Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
File: EmXJFl_TNt9t_oSa69zkaF-xmTw.mft (raw, json)
Hash identifier: 3yMjbpAUaguLiwR7eAGPaElyM07VxnVh1tracyIg+Jk=
Subject key identifier: A0:D0:82:7E:BB:E0:66:9A:D0:F4:23:A9:64:BD:94:9D:21:8E:24:04
Authority key identifier: 12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C
Certificate issuer: /CN=1265c9165fd336df6dfe849aebdce4685fb1993c
Certificate serial: 019D37F7253BA14B264E61B885D05FE2E046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
Manifest number: 15CA
Signing time: Sun 29 Mar 2026 05:00:36 +0000
Manifest this update: Sun 29 Mar 2026 05:00:36 +0000
Manifest next update: Mon 30 Mar 2026 05:00:36 +0000
Files and hashes: 1: 6EoSjHN4t39-FE41ARaCfceq3s4.roa (hash: uTwjH+AoTBPoH409BUSaNY0tsegEvG16T99C8c2GUCc=)
2: EmXJFl_TNt9t_oSa69zkaF-xmTw.crl (hash: cjbWsFBYzrEoLmZex2VoHFxV0O/m1KsBbiB/w54gepg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:25:3b:a1:4b:26:4e:61:b8:85:d0:5f:e2:e0:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1265c9165fd336df6dfe849aebdce4685fb1993c
Validity
Not Before: Mar 29 05:00:36 2026 GMT
Not After : Mar 30 05:00:36 2026 GMT
Subject: CN=a0d0827ebbe0669ad0f423a964bd949d218e2404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3c:d6:c6:77:f1:71:f6:e3:08:03:97:4e:98:
00:cb:d9:eb:98:29:9c:17:59:52:e2:3c:c5:c9:ed:
2f:16:4a:06:04:f9:56:82:a7:8f:a9:93:2e:56:03:
e1:9b:a1:b8:36:c9:6f:9d:7b:73:d7:6a:f0:5f:70:
ba:a1:85:60:79:4c:80:8d:ee:ca:ed:d8:53:ff:37:
45:9b:9e:8c:1e:75:d9:05:7a:c2:e1:5d:15:2a:e1:
f7:f5:77:36:3d:61:83:49:0d:08:81:46:b4:e4:ce:
3a:ce:23:59:c5:7e:42:de:2f:bf:41:6d:bd:f5:81:
3f:1e:33:59:be:86:a7:a5:ea:a0:85:10:01:d6:f1:
5d:dc:99:3e:00:68:0b:9b:34:c5:f6:5d:c8:05:8f:
5c:13:aa:e7:ac:a7:e9:f5:01:4e:06:20:ca:92:ff:
54:dd:ba:1e:0c:f0:90:35:c0:7e:c3:d5:a0:c3:14:
b0:5b:d1:99:57:18:31:b2:8c:d6:03:dc:7c:e5:7f:
94:ad:5f:5c:46:79:9b:52:c3:00:73:29:7a:f0:7e:
b1:28:79:05:0a:10:11:65:a3:10:8f:71:16:47:46:
bc:7e:f4:ab:82:a0:5c:20:64:20:91:ee:ba:81:0e:
cc:4b:12:09:89:7b:92:3e:63:09:75:b8:67:6c:e9:
77:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D0:82:7E:BB:E0:66:9A:D0:F4:23:A9:64:BD:94:9D:21:8E:24:04
X509v3 Authority Key Identifier:
keyid:12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:9a:0a:80:a3:f8:21:af:39:d5:f4:ee:59:31:c1:92:03:eb:
f7:75:37:8e:a0:27:41:08:f0:aa:ee:b0:27:31:26:bf:91:87:
bc:fb:85:a9:a6:01:a7:67:46:96:1f:4a:06:a4:90:3e:43:f0:
bf:5c:6e:f2:cc:ed:ea:f1:e6:de:08:ac:e0:84:ef:50:ff:2f:
6d:d7:8d:89:5e:bf:f0:ad:e2:26:6d:db:62:32:ce:1e:13:f6:
73:fd:e5:75:ee:4c:ab:d7:ec:b6:3e:a7:b8:84:19:52:a0:43:
91:d5:09:16:28:c9:83:38:8a:32:48:b4:43:21:6f:20:f0:57:
12:62:99:9e:c2:b3:eb:9c:24:87:07:82:c8:0f:47:81:02:46:
87:c8:68:13:19:68:50:16:4f:47:05:0d:6e:9d:d8:89:22:af:
86:dc:2a:42:d6:9d:47:50:66:9e:9b:bb:84:93:96:ca:fc:54:
95:8d:e3:7d:2d:3e:4c:43:1c:d6:f8:d1:f4:26:04:9d:6a:50:
0e:ba:20:b8:17:37:9b:9c:ec:ad:58:56:b7:14:68:45:89:d4:
f7:76:3e:e3:c1:00:93:d8:0f:2a:df:4f:8f:81:d3:fa:67:ff:
6f:24:23:c0:cc:9b:8e:f1:79:36:c4:6a:15:9f:ab:8d:02:d7:
6a:70:6a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:04 2026 by rpki-client