Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
File: epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft (raw, json)
Hash identifier: R/SFir8I/h6TH3jp3cFrNxHVuEFq+6Gd+ta9Esl1mgQ=
Subject key identifier: 0C:F0:D2:8B:95:01:D5:F7:FF:9F:FA:E2:56:14:F8:12:96:AD:11:75
Authority key identifier: 7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
Certificate issuer: /CN=7a938a935f8baf9cd933906416590d782e7287c7
Certificate serial: 019E1D90F86001507FEAC2D3D9E07D58BB25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 19:01:40 +0000
Manifest this update: Tue 12 May 2026 19:01:40 +0000
Manifest next update: Wed 13 May 2026 19:01:40 +0000
Files and hashes: 1: BEwSGx2LrGrF0sGwEj968AwEhBQ.roa (hash: FOuyYaW0tTl+dteUWOtoA2lUPrG6Wb17DxcFxBecsSA=)
2: O1kpwtflKFENDMxtFw4AMwXy_Eg.roa (hash: bFGH8x7w1VMHVR7CRYJvYNDIa0FPd2nWUvLigwhxhc4=)
3: aUl8lpeM_cK5FLKbeF7Bav-pQik.roa (hash: VJooy4RdmsLaFuxZcWrZ5R9B5jb/JnWIuGjdSyDjKws=)
4: epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl (hash: N/LD6k5LlbKtgs2fLGAXkrVG3XHERGxVj6Me88ZANyc=)
5: t_IFzY8Fmcbu_ECs1VYwATKRDVM.roa (hash: zPmzKv9Sv3CWVQ7tS1fG8zEgGyRJzdU51E/8+5c5c+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:f8:60:01:50:7f:ea:c2:d3:d9:e0:7d:58:bb:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a938a935f8baf9cd933906416590d782e7287c7
Validity
Not Before: May 12 19:01:40 2026 GMT
Not After : May 13 19:01:40 2026 GMT
Subject: CN=0cf0d28b9501d5f7ff9ffae25614f81296ad1175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:77:0c:4d:f1:5a:5e:2d:6d:aa:d8:1d:58:66:
d6:b3:87:77:48:a1:50:40:3e:ac:6c:2e:4a:b5:30:
cd:c3:e0:7a:b7:6a:03:f3:3b:4e:42:55:44:8d:86:
6e:03:8f:a9:af:73:d3:f2:df:be:9e:10:92:f4:5d:
69:c6:d1:63:96:3a:1b:fb:51:aa:ea:60:8b:6b:8d:
c0:af:97:dd:35:aa:68:41:05:74:8d:c8:9d:6a:13:
d9:3b:ec:d6:38:f0:73:16:14:63:81:ec:e8:bb:23:
1d:8e:1e:b6:2b:b7:bd:3b:b7:1c:b8:11:b1:4a:fe:
6c:68:21:59:f7:6f:cc:d9:d0:05:b6:e9:58:52:d3:
f6:e3:51:ee:f9:fe:d4:4a:1d:5a:71:16:86:4a:65:
dc:e2:ab:56:e1:0f:91:da:d3:52:71:ef:dc:d0:2f:
5d:0f:ec:08:92:13:49:1d:99:c8:4d:38:2a:fc:86:
64:fe:c4:3a:35:e7:36:d6:c0:11:74:71:3a:2a:0f:
66:6f:47:92:05:e7:fa:8f:70:98:f6:32:7d:fd:ff:
ce:84:41:ea:9c:9d:5e:a9:22:cf:da:66:fd:b2:14:
73:87:87:45:02:a6:1f:ed:42:05:30:1c:9b:9e:a3:
91:3c:31:d7:9f:98:1a:16:2b:69:a6:2e:f9:dd:03:
9e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F0:D2:8B:95:01:D5:F7:FF:9F:FA:E2:56:14:F8:12:96:AD:11:75
X509v3 Authority Key Identifier:
keyid:7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9c:90:72:69:78:e1:fd:9a:83:69:44:cb:2b:a7:70:0d:85:
e3:e3:a2:60:48:31:78:c1:8c:e5:48:71:24:78:0d:27:13:2c:
40:3b:b7:7e:13:36:6f:95:01:a5:c2:21:0c:d7:75:42:49:42:
75:8a:24:7d:da:9e:32:fc:1a:de:0e:90:f8:c5:ec:d7:f2:69:
36:80:32:94:39:01:31:7d:d2:bc:d9:61:51:a9:ee:e0:58:1f:
f0:bc:8e:fb:9d:21:c3:3f:e4:05:03:8d:f5:18:1a:70:da:99:
a2:29:55:1c:8d:74:86:9f:df:e0:8e:68:24:d7:9f:20:c0:8b:
78:f5:47:dc:a4:62:a8:b2:ef:48:d1:2a:8d:00:c4:46:bb:33:
e5:0f:b1:df:db:7f:26:57:31:9d:5f:e8:47:a0:81:0f:9f:49:
c9:83:1c:67:d4:c2:b9:42:c5:9f:da:93:0f:24:8c:67:a2:dd:
86:1b:f5:1a:b2:e8:d5:e0:d2:71:6e:d1:80:f2:53:7f:7d:f9:
06:0e:66:f5:8b:0e:72:ef:8a:78:98:13:e2:54:61:1b:3a:3a:
ff:e6:b4:81:c9:7b:d1:fc:72:52:fa:b7:6e:8d:c7:37:73:da:
9f:6d:8a:b5:c2:b1:ce:46:55:1d:b0:69:63:5d:eb:76:7e:45:
fb:d3:0a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:45:42 2026 by rpki-client