Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
File: eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft (raw, json)
Hash identifier: Q/G9IuFdg15MvE99vTfVcLWB2JVFdxdIfJiQTY3Jl4c=
Subject key identifier: 28:7D:46:6D:CE:FB:70:1F:55:43:C7:E3:6C:98:F5:8F:07:51:7B:4B
Authority key identifier: 78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2
Certificate issuer: /CN=78cb4975b93b4593576048338564ea3eb09dc8e2
Certificate serial: 019D2772A6555EA5B57D01EC0D24CAE6BCB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
Manifest number: 0D31
Signing time: Thu 26 Mar 2026 00:01:58 +0000
Manifest this update: Thu 26 Mar 2026 00:01:58 +0000
Manifest next update: Fri 27 Mar 2026 00:01:58 +0000
Files and hashes: 1: eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl (hash: g8Q56hoEqrEhENzKgobAWv1Hp2h5kjeA6sBxYBLsdUQ=)
2: qbIaJec-toVL64n7z-uuxLGTIAQ.roa (hash: T1ieQtaDmRsidOYkDXdJkWB5IsW3s99F+xa0mkqLysM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:a6:55:5e:a5:b5:7d:01:ec:0d:24:ca:e6:bc:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78cb4975b93b4593576048338564ea3eb09dc8e2
Validity
Not Before: Mar 26 00:01:58 2026 GMT
Not After : Mar 27 00:01:58 2026 GMT
Subject: CN=287d466dcefb701f5543c7e36c98f58f07517b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:28:73:8b:a0:69:87:31:7d:31:a9:b0:29:31:
4b:96:d7:cb:d0:93:01:34:2d:6c:59:3d:4c:52:a4:
60:dc:aa:a9:84:4e:40:00:85:9a:1a:56:be:76:ea:
88:b7:25:d2:90:cb:8e:10:0b:d6:56:0f:52:7c:8a:
5d:f8:e1:15:f7:20:85:3b:3f:50:09:18:ed:da:4b:
28:58:d1:99:5a:ec:bd:5c:98:3c:da:a8:d2:52:8f:
d6:9d:dc:86:40:87:00:e5:5d:86:f9:57:bc:96:2b:
fb:7d:07:3a:ff:59:fa:5c:27:33:fc:8d:1f:12:a8:
d2:79:b9:da:04:23:e5:10:dc:ba:90:39:b2:5e:5a:
c4:39:94:8b:64:ce:2a:b0:11:d8:26:85:89:6f:68:
55:ea:f3:73:a3:d4:d7:e6:aa:54:49:4b:52:d8:47:
f8:a9:c5:08:0e:93:fb:12:82:da:7e:da:60:9b:09:
87:0a:7b:55:26:a4:43:e0:ec:bd:ca:08:31:43:e6:
f9:80:cc:dc:96:8a:cf:ec:5b:7e:79:cc:d5:a0:c1:
9a:d3:84:b1:15:e4:56:6a:84:ba:c2:51:d6:0c:e9:
1e:6a:0c:0e:4f:66:4e:49:66:fd:6a:cd:55:46:25:
05:46:71:f1:b6:b7:61:bd:ff:89:df:32:36:8c:00:
88:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7D:46:6D:CE:FB:70:1F:55:43:C7:E3:6C:98:F5:8F:07:51:7B:4B
X509v3 Authority Key Identifier:
keyid:78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:61:87:6d:0d:4d:b7:ac:58:82:e9:c1:53:84:2b:92:05:ae:
1d:09:e8:b0:73:20:1a:bb:89:36:d1:93:65:a1:a9:3f:df:31:
8a:79:cf:73:5c:83:c4:c1:29:9d:f1:8a:80:56:b8:85:00:0c:
28:0d:36:69:01:45:5f:7a:dc:83:3e:8a:14:d7:9d:17:ba:c3:
c5:40:9c:d0:2f:5b:34:25:e2:ad:a2:40:38:4b:99:91:2b:73:
0c:c5:9f:19:43:89:a2:31:d5:1b:f6:50:00:83:66:ed:35:3e:
ad:8b:e1:19:73:c6:75:33:28:b2:a5:46:48:0a:fd:c0:98:db:
bf:77:9e:89:81:7f:74:f1:48:c6:cd:f2:ad:54:c8:d2:40:c7:
df:c5:02:31:9a:59:c0:b3:89:36:00:66:d8:d2:83:8b:23:d1:
57:04:84:f7:4d:e0:e2:eb:53:5a:9d:2b:af:51:4b:39:24:c8:
2a:96:bd:60:0f:32:4b:f2:b2:e9:42:dc:94:60:90:54:99:08:
de:29:09:21:41:bc:ca:69:71:cb:61:9a:5c:1a:cc:c7:0d:ca:
9e:8b:97:14:2f:60:5d:6b:ca:40:18:d4:a4:bf:ae:6d:4e:ac:
b6:ec:35:7a:83:ae:25:89:13:db:fc:8f:38:04:69:c8:79:18:
f7:d1:f5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:52:33 2026 by rpki-client