Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
File: _EjmUG7G1TxZFdyPKWREhd-S_Ok.mft (raw, json)
Hash identifier: hDGjkhWWJyrd3+Zih07mP5DI797lhxjpWKieg1ag9HM=
Subject key identifier: 1B:A3:3C:1E:04:AA:C0:CE:A2:A7:CC:1F:1D:D8:70:A4:6B:9A:30:AA
Authority key identifier: FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
Certificate issuer: /CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Certificate serial: 019F92B64D6FE7EE0E62DD538BCFE22A1ECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
Manifest number: 1677
Signing time: Fri 24 Jul 2026 06:00:48 +0000
Manifest this update: Fri 24 Jul 2026 06:00:48 +0000
Manifest next update: Sat 25 Jul 2026 06:00:48 +0000
Files and hashes: 1: _EjmUG7G1TxZFdyPKWREhd-S_Ok.crl (hash: fi6qzOP4oBXxHl89wEofPc3zpkzoqIKE3Z5Jf8UAwjI=)
2: s10iu-qYEl97SkdPFFc91UCyTP8.roa (hash: mY1Xwqy7Z6NydVJ4ZdfvfAq3+ajlgxpmGG9kYDrwGTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:4d:6f:e7:ee:0e:62:dd:53:8b:cf:e2:2a:1e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Validity
Not Before: Jul 24 06:00:48 2026 GMT
Not After : Jul 25 06:00:48 2026 GMT
Subject: CN=1ba33c1e04aac0cea2a7cc1f1dd870a46b9a30aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5c:12:ae:13:2a:90:f5:86:37:8e:3a:b6:4f:
c0:64:aa:96:da:c4:be:f9:6b:72:03:36:66:ab:41:
35:80:d0:b4:6f:16:ed:6c:5a:b6:f5:cb:da:8e:2e:
33:ce:bf:15:87:f1:a7:a5:86:2a:04:a3:d0:8a:7c:
2f:6d:3d:d0:66:3d:a3:a4:b3:1d:22:fa:12:45:90:
83:fb:b9:2e:c8:13:42:0b:66:34:36:d1:a6:a6:78:
68:d2:fb:ef:ce:82:e2:3b:d0:52:8d:46:99:0c:45:
09:84:9d:31:d2:75:d2:50:49:72:ed:7a:ca:6f:13:
a1:dc:e2:0f:ea:26:5a:45:da:a3:81:72:5b:ce:43:
34:e1:5a:5e:46:0d:6e:72:ca:86:d9:11:05:74:af:
d5:27:84:5b:9d:f8:9e:d1:b6:8d:01:77:4e:3a:2e:
36:c2:84:2e:9f:8f:de:73:3e:d1:3d:9f:51:19:a3:
81:a8:75:7b:b8:8d:b3:c9:29:e5:71:59:02:05:a0:
07:58:85:be:f7:79:c1:4e:f3:7e:5b:2f:10:be:b5:
87:72:59:0f:84:40:3e:53:6c:5c:e3:25:6d:66:a3:
29:90:e9:9d:a4:5c:12:25:28:c0:c3:12:68:75:08:
34:b9:4e:47:2b:f0:ef:78:64:42:fb:57:8a:c2:ac:
b4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A3:3C:1E:04:AA:C0:CE:A2:A7:CC:1F:1D:D8:70:A4:6B:9A:30:AA
X509v3 Authority Key Identifier:
keyid:FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:36:a9:ca:29:5e:7b:97:32:f3:0d:f0:b5:44:7b:cf:08:40:
b2:6f:c1:66:1a:0a:18:d1:d1:93:59:9d:e7:bf:b1:18:03:c7:
41:29:2f:3c:61:d0:7a:59:b4:41:30:36:97:5d:bb:71:b8:d1:
43:73:ee:6f:36:21:0f:f4:ed:7c:4a:85:1b:c2:6a:97:09:93:
94:8a:cd:16:18:66:c2:74:fc:f2:fb:55:ee:e8:50:bf:84:80:
15:64:d0:40:94:86:a9:b1:a3:9e:49:f3:e0:ff:3c:f2:b2:83:
71:53:b2:fa:d1:78:9f:6d:5b:38:8f:f6:fc:bd:46:6d:67:b0:
97:6d:28:94:86:e0:de:72:24:32:1b:ef:ef:ed:63:49:73:6e:
51:d7:bd:38:89:cb:b6:72:2a:9a:c1:63:51:3f:fd:8b:5f:50:
12:af:1c:8c:b8:70:74:d5:c7:ba:47:76:fd:32:de:52:29:f9:
c1:6c:77:f1:00:b8:b2:7e:71:4d:5b:ad:ee:11:e4:f2:ec:00:
54:e2:5b:2f:31:c1:c6:5a:0e:87:64:12:94:0a:8a:db:19:aa:
27:1d:89:48:42:ae:84:c8:b4:4a:4b:bc:5f:06:40:43:58:bd:
61:34:0c:6d:9f:e9:16:9a:09:cc:87:e1:af:75:81:80:94:60:
e8:19:c7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:05:17 2026 by rpki-client