Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
File: tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft (raw, json)
Hash identifier: /vtVK/x7UJ6y/ivfahWa2ofAtNDDtpBrttKS1tVnSfQ=
Subject key identifier: 82:D3:70:C8:B1:6A:41:CF:5C:85:7A:52:E8:D0:1D:70:14:D5:81:0C
Authority key identifier: B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17
Certificate issuer: /CN=b4430ba11506741d676ea202e291ec7ec6191b17
Certificate serial: 019D277227A4E30827C09632CA466321E564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 00:01:25 +0000
Manifest this update: Thu 26 Mar 2026 00:01:25 +0000
Manifest next update: Fri 27 Mar 2026 00:01:25 +0000
Files and hashes: 1: NDhq8_kQqGPgm41GchZ3TtgeGeg.roa (hash: +9TejtgpguDTAT190VXenQHqi2LFLLtouTU0DZkmU8U=)
2: tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl (hash: 8bwJW0QbANYF6wTlHvAQHXo7kOrzuQ1Uh4iDVIzFik0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:27:a4:e3:08:27:c0:96:32:ca:46:63:21:e5:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4430ba11506741d676ea202e291ec7ec6191b17
Validity
Not Before: Mar 26 00:01:25 2026 GMT
Not After : Mar 27 00:01:25 2026 GMT
Subject: CN=82d370c8b16a41cf5c857a52e8d01d7014d5810c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9f:6e:a3:9d:a0:f4:07:a1:ac:52:65:0d:3f:
8a:9b:5f:65:be:ce:5d:ee:9f:15:04:9d:eb:ce:aa:
f8:8b:f2:29:ea:23:ee:ab:e5:dc:23:5a:7d:8c:73:
96:21:1a:92:0a:9b:14:8b:5e:3a:23:74:35:4a:54:
ec:75:a5:9b:21:2f:9b:ad:4b:40:ba:f5:02:8f:44:
35:2f:ed:fd:3f:c9:87:64:71:7c:12:35:9b:0a:2b:
2b:29:8f:45:19:09:3b:b2:03:e3:bc:86:ae:a7:1f:
46:c1:44:72:57:d0:a4:c6:d3:5d:7e:36:e1:86:c6:
66:a4:44:e8:50:b1:c9:41:64:b9:b4:1d:fa:91:61:
f8:8a:8a:aa:20:f1:2b:84:56:f6:44:84:d6:9c:0c:
8c:ec:3c:b3:10:6d:df:2f:e3:2a:3b:57:6f:be:b3:
9d:0e:78:53:e1:bc:a3:9c:52:39:09:dd:86:57:74:
21:cb:51:bf:fe:97:a1:fa:ef:4b:16:a0:bb:0c:53:
d4:b1:47:95:f2:61:2b:85:e8:14:75:66:0b:64:1c:
98:f3:29:b5:1c:ad:0b:5a:d0:fe:e6:61:56:6f:ec:
4e:77:a8:ae:a8:21:5b:f4:93:5f:0f:7b:8b:6a:cb:
4c:52:a3:32:54:cd:15:80:1f:ca:5c:8a:94:35:20:
ef:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D3:70:C8:B1:6A:41:CF:5C:85:7A:52:E8:D0:1D:70:14:D5:81:0C
X509v3 Authority Key Identifier:
keyid:B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:06:bb:73:35:b3:0d:16:d4:90:5f:6d:3b:d8:b5:9b:dc:f8:
8e:7c:6b:41:b9:b9:34:4b:3c:35:40:51:e3:67:38:de:1e:a8:
47:be:fa:d0:66:90:3b:f0:df:77:8f:2a:ef:78:38:2f:26:9f:
31:27:cb:fd:68:b1:c7:50:13:89:5d:f0:cf:12:3b:fc:63:e6:
0c:97:66:cb:24:58:d8:f1:0c:62:74:dc:5b:a9:c2:ae:c7:1a:
91:56:7c:a6:57:ea:c2:ac:9b:53:5a:62:73:c3:04:9d:20:2f:
4f:48:b8:45:0b:c6:94:41:f7:91:fe:24:7d:f3:04:ac:ba:5d:
4d:17:63:0b:38:4e:77:9c:ad:51:2e:37:34:6a:e0:e5:04:0c:
c9:7c:06:b9:3a:59:3c:12:8e:2c:6b:bc:a3:a7:a2:51:47:84:
c8:1c:a8:00:40:0a:d9:06:ee:14:17:d7:5d:54:cf:c9:14:80:
f7:a0:98:4d:80:6a:d9:f6:40:3a:03:bb:51:9f:28:d6:9b:9a:
03:5a:a0:c6:a8:1d:3a:07:23:55:ca:a8:ce:cb:70:c8:d8:60:
4a:e4:81:09:52:4f:01:1f:64:5b:06:d1:b2:49:59:b7:bf:5f:
aa:7c:4d:2d:f6:29:02:5c:3a:60:94:5d:9c:1d:bc:bf:4f:de:
53:b4:03:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:13 2026 by rpki-client