Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
File: epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft (raw, json)
Hash identifier: QB1p2AB1KeYvCk/peIwGzPB76268aVO8D7ewvJ+13+4=
Subject key identifier: FC:62:EE:4C:A8:D5:96:B9:E1:2C:3B:64:DF:FC:49:F1:BF:B2:01:B5
Authority key identifier: 7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
Certificate issuer: /CN=7a938a935f8baf9cd933906416590d782e7287c7
Certificate serial: 01A0E0611BEC3D5AD3469AE8DB728776C33E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
Manifest number: 1A73
Signing time: Sun 27 Sep 2026 01:00:55 +0000
Manifest this update: Sun 27 Sep 2026 01:00:55 +0000
Manifest next update: Mon 28 Sep 2026 01:00:55 +0000
Files and hashes: 1: BEwSGx2LrGrF0sGwEj968AwEhBQ.roa (hash: FOuyYaW0tTl+dteUWOtoA2lUPrG6Wb17DxcFxBecsSA=)
2: O1kpwtflKFENDMxtFw4AMwXy_Eg.roa (hash: bFGH8x7w1VMHVR7CRYJvYNDIa0FPd2nWUvLigwhxhc4=)
3: aUl8lpeM_cK5FLKbeF7Bav-pQik.roa (hash: VJooy4RdmsLaFuxZcWrZ5R9B5jb/JnWIuGjdSyDjKws=)
4: epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl (hash: kHzi6+64aGFBa/xsjldxclO9AZn//Ay1j1RN0Opn0CU=)
5: t_IFzY8Fmcbu_ECs1VYwATKRDVM.roa (hash: zPmzKv9Sv3CWVQ7tS1fG8zEgGyRJzdU51E/8+5c5c+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:1b:ec:3d:5a:d3:46:9a:e8:db:72:87:76:c3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a938a935f8baf9cd933906416590d782e7287c7
Validity
Not Before: Sep 27 01:00:55 2026 GMT
Not After : Sep 28 01:00:55 2026 GMT
Subject: CN=fc62ee4ca8d596b9e12c3b64dffc49f1bfb201b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bc:da:3d:9d:e2:bd:79:dd:63:27:23:02:60:
ca:04:d5:e8:d4:5b:40:7a:6b:a0:c7:63:21:60:77:
a1:de:94:23:e2:95:d8:2d:89:a5:61:b1:b3:8a:79:
19:58:ae:9e:c4:8d:b4:2d:c2:78:ce:8c:f4:91:0e:
8d:ec:12:2e:62:f6:d8:50:96:ca:d8:a0:39:de:58:
27:a1:33:d2:1b:ca:21:0f:cb:3f:9c:20:e5:0f:ac:
7f:1c:e2:01:0e:c1:aa:d5:cc:67:d4:f7:52:06:3d:
6a:b3:9b:45:d9:e5:45:31:ce:02:59:3c:10:e3:06:
25:93:e1:8f:68:ac:5b:88:50:07:f3:41:df:5f:f7:
03:17:49:84:dd:fe:90:c4:56:18:9d:7d:08:89:3d:
0c:d9:4e:42:b2:96:bf:6b:92:2d:8c:98:4e:73:a7:
ec:1f:9f:5e:f9:40:a3:6a:af:e5:9f:2f:41:48:ac:
76:e1:52:9b:d7:32:5c:3d:58:23:0c:86:93:fd:a9:
68:15:45:88:1b:58:d4:98:c4:98:d7:5c:4f:6b:53:
b9:d1:ff:4a:70:24:f0:3f:02:3a:93:84:8a:e9:87:
c8:bf:b7:a1:4f:3c:5e:f0:4c:c6:e9:40:cb:16:c2:
1c:d4:f4:4a:66:17:69:ae:ab:e4:ea:d7:32:b8:3c:
b6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:62:EE:4C:A8:D5:96:B9:E1:2C:3B:64:DF:FC:49:F1:BF:B2:01:B5
X509v3 Authority Key Identifier:
keyid:7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:42:7e:19:b8:e0:dc:ea:10:7a:77:59:ce:0b:f2:f9:5d:ea:
6c:c6:91:93:fc:5c:35:2d:f7:60:6b:8b:f1:46:27:fd:37:0b:
80:8d:0c:bf:8b:75:ca:3e:56:dd:70:49:09:b7:af:a8:db:c1:
00:51:07:99:8c:bc:1c:6d:d3:2e:a6:e0:24:e2:6c:fd:cb:ea:
9e:d0:91:42:f2:9e:0c:cc:67:ed:25:55:1f:72:98:5b:4e:15:
80:b2:49:b2:2e:a3:f3:0b:9c:f0:82:72:f5:ac:30:a5:94:34:
b0:1e:b9:9f:d6:d2:55:2a:19:d8:94:9d:f4:e9:5e:9b:4f:ad:
57:eb:3c:ea:ee:c3:1e:95:07:60:89:4a:56:44:cb:80:9e:90:
09:58:ea:ae:2c:d1:57:6e:9e:83:8a:ef:94:aa:81:0b:a6:5d:
a3:ea:1c:a7:65:8e:16:5d:53:8b:2c:16:31:4e:92:66:1f:9d:
5c:8a:49:d7:6b:02:0c:dc:30:45:a2:fc:c8:8f:e9:02:63:02:
27:f4:00:05:6e:c7:18:ba:37:58:f1:74:32:7c:5f:77:f2:4a:
9c:56:fc:c5:eb:06:ba:47:c0:44:8b:18:0e:7c:29:32:3a:23:
31:bb:d6:e2:e6:38:e9:8e:e2:3b:f6:15:8d:02:dc:cb:bc:93:
a2:59:76:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:28:08 2026 by rpki-client