Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
File: _EjmUG7G1TxZFdyPKWREhd-S_Ok.mft (raw, json)
Hash identifier: TcXPktRj+no+LusGq3eBGBzVEPXIPugBjVg+rtHzD1g=
Subject key identifier: 4C:A5:4E:1F:B1:3C:7D:79:D0:79:48:43:87:7A:FC:D8:6D:15:11:06
Authority key identifier: FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
Certificate issuer: /CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Certificate serial: 019D26CD019F962C38C6CB376087ACA00DBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
Manifest number: 1536
Signing time: Wed 25 Mar 2026 21:01:02 +0000
Manifest this update: Wed 25 Mar 2026 21:01:02 +0000
Manifest next update: Thu 26 Mar 2026 21:01:02 +0000
Files and hashes: 1: _EjmUG7G1TxZFdyPKWREhd-S_Ok.crl (hash: 74quXb6lQ+uyDitvqWmo4GclXI7Of7rkVFRveTbQ6P0=)
2: s10iu-qYEl97SkdPFFc91UCyTP8.roa (hash: mY1Xwqy7Z6NydVJ4ZdfvfAq3+ajlgxpmGG9kYDrwGTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:01:9f:96:2c:38:c6:cb:37:60:87:ac:a0:0d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Validity
Not Before: Mar 25 21:01:02 2026 GMT
Not After : Mar 26 21:01:02 2026 GMT
Subject: CN=4ca54e1fb13c7d79d0794843877afcd86d151106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:55:bd:9b:06:16:49:ef:87:27:41:bb:69:ea:
0d:fb:8c:41:45:e2:95:7f:3b:61:a4:e3:4d:8f:62:
41:28:ad:ee:68:fb:0f:99:6e:43:99:12:75:23:60:
22:21:0e:79:5c:26:da:68:e8:4e:2f:a2:d4:73:9d:
0c:e1:0c:13:e6:83:0c:5e:5f:4f:54:d1:33:2f:32:
f2:90:76:1c:98:a2:be:cf:29:98:1f:d9:5a:df:94:
7d:d2:c4:c2:cf:d4:da:86:f2:21:ed:fa:a9:3f:76:
fe:41:be:bb:b2:79:de:ea:42:f1:4c:93:0a:ec:d0:
7c:70:14:e6:bf:3a:61:5e:e2:ea:3f:ef:b7:3b:95:
26:e5:51:65:38:a6:02:4c:a7:aa:a7:f3:d5:75:04:
5b:b7:14:6f:cb:7a:30:a2:1c:76:57:90:1d:75:9e:
2e:49:c0:65:0a:ce:d1:d6:a6:22:31:73:8d:b8:70:
7c:e6:93:e9:b8:93:5c:42:6c:81:37:05:bb:53:f5:
93:7c:d6:d2:1f:4c:1d:2c:74:8e:62:3a:f1:cd:48:
05:f7:63:6f:e9:ea:90:c9:20:a4:af:74:22:f3:60:
bd:e1:eb:ee:67:a7:fd:26:a9:cb:6d:12:0d:17:3f:
5e:b3:f3:04:bc:0c:19:d1:5a:68:63:35:7c:70:40:
1a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A5:4E:1F:B1:3C:7D:79:D0:79:48:43:87:7A:FC:D8:6D:15:11:06
X509v3 Authority Key Identifier:
keyid:FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a3:6f:2b:33:57:06:8a:59:6c:d4:6d:8f:70:f5:f0:26:13:
a6:bc:60:2d:10:ed:79:67:ba:74:9e:47:8b:26:97:c7:4f:fe:
21:86:e5:05:53:0a:a2:39:1b:6f:a7:09:69:23:0c:b5:0c:d0:
8f:c6:70:85:4f:65:10:19:15:72:13:73:68:f7:db:cf:f4:b3:
98:5b:90:a5:c5:8c:6b:1a:2a:10:29:53:ab:7e:f9:78:7b:53:
68:cd:71:f0:59:4c:0f:3c:02:17:9a:98:93:1f:e3:16:c2:ae:
1f:c8:73:78:f3:74:2c:b3:52:b8:fb:ac:ef:c5:85:ac:d9:6b:
99:dc:4d:0d:a6:8e:9b:5c:53:47:ca:0c:cf:2a:72:4a:23:2a:
c6:2e:ab:ea:87:24:4b:d1:6f:f0:d6:65:cc:3a:84:19:7e:04:
5d:5e:39:f2:10:7d:02:29:b6:4f:61:4e:ee:c9:f4:a5:e3:c3:
e2:f2:93:a2:1e:8e:f0:e2:50:dd:66:3f:e7:c4:ad:9b:88:d2:
5d:28:9e:d9:f7:21:96:3a:e5:fd:b9:af:ee:c5:e2:4c:28:c6:
24:90:a9:0f:52:85:d7:24:79:58:d9:c2:ed:aa:78:d7:61:85:
3c:aa:d0:1c:04:58:5b:e2:ab:67:6f:51:dc:73:9b:96:9a:83:
85:a4:a3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:15 2026 by rpki-client