Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
File: eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft (raw, json)
Hash identifier: Q7xbc9+g+yiCfC7yCBhCPUbahWtSi8PpGNqV8xGgU9k=
Subject key identifier: BD:89:3F:C0:2B:BC:DE:A2:E0:14:C8:99:BE:B7:80:D1:38:49:4D:48
Authority key identifier: 78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2
Certificate issuer: /CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
Certificate serial: 019D2AE10A594C0BB713A98CE7C95FF59F11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
Manifest number: 14D2
Signing time: Thu 26 Mar 2026 16:01:24 +0000
Manifest this update: Thu 26 Mar 2026 16:01:24 +0000
Manifest next update: Fri 27 Mar 2026 16:01:24 +0000
Files and hashes: 1: IkSWs7EkuQhyXRbP9F6EHBtTz1o.roa (hash: Byu4YYkguBqvjzQYm5SoI51Ex0ZiZOLUbV6kTS2GuBk=)
2: eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl (hash: dJjDgI+AFWaZoy8cTUJVB9aGhfycqNoWm3fVURWDfKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:0a:59:4c:0b:b7:13:a9:8c:e7:c9:5f:f5:9f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
Validity
Not Before: Mar 26 16:01:24 2026 GMT
Not After : Mar 27 16:01:24 2026 GMT
Subject: CN=bd893fc02bbcdea2e014c899beb780d138494d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a6:70:36:f2:fc:a3:74:a7:c2:9c:ea:f8:b0:
9c:66:d3:fa:0b:3a:60:29:b3:97:01:b6:81:4a:71:
7f:16:68:38:b7:9f:e2:59:43:55:0b:9b:c3:41:89:
88:de:1a:35:41:fc:ea:c5:8d:5d:37:ed:d6:c2:19:
92:c6:1b:00:9c:75:f0:46:ec:08:5f:8f:73:35:24:
b5:b4:14:e2:6f:69:09:f1:53:65:fd:9b:35:34:1d:
3e:af:f2:de:a0:22:36:8e:57:06:de:dd:8a:a5:d5:
60:42:29:d9:b4:6b:b3:7b:8e:46:65:bf:fe:37:f5:
66:79:74:fa:95:f0:f3:82:37:8e:2b:0b:d6:4a:34:
8a:03:46:16:5a:44:c7:ca:72:fd:65:49:b5:11:90:
83:1c:19:fa:5f:19:67:e9:62:b2:15:bd:b0:0e:6f:
66:60:60:89:7b:57:ca:dc:0d:8e:5b:30:6f:93:fc:
56:75:34:55:d9:ab:9c:2b:f1:c3:2d:94:66:1b:33:
12:d9:6c:4b:31:c0:af:e6:53:8a:81:8a:a6:5c:97:
64:ab:75:8c:bf:85:53:4d:19:7f:5d:4d:b9:80:09:
3e:61:30:b7:29:7e:76:91:76:eb:7d:6d:50:3e:f4:
22:3e:82:59:94:39:48:ef:e0:ee:44:48:0a:d1:51:
07:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:89:3F:C0:2B:BC:DE:A2:E0:14:C8:99:BE:B7:80:D1:38:49:4D:48
X509v3 Authority Key Identifier:
keyid:78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:df:41:35:5b:6c:a1:45:9b:4a:9b:07:dc:68:48:ae:c0:fa:
06:80:0e:2a:b6:9e:e5:16:84:ad:5d:15:6f:72:cd:43:3e:2d:
a5:f6:86:c1:f2:b2:22:2d:db:b7:38:e4:e0:50:60:c6:ba:f7:
3a:dc:f3:00:e6:93:93:b0:92:20:be:74:f6:3a:01:7e:2d:31:
22:a4:9a:14:8b:3c:1b:98:6c:d5:dc:9f:14:ac:98:bf:5e:45:
1a:4f:65:68:9c:fc:68:f1:bc:12:5f:6e:79:02:f1:ab:14:d6:
dd:da:ca:aa:f2:7a:34:42:e8:5d:ea:b6:3e:7b:3c:e5:d6:63:
19:90:c3:ab:32:ee:af:a3:e9:e2:91:3b:12:30:a9:b3:04:72:
79:f2:98:07:e9:7c:b1:ee:29:13:2a:68:1a:1e:c4:4d:e2:7c:
23:88:d2:2d:e1:5d:ff:67:3a:64:99:79:13:61:3d:4f:d2:37:
30:1c:4f:5f:66:ea:fb:37:48:73:72:d8:d8:78:ae:8a:99:c9:
52:19:67:c2:cc:36:dc:6d:11:eb:61:d8:99:bf:95:81:43:e2:
87:31:d0:5c:51:8d:68:0c:8e:df:41:e5:c5:ff:f8:10:40:65:
03:2f:07:9b:60:80:04:b5:de:52:78:ba:53:7d:02:13:47:7d:
ce:11:1b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:55:31 2026 by rpki-client