Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
File: Emcb67isPjC118PSU3NXo7JUbVs.mft (raw, json)
Hash identifier: oH/7fygc6LD0eU/aiI98eI+Bs5QSUJCn9YrDjStBbG8=
Subject key identifier: A8:EC:8E:35:3E:B5:D7:CF:38:51:32:3C:FE:CA:1D:26:71:5B:CA:02
Authority key identifier: 12:67:1B:EB:B8:AC:3E:30:B5:D7:C3:D2:53:73:57:A3:B2:54:6D:5B
Certificate issuer: /CN=12671bebb8ac3e30b5d7c3d2537357a3b2546d5b
Certificate serial: 019D2996F12D905314FBE8B39B70E471F2B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
Manifest number: 07C3
Signing time: Thu 26 Mar 2026 10:00:51 +0000
Manifest this update: Thu 26 Mar 2026 10:00:51 +0000
Manifest next update: Fri 27 Mar 2026 10:00:51 +0000
Files and hashes: 1: Emcb67isPjC118PSU3NXo7JUbVs.crl (hash: lmz2XeqRuKmrpQqBBkWOhtuyU1KqNI3LLlWQfgDh+to=)
2: IbMGTXyTOTdiq2NpG4tVLW4bQtQ.roa (hash: j1uMtZdT3V+8GANHlpcXgXLtn7udaUVnpZ9J8VG0PMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:f1:2d:90:53:14:fb:e8:b3:9b:70:e4:71:f2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12671bebb8ac3e30b5d7c3d2537357a3b2546d5b
Validity
Not Before: Mar 26 10:00:51 2026 GMT
Not After : Mar 27 10:00:51 2026 GMT
Subject: CN=a8ec8e353eb5d7cf3851323cfeca1d26715bca02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8e:15:bc:92:d8:1a:d4:a2:47:8c:00:00:c7:
2d:65:27:7a:6d:3c:17:06:dd:05:55:72:92:d7:8b:
af:cb:b3:0f:0e:58:e7:08:fb:89:17:db:18:b4:43:
4d:bb:d4:e4:f0:f4:3a:4f:be:1a:27:04:2d:79:59:
c6:c5:9d:90:2d:4e:ae:b2:51:d2:d1:60:ee:a6:50:
73:46:5b:c3:24:30:6d:06:96:8a:87:c1:87:ca:be:
60:e6:29:20:ce:1c:6f:29:fb:4d:2c:8b:03:bb:56:
55:6f:84:f4:5d:0b:bb:a3:01:e6:f5:14:a9:0f:9e:
cb:7e:3a:14:17:7e:ec:4a:cd:28:2d:36:db:49:41:
88:55:14:be:2e:d8:d3:84:45:b4:1a:d6:a5:b4:19:
43:0f:bb:f7:62:57:90:f0:dd:bd:82:b7:ea:f5:c6:
1d:a3:00:dc:1a:a7:cc:20:0d:02:65:2a:a2:ee:f3:
66:1f:74:df:84:29:a3:0e:2c:14:64:fd:30:e6:3d:
53:b4:4b:c2:19:95:e3:a1:66:40:9b:b3:04:27:9b:
44:16:d4:9f:04:c7:9e:61:9a:25:53:83:42:ef:f9:
8f:77:6f:a5:91:b4:e8:0b:f5:be:d7:66:d6:6a:0a:
01:af:35:8f:1a:e0:69:be:d4:4b:39:87:a0:1b:6f:
fe:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EC:8E:35:3E:B5:D7:CF:38:51:32:3C:FE:CA:1D:26:71:5B:CA:02
X509v3 Authority Key Identifier:
keyid:12:67:1B:EB:B8:AC:3E:30:B5:D7:C3:D2:53:73:57:A3:B2:54:6D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:64:a7:ad:98:9a:8a:1e:87:8d:1b:61:18:2b:18:8c:a6:c2:
