Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
File: EmXJFl_TNt9t_oSa69zkaF-xmTw.mft (raw, json)
Hash identifier: sK+uTZP1IW9ybmp8/Or0wQxeHdc+8uXY3IZezR4PqSw=
Subject key identifier: 37:38:B6:3F:2E:16:8B:2A:3F:F8:6D:7D:5F:9B:31:FA:96:F9:17:F5
Authority key identifier: 12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C
Certificate issuer: /CN=1265c9165fd336df6dfe849aebdce4685fb1993c
Certificate serial: 019D2A727B40F315F30E2B26D852F135D541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
Manifest number: 15C3
Signing time: Thu 26 Mar 2026 14:00:38 +0000
Manifest this update: Thu 26 Mar 2026 14:00:38 +0000
Manifest next update: Fri 27 Mar 2026 14:00:38 +0000
Files and hashes: 1: 6EoSjHN4t39-FE41ARaCfceq3s4.roa (hash: uTwjH+AoTBPoH409BUSaNY0tsegEvG16T99C8c2GUCc=)
2: EmXJFl_TNt9t_oSa69zkaF-xmTw.crl (hash: lAhgV+hb/APkxIzdCmQayW3LnB90ORBF/uDBFgGnhrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:7b:40:f3:15:f3:0e:2b:26:d8:52:f1:35:d5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1265c9165fd336df6dfe849aebdce4685fb1993c
Validity
Not Before: Mar 26 14:00:38 2026 GMT
Not After : Mar 27 14:00:38 2026 GMT
Subject: CN=3738b63f2e168b2a3ff86d7d5f9b31fa96f917f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2b:e2:50:db:ad:d9:4d:6b:c8:98:99:41:2e:
da:57:d3:1c:e4:a8:1d:59:83:4c:5d:fa:d0:00:d8:
69:fa:94:95:74:8f:18:3a:7b:05:68:d8:13:0d:92:
d5:43:4f:e3:fe:ed:08:43:65:30:d4:70:85:e8:82:
10:2d:c5:5c:69:6b:da:9e:29:c0:7c:a8:c9:f1:2a:
be:3f:5d:84:2a:27:80:ef:d7:66:7c:16:00:9a:5f:
a1:1f:de:fe:2e:fe:db:1c:55:93:9f:63:af:25:b9:
41:79:bd:98:e2:33:06:55:91:0f:15:14:d3:dd:97:
8f:c9:0e:65:41:62:9b:cf:fa:f1:09:e8:c2:14:60:
27:cd:e9:5b:a9:fa:91:58:c8:3f:47:b2:a0:f0:92:
ea:0f:8c:a0:eb:7e:33:80:e0:30:20:54:3c:9c:f1:
b1:b3:81:a3:26:c5:7d:51:c6:45:f9:cc:6b:1f:4d:
7c:da:98:24:ac:78:48:a3:f6:85:cf:d3:6f:16:61:
1b:c3:e4:e5:01:b1:44:86:2b:37:f6:61:d1:1f:b6:
ba:52:d6:a3:f4:4c:c0:18:33:c3:6d:4e:ac:47:fa:
7c:ba:db:26:f3:03:7b:01:d8:3d:46:e6:70:48:df:
c2:4b:46:5e:d8:aa:27:7b:7d:17:d2:57:38:16:b8:
8b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:38:B6:3F:2E:16:8B:2A:3F:F8:6D:7D:5F:9B:31:FA:96:F9:17:F5
X509v3 Authority Key Identifier:
keyid:12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ad:c6:ec:43:04:31:2c:dc:25:28:48:d1:11:fa:13:3b:3a:
19:9b:72:ad:82:33:57:3b:c4:47:bf:68:1d:d5:5f:2e:5f:04:
