Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.mft
File: EMjta5UtlCnjU08U2TJlmQ8cp84.mft (raw, json)
Hash identifier: fYyUQ6n/hvrTXFxpbxRcUwklJTKQuRAUwqr14tKTWO4=
Subject key identifier: 37:5A:A5:02:2D:7A:A2:FB:8B:B7:7E:DB:F7:4A:0F:81:22:71:9B:09
Authority key identifier: 10:C8:ED:6B:95:2D:94:29:E3:53:4F:14:D9:32:65:99:0F:1C:A7:CE
Certificate issuer: /CN=10c8ed6b952d9429e3534f14d93265990f1ca7ce
Certificate serial: 019D2B4E3B247E269C1D0094F367BD15A754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMjta5UtlCnjU08U2TJlmQ8cp84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.mft
Manifest number: A0
Signing time: Thu 26 Mar 2026 18:00:40 +0000
Manifest this update: Thu 26 Mar 2026 18:00:40 +0000
Manifest next update: Fri 27 Mar 2026 18:00:40 +0000
Files and hashes: 1: 83u4srH8ACpTsU951VXyIZw_p80.roa (hash: q/HJzvlHBUwM+2hxkEl4HK2p/wjtVm5tBQqZRN97Q3I=)
2: EMjta5UtlCnjU08U2TJlmQ8cp84.crl (hash: 1+9ssHwNerKIjSDlY35Fc5l2BxVjAb8/FTYxLPVbmfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.mft
rsync://rpki.ripe.net/repository/DEFAULT/EMjta5UtlCnjU08U2TJlmQ8cp84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:3b:24:7e:26:9c:1d:00:94:f3:67:bd:15:a7:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10c8ed6b952d9429e3534f14d93265990f1ca7ce
Validity
Not Before: Mar 26 18:00:40 2026 GMT
Not After : Mar 27 18:00:40 2026 GMT
Subject: CN=375aa5022d7aa2fb8bb77edbf74a0f8122719b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d4:2f:4e:43:75:7d:98:4e:47:81:c9:56:53:
08:c1:88:b1:fb:1a:46:70:92:36:1f:de:9f:69:8d:
2b:fb:de:75:db:e2:ce:a7:02:8c:c9:43:cc:4f:d5:
7e:22:24:1d:31:de:d4:50:a1:60:e2:20:7d:4a:d7:
11:25:a8:07:95:36:b0:b9:04:ab:06:0b:49:e4:27:
e3:d9:4d:2b:24:57:2c:a4:eb:d6:1a:cf:f2:f9:e1:
38:d5:81:08:0c:1b:fd:13:14:3c:87:03:1b:a8:18:
20:95:0f:20:d6:8a:28:09:a9:ac:33:28:9d:5a:d1:
20:fd:43:01:1e:78:e0:fe:5c:b2:2e:b1:fb:fa:31:
8a:0e:79:e2:c6:a7:8f:d9:fe:bd:ee:0a:29:04:dd:
77:fe:f2:55:32:fa:38:b4:30:5d:53:c6:b4:56:b8:
cc:fe:1d:78:0b:8b:7b:d7:25:a4:ea:c3:bf:61:90:
7f:88:10:c2:c2:31:54:9a:9e:31:9c:4e:4c:be:be:
80:59:7a:50:10:6d:00:34:f3:c8:7f:29:db:3d:cb:
d3:f7:ce:05:4a:f4:aa:57:0b:96:a0:02:6a:98:20:
ec:83:b0:1b:55:1e:bf:bd:1a:63:85:6d:9d:dc:dd:
ee:cd:b9:49:43:a6:6a:2d:5a:b1:0d:41:98:fc:74:
05:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5A:A5:02:2D:7A:A2:FB:8B:B7:7E:DB:F7:4A:0F:81:22:71:9B:09
X509v3 Authority Key Identifier:
keyid:10:C8:ED:6B:95:2D:94:29:E3:53:4F:14:D9:32:65:99:0F:1C:A7:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMjta5UtlCnjU08U2TJlmQ8cp84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:7e:d8:48:a3:5b:6c:10:fd:fe:bc:fe:a6:10:5d:fc:86:65:
12:c7:67:e9:40:a5:4d:71:54:bd:43:91:be:a2:97:47:2e:18:
f6:3b:4c:03:22:a3:47:b9:b2:b2:48:19:5d:33:18:89:1a:93:
f3:ca:2d:1d:e3:e7:10:3a:9a:e7:93:c8:f7:0f:eb:74:e0:5f:
00:76:ce:c9:ff:f1:9d:1f:ce:a3:2f:6a:ef:24:95:0c:54:9e:
52:f7:bd:66:f5:77:e1:76:b9:f5:69:a1:70:9c:1c:33:52:fb:
f9:c4:c3:67:58:eb:85:34:3a:30:ec:24:92:0c:ea:6b:3b:d6:
4e:bb:a3:98:c8:9b:e3:5a:bf:5a:19:09:6b:34:c8:e4:28:8b:
ab:58:87:8f:25:65:75:c3:7f:08:92:60:06:83:bb:17:c5:0e:
d0:4a:f7:08:bb:94:0c:20:8d:5f:58:b0:7c:82:f5:cf:98:58:
7d:5d:2b:c8:0e:78:e6:03:1c:58:3c:ff:93:74:19:8d:e0:75:
40:dd:e6:1c:1b:ad:92:7f:f0:e4:2c:9d:84:56:4b:d4:14:65:
c0:6e:7e:a1:2e:11:42:5f:88:5f:2b:42:12:27:33:f4:20:e7:
26:0e:74:59:be:68:95:ea:94:19:a2:cb:ba:cb:d6:81:9a:2a:
fb:70:3a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:43:59 2026 by rpki-client