89:7e:cb:34:b3:0b:ed:db:5a:e4:e4:03:5b:ed:c7:2e:a5:54:
1a:1f:03:76:2f:59:ab:62:03:00:71:33:90:63:8c:cc:5d:3d:
f2:42:35:0e:e1:2a:c8:a3:f0:b1:cb:7e:48:3f:9c:0c:7d:06:
89:67:34:89:91:af:59:14:f4:5f:09:3b:0c:04:42:9f:4b:60:
4a:ef:94:e9:78:22:5b:41:a1:0c:9d:db:6f:8a:d2:7e:ca:cc:
b8:cf:e7:db:76:2d:ae:18:85:4e:89:b4:d8:70:e2:e7:ec:81:
f4:30:b6:30:c0:3f:27:c0:81:94:9f:5e:c0:d5:ed:25:71:d3:
9e:9e:da:e9:af:42:b3:79:7d:07:1c:dc:ad:84:cf:3d:53:68:
c4:55:cd:c9:c8:a8:04:f7:01:1e:04:08:5a:c8:d8:36:16:74:
93:6c:3d:16:c0:9d:8b:f5:01:e7:7c:8c:e0:2d:f9:bb:46:82:
bb:e2:30:a2:57:97:fd:78:e0:14:79:c4:98:c8:bd:64:12:c7:
74:3d:d1:f8:23:08:03:6a:08:40:f0:93:23:b5:28:f0:2d:97:
ef:ce:f9:c1:94:b7:e4:fe:16:15:b3:6c:50:d7:d3:44:cc:85:
d0:d8:e0:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plvEtkFMU++izm3DkcfK1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNjcxYmViYjhhYzNlMzBiNWQ3YzNkMjUzNzM1N2EzYjI1
NDZkNWIwHhcNMjYwMzI2MTAwMDUxWhcNMjYwMzI3MTAwMDUxWjAzMTEwLwYDVQQD
EyhhOGVjOGUzNTNlYjVkN2NmMzg1MTMyM2NmZWNhMWQyNjcxNWJjYTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1I4VvJLYGtSiR4wAAMctZSd6bTwX
Bt0FVXKS14uvy7MPDljnCPuJF9sYtENNu9Tk8PQ6T74aJwQteVnGxZ2QLU6uslHS
0WDuplBzRlvDJDBtBpaKh8GHyr5g5ikgzhxvKftNLIsDu1ZVb4T0XQu7owHm9RSp
D57LfjoUF37sSs0oLTbbSUGIVRS+LtjThEW0GtaltBlDD7v3YleQ8N29grfq9cYd
owDcGqfMIA0CZSqi7vNmH3TfhCmjDiwUZP0w5j1TtEvCGZXjoWZAm7MEJ5tEFtSf
BMeeYZolU4NC7/mPd2+lkbToC/W+12bWagoBrzWPGuBpvtRLOYegG2/+JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjsjjU+tdfPOFEyPP7KHSZxW8oCMB8GA1UdIwQY
MBaAFBJnG+u4rD4wtdfD0lNzV6OyVG1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW1jYjY3aXNQakMxMThQU1UzTlhvN0pVYlZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNmE0NjctYmM5NS00MDVjLTg0ZWMt
ZDQyODY5NzhhODBhLzEvRW1jYjY3aXNQakMxMThQU1UzTlhvN0pVYlZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iNmE0NjctYmM5NS00MDVjLTg0ZWMtZDQyODY5NzhhODBh
LzEvRW1jYjY3aXNQakMxMThQU1UzTlhvN0pVYlZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2SnrZia
ih6HjRthGCsYjKbCiX7LNLML7dta5OQDW+3HLqVUGh8Ddi9Zq2IDAHEzkGOMzF09
8kI1DuEqyKPwsct+SD+cDH0GiWc0iZGvWRT0Xwk7DARCn0tgSu+U6XgiW0GhDJ3b
b4rSfsrMuM/n23YtrhiFTom02HDi5+yB9DC2MMA/J8CBlJ9ewNXtJXHTnp7a6a9C
s3l9BxzcrYTPPVNoxFXNycioBPcBHgQIWsjYNhZ0k2w9FsCdi/UB53yM4C35u0aC
u+IwoleX/XjgFHnEmMi9ZBLHdD3R+CMIA2oIQPCTI7Uo8C2X7875wZS35P4WFbNs
UNfTRMyF0NjgyA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:53:22 2026 by rpki-client