Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
File: eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft (raw, json)
Hash identifier: ki9kH+Jmyf8zokAdRS/eSIAnxyUMev+O9JRZPiwMMNo=
Subject key identifier: 43:9A:37:4E:07:0F:F8:94:9D:15:D1:0D:79:A6:24:B7:68:7D:52:D1
Authority key identifier: 78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2
Certificate issuer: /CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
Certificate serial: 019D38659C18B5D1158213FCBCAA1D66091C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
Manifest number: 14D9
Signing time: Sun 29 Mar 2026 07:01:16 +0000
Manifest this update: Sun 29 Mar 2026 07:01:16 +0000
Manifest next update: Mon 30 Mar 2026 07:01:16 +0000
Files and hashes: 1: IkSWs7EkuQhyXRbP9F6EHBtTz1o.roa (hash: Byu4YYkguBqvjzQYm5SoI51Ex0ZiZOLUbV6kTS2GuBk=)
2: eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl (hash: VGQiLIer+2NedeJdy5GMVPgyxCN6WDVKOD8+RLterMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:9c:18:b5:d1:15:82:13:fc:bc:aa:1d:66:09:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
Validity
Not Before: Mar 29 07:01:16 2026 GMT
Not After : Mar 30 07:01:16 2026 GMT
Subject: CN=439a374e070ff8949d15d10d79a624b7687d52d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:89:55:98:ef:7c:41:d3:b9:75:a4:24:d5:53:
9b:01:73:15:19:13:43:ef:ad:10:a9:22:18:ae:96:
f1:0f:27:6b:a6:3d:ea:50:6b:2b:35:20:3f:48:94:
e5:fc:82:5d:33:81:77:0d:cf:c8:da:db:d3:9e:5d:
d5:f8:5b:2a:47:77:2d:ce:1d:dc:c4:b9:a0:a2:b4:
84:2d:b6:0d:5a:92:2d:5a:9c:db:b3:c8:6c:97:4f:
2a:52:74:8c:64:6f:b4:c1:3a:6d:4a:0f:6b:dd:ca:
07:59:af:f5:c0:87:d4:63:7d:a0:4d:1f:e7:46:aa:
c0:6d:1b:a1:19:1d:5d:be:86:1d:6c:c3:8f:a5:70:
de:b6:f8:34:07:18:df:53:be:48:42:8e:ff:43:32:
ef:00:4a:dd:db:13:a5:4b:e1:05:d5:ab:5d:8f:f8:
f4:62:93:ae:ee:29:33:63:30:e1:96:c6:b6:e7:aa:
05:89:ab:75:4d:32:9c:b7:a2:b9:12:dc:85:92:75:
d5:92:c2:d8:34:4a:b2:dc:e7:1f:25:8e:0f:96:79:
db:46:9d:92:4b:6f:8b:7c:08:95:4a:62:f2:10:46:
8e:77:ea:ad:c9:a1:2c:60:ab:89:64:40:b1:85:97:
5d:4a:df:8f:58:74:2e:03:b6:ae:78:ac:26:b7:81:
e2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9A:37:4E:07:0F:F8:94:9D:15:D1:0D:79:A6:24:B7:68:7D:52:D1
X509v3 Authority Key Identifier:
keyid:78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:8e:6c:4a:fc:7f:f5:6a:ac:c1:04:bc:80:46:10:fb:ac:e8:
eb:68:2e:35:13:18:f8:15:db:e5:47:2e:53:91:f0:31:a1:70:
67:df:3b:41:e5:1a:cc:07:8e:39:3c:dc:3c:0f:d1:91:cb:1b:
a1:d8:4d:cf:1f:c6:36:99:a6:3a:b9:62:f5:37:b8:b8:37:7a:
b9:a3:d4:48:5d:59:63:39:0c:de:d2:e5:78:1c:c5:de:9f:e0:
8e:3b:91:f7:55:fc:3d:4c:11:6a:fc:a3:5c:1a:f3:ee:36:1f:
33:d9:1c:a3:83:39:32:23:41:f9:27:f8:63:86:60:19:e3:12:
d9:90:db:60:85:d3:bb:6e:c8:c7:aa:39:dd:f6:5b:98:27:fe:
9f:38:ad:d6:ff:ce:82:98:73:2f:81:09:64:af:19:a0:ca:79:
ed:16:9f:41:6d:d0:05:0f:0f:b2:cc:6b:19:ec:d2:15:92:42:
94:2a:dc:9e:7c:20:86:d3:bf:fe:7f:d5:44:55:c6:b6:b1:58:
0b:9c:21:91:9a:41:e9:d0:cd:c2:94:fc:a0:02:8e:e1:62:f0:
9a:66:15:20:a5:34:69:6a:d5:bb:05:5d:22:19:32:d2:8f:6b:
ad:e9:de:99:18:eb:bc:49:71:f4:08:b2:cc:bb:1b:7a:8f:e3:
92:b2:bc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:50 2026 by rpki-client