59:8d:a8:de:fa:5f:33:84:22:7e:11:eb:03:61:09:88:e5:04:
19:52:5d:ed:95:12:e8:e1:43:f5:63:f7:00:4d:f3:49:09:5d:
b5:09:61:e8:ec:1c:50:8f:a7:ef:58:b4:6c:f3:dd:2c:cd:25:
14:00:42:66:0f:77:33:ad:39:5c:97:e1:43:d3:61:c9:4c:fe:
23:4f:44:1a:20:ed:4e:1a:64:7d:17:54:99:80:d4:4b:ab:82:
cf:86:cf:13:a9:df:32:a3:ef:bd:36:d8:e3:eb:ca:55:47:6c:
1e:ab:2c:3e:18:a2:69:6a:5b:40:f5:61:c0:4c:91:6a:58:5e:
8e:a7:ad:8a:0e:dc:ae:e3:b5:3c:d1:ab:a0:f9:e0:44:70:dd:
c3:05:b1:60:d3:6b:ea:b0:31:73:87:e9:19:4f:21:bb:bf:c5:
7f:48:de:ac:41:4c:b1:d2:b0:9e:68:a3:f5:b3:08:26:23:fa:
2f:ed:be:cf:75:38:73:21:47:a8:c0:e1:f9:9e:2c:af:1a:2b:
82:c0:bf:e4:31:f5:6b:e9:27:f8:30:f7:16:a3:0e:46:a2:4e:
6a:92:de:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qcntA8xXzDism2FLxNdVBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNjVjOTE2NWZkMzM2ZGY2ZGZlODQ5YWViZGNlNDY4NWZi
MTk5M2MwHhcNMjYwMzI2MTQwMDM4WhcNMjYwMzI3MTQwMDM4WjAzMTEwLwYDVQQD
EygzNzM4YjYzZjJlMTY4YjJhM2ZmODZkN2Q1ZjliMzFmYTk2ZjkxN2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iviUNut2U1ryJiZQS7aV9Mc5Kgd
WYNMXfrQANhp+pSVdI8YOnsFaNgTDZLVQ0/j/u0IQ2Uw1HCF6IIQLcVcaWvaninA
fKjJ8Sq+P12EKieA79dmfBYAml+hH97+Lv7bHFWTn2OvJblBeb2Y4jMGVZEPFRTT
3ZePyQ5lQWKbz/rxCejCFGAnzelbqfqRWMg/R7Kg8JLqD4yg634zgOAwIFQ8nPGx
s4GjJsV9UcZF+cxrH0182pgkrHhIo/aFz9NvFmEbw+TlAbFEhis39mHRH7a6Utaj
9EzAGDPDbU6sR/p8utsm8wN7Adg9RuZwSN/CS0Ze2Kone30X0lc4FriLcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDc4tj8uFosqP/htfV+bMfqW+Rf1MB8GA1UdIwQY
MBaAFBJlyRZf0zbfbf6Emuvc5GhfsZk8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW1YSkZsX1ROdDl0X29TYTY5emthRi14bVR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8yNDcxMTYtOTY5MC00YjIwLTliMGYt
NjhlOTg2ZmQ2NDE5LzEvRW1YSkZsX1ROdDl0X29TYTY5emthRi14bVR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8yNDcxMTYtOTY5MC00YjIwLTliMGYtNjhlOTg2ZmQ2NDE5
LzEvRW1YSkZsX1ROdDl0X29TYTY5emthRi14bVR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUq3G7EME
MSzcJShI0RH6Ezs6GZtyrYIzVzvER79oHdVfLl8EWY2o3vpfM4QifhHrA2EJiOUE
GVJd7ZUS6OFD9WP3AE3zSQldtQlh6OwcUI+n71i0bPPdLM0lFABCZg93M605XJfh
Q9NhyUz+I09EGiDtThpkfRdUmYDUS6uCz4bPE6nfMqPvvTbY4+vKVUdsHqssPhii
aWpbQPVhwEyRalhejqetig7cruO1PNGroPngRHDdwwWxYNNr6rAxc4fpGU8hu7/F
f0jerEFMsdKwnmij9bMIJiP6L+2+z3U4cyFHqMDh+Z4srxorgsC/5DH1a+kn+DD3
FqMORqJOapLe1A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:30:45 2026 by rpki-client