Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
File: _EjmUG7G1TxZFdyPKWREhd-S_Ok.mft (raw, json)
Hash identifier: gxinZ5GlLb6ZHSaqNSRvqKG7xrSGifgxww/lRdZuEjo=
Subject key identifier: 41:87:B6:8D:D0:27:BC:93:00:80:EC:65:FF:A4:1D:CB:61:DF:96:23
Authority key identifier: FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
Certificate issuer: /CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Certificate serial: 019D382E58C38A9C45E8DD3CA66FE3F20221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
Manifest number: 153F
Signing time: Sun 29 Mar 2026 06:00:54 +0000
Manifest this update: Sun 29 Mar 2026 06:00:54 +0000
Manifest next update: Mon 30 Mar 2026 06:00:54 +0000
Files and hashes: 1: _EjmUG7G1TxZFdyPKWREhd-S_Ok.crl (hash: skeTDshzlD4vcXfiD6VmK7QwWiNX3Vah4Tp6WA6oTK8=)
2: s10iu-qYEl97SkdPFFc91UCyTP8.roa (hash: mY1Xwqy7Z6NydVJ4ZdfvfAq3+ajlgxpmGG9kYDrwGTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:58:c3:8a:9c:45:e8:dd:3c:a6:6f:e3:f2:02:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Validity
Not Before: Mar 29 06:00:54 2026 GMT
Not After : Mar 30 06:00:54 2026 GMT
Subject: CN=4187b68dd027bc930080ec65ffa41dcb61df9623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c0:b1:96:4f:ae:00:ed:3a:79:8c:6b:6d:22:
9b:69:c1:9e:d1:ca:99:72:9a:c9:11:6a:93:44:4a:
b7:13:c6:f5:2c:5f:4b:c3:87:c8:8f:f2:b4:78:ea:
f7:67:44:d8:ed:a9:22:c4:37:b5:f3:a8:0e:d3:88:
4e:53:b1:e0:ba:3e:38:5e:bf:5c:8a:1d:23:a5:3f:
ac:3a:bb:c9:f0:44:82:00:35:40:46:a5:05:3f:56:
a5:34:0f:be:6f:01:47:8d:72:56:73:da:9f:08:61:
b7:67:c4:b3:c5:c7:26:ac:0e:3f:ea:e3:f9:5c:4a:
78:7b:68:44:06:88:c4:55:56:9d:e5:52:96:ca:80:
a8:19:4a:0d:f4:e1:c9:38:73:81:68:df:a6:9e:8e:
3d:2d:d8:57:3b:6e:c0:56:ea:9e:0c:12:70:61:d5:
a4:49:79:b6:d8:b4:9c:00:10:6c:b3:64:79:35:b5:
bc:1b:ff:3e:f3:b2:44:6c:89:7d:d1:89:2b:5b:8b:
c6:96:fa:10:19:68:c5:e7:28:34:51:6e:8d:1a:56:
c2:56:22:57:88:2b:2d:13:9c:ef:6e:a3:5d:25:b2:
52:95:b6:d8:2b:fe:58:ae:ea:52:99:59:84:90:a3:
30:1f:16:c6:7e:f9:16:00:13:f0:02:86:59:3a:09:
02:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:87:B6:8D:D0:27:BC:93:00:80:EC:65:FF:A4:1D:CB:61:DF:96:23
X509v3 Authority Key Identifier:
keyid:FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:91:d8:50:e4:d7:c5:0c:43:aa:05:d3:0a:8f:18:b3:1f:d1:
b5:79:69:0c:7d:66:71:35:35:23:c3:be:9a:72:10:81:a9:ca:
d7:40:12:eb:a4:e9:dc:99:bd:58:a3:0f:81:b1:f1:42:7c:65:
7d:9e:29:61:61:2d:91:e6:ea:cf:e8:3e:86:3e:44:ef:69:5d:
59:6a:13:77:6b:f0:e9:f0:b2:5f:f0:31:af:c1:d2:25:f7:aa:
12:17:88:ee:86:7d:97:13:c0:5d:d6:b7:9f:1e:cd:9d:5c:54:
22:f1:22:5e:0b:76:b6:59:ac:65:3c:cf:44:b6:75:0c:e8:1d:
fc:5c:77:f1:0d:c4:e7:9e:2d:44:b2:3b:47:56:7f:be:3c:1a:
59:ec:0a:93:7e:88:c2:9b:dc:ac:24:e3:b9:31:a8:7d:86:81:
c9:ef:e9:56:ac:93:88:da:70:2c:c0:d2:3a:14:8f:a8:76:46:
fc:2e:f7:ae:70:68:a4:cb:fa:bb:58:61:ba:5e:12:76:0f:72:
65:58:cf:b4:e5:a4:dc:82:f6:a7:b6:d6:4a:6e:07:bd:67:13:
9d:06:9c:07:89:1d:db:fb:6d:9e:09:1f:2e:f2:dc:e2:58:23:
6a:fd:54:64:f7:24:92:3b:ed:46:58:fd:e7:d9:a0:b9:81:d5:
70:d0:53:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:13 2026 by rpki-client