFzY8Fmcbu_ECs1VYwATKRDVM.roa (hash: zPmzKv9Sv3CWVQ7tS1fG8zEgGyRJzdU51E/8+5c5c+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:8f:17:5f:d2:7b:07:43:3f:59:59:79:5c:7c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a938a935f8baf9cd933906416590d782e7287c7
Validity
Not Before: Mar 26 04:01:04 2026 GMT
Not After : Mar 27 04:01:04 2026 GMT
Subject: CN=517a1573c71f079f0290c6fcd8763fcd5b4c0151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:72:22:06:75:85:16:5f:6b:bc:b2:13:f3:ba:
52:5a:94:11:e0:86:c0:2b:5a:4f:ad:a9:d6:c3:44:
f1:90:0f:12:71:ec:3a:b0:03:ef:3c:d5:ae:8f:ee:
de:c9:2b:19:d9:7e:16:fc:a8:62:89:31:d6:2c:17:
8c:ab:4d:60:89:a5:12:eb:88:71:38:5e:98:1d:a4:
ca:4e:83:c6:5e:02:17:c1:bd:81:ef:d1:5c:b8:79:
0b:cc:28:a3:f4:f4:84:6a:9f:16:30:5e:54:07:7d:
8f:47:9b:8d:93:6a:71:09:cd:11:52:81:b8:7a:1f:
da:1f:29:59:75:39:f7:de:5a:6f:6f:59:1c:b4:c6:
ef:c3:77:b5:2d:c0:24:ec:b3:73:a4:c4:0b:f1:56:
83:c9:c8:f5:31:39:4d:5e:8e:be:b9:18:15:57:b1:
a5:87:27:1e:9a:e3:c6:9d:66:88:a5:69:9d:9f:20:
70:98:2b:e9:9c:ff:bf:9b:11:e0:cd:3f:d0:7c:1d:
32:13:b6:ab:6a:a1:18:79:18:9a:d3:7e:45:79:9e:
42:af:8e:5e:04:ee:17:95:47:7d:83:bf:28:e9:d8:
e2:b1:e7:04:6b:1c:46:8a:c0:ed:29:0c:3f:9a:01:
fc:f5:1e:6d:d6:21:ec:07:8b:27:6e:0e:0f:e9:3a:
4c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7A:15:73:C7:1F:07:9F:02:90:C6:FC:D8:76:3F:CD:5B:4C:01:51
X509v3 Authority Key Identifier:
keyid:7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:b6:21:22:7b:75:d5:39:72:5d:48:28:6a:1a:25:13:d4:81:
80:03:1a:16:46:46:f8:62:08:ed:24:a0:0b:b9:2d:55:1c:e5:
85:db:4a:81:4d:8f:dc:6a:ed:67:8f:6f:63:eb:69:5f:ae:5b:
52:a9:70:d2:d9:c8:ac:70:20:67:86:09:08:42:14:cf:96:21:
aa:41:8e:15:85:86:e6:8b:78:e4:2d:5d:3d:10:0a:b6:9e:db:
6d:e0:cd:74:e4:ed:bc:8b:f0:e0:9c:ea:11:8a:2d:6b:6c:1c:
a2:cd:4f:9d:0e:e0:f3:ac:56:9d:87:ab:e5:98:f7:d4:98:07:
13:42:5a:66:21:64:84:0c:a4:3a:cc:94:3b:8f:45:6b:75:2e:
7e:ae:52:15:b2:9d:4e:0c:38:4a:e1:2f:bf:0e:a6:ff:32:05:
2b:48:0c:fe:31:82:7d:bc:c6:66:61:86:be:00:8f:f1:55:24:
02:ed:f6:81:d0:c8:53:fe:3e:15:6e:f9:13:83:8d:7d:37:f5:
03:63:d0:66:b1:50:d7:fb:f9:d6:a7:8b:2f:e0:74:1b:f5:a2:
ab:98:2c:1f:47:72:53:c1:04:02:1e:4d:bb:e6:48:d3:3e:29:
83:dd:e7:f4:94:08:27:51:ce:d6:c6:b9:b4:96:4b:ce:63:b2:
1e:80:6b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:43 2026 by rpki-client