Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
File: _EjmUG7G1TxZFdyPKWREhd-S_Ok.mft (raw, json)
Hash identifier: 3yFs/KxALKTtccgL4oIamYVoWVRAE0FtwAfKbBavQ3w=
Subject key identifier: CA:6E:70:E1:9B:34:24:CB:B4:6B:83:26:3F:39:45:88:D4:A0:82:6F
Authority key identifier: FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
Certificate issuer: /CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Certificate serial: 01A19468D9C0928ED17C186669ABD1751BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
Manifest number: 1781
Signing time: Sun 01 Nov 2026 00:01:01 +0000
Manifest this update: Sun 01 Nov 2026 00:01:01 +0000
Manifest next update: Mon 02 Nov 2026 00:01:01 +0000
Files and hashes: 1: _EjmUG7G1TxZFdyPKWREhd-S_Ok.crl (hash: ma98GPh67yeJZ9c4uGKz4kifRxfH03R0M7Jr4iyTJp4=)
2: s10iu-qYEl97SkdPFFc91UCyTP8.roa (hash: mY1Xwqy7Z6NydVJ4ZdfvfAq3+ajlgxpmGG9kYDrwGTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:94:68:d9:c0:92:8e:d1:7c:18:66:69:ab:d1:75:1b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Validity
Not Before: Nov 1 00:01:01 2026 GMT
Not After : Nov 2 00:01:01 2026 GMT
Subject: CN=ca6e70e19b3424cbb46b83263f394588d4a0826f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:24:05:39:bd:b8:4a:8e:06:5c:fc:1d:b6:4b:
cc:e5:d1:c5:77:7c:51:9f:85:8a:48:b7:8b:56:cf:
db:2c:e8:42:62:67:8f:d6:c5:47:2b:b7:02:4f:92:
fc:7c:04:e6:13:19:ec:ec:72:92:77:8b:2a:6f:31:
26:df:da:ea:f7:b5:02:41:04:be:3f:a4:6c:aa:a0:
8c:a5:73:b0:eb:e7:de:5c:c5:3b:61:18:f8:8c:db:
82:c1:94:a0:ba:f7:b1:e2:94:12:82:95:6b:f5:96:
ac:95:4f:fd:d9:5b:e8:87:1b:ed:83:44:2e:87:03:
57:3d:33:0b:9e:5e:d6:e6:9e:ac:75:87:85:61:19:
89:c5:84:0c:72:30:6b:ca:ac:23:dc:c3:de:52:67:
7f:88:d8:73:b2:57:2c:7d:7d:c2:33:51:39:a8:16:
50:71:08:59:0d:40:77:4c:55:6f:4a:7a:13:aa:fb:
69:80:2e:d2:7a:1d:83:38:41:7c:1a:80:89:8b:43:
24:35:69:1f:fd:fe:1b:2c:8e:9d:54:3a:c5:86:91:
d4:5b:c9:18:0e:92:1f:1c:19:25:0d:cf:c7:83:d8:
c1:61:7d:d4:7d:34:72:01:f2:69:a3:31:b6:55:25:
c3:7f:65:61:de:9d:71:a3:9f:9b:da:af:4c:85:a4:
56:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6E:70:E1:9B:34:24:CB:B4:6B:83:26:3F:39:45:88:D4:A0:82:6F
X509v3 Authority Key Identifier:
keyid:FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3c:bb:43:36:82:70:97:5b:0a:3a:f4:4f:cd:57:21:56:c5:
d7:1b:49:c2:b8:70:7b:99:a4:ba:3b:bc:bf:89:61:87:29:41:
6b:5d:5e:e4:af:b9:be:ed:82:7c:a1:c6:37:73:c6:b1:e2:d2:
be:6a:4e:06:91:c4:0d:d2:d3:86:0f:49:78:64:cc:f5:b3:f6:
b5:53:c0:55:b8:68:ad:ef:70:b7:39:f7:80:a8:ab:cc:97:5f:
e2:27:ce:6d:0f:35:90:6b:94:5b:97:86:03:69:c4:a3:c3:1b:
79:46:21:f1:e4:11:ae:dd:70:a0:29:d1:43:01:c1:1d:bb:76:
a2:17:92:38:32:74:08:f7:a7:50:39:73:bd:e0:da:e5:09:b7:
db:e7:bd:b2:f6:67:99:72:73:26:0c:95:8a:7c:24:8a:0c:a8:
8f:44:61:55:b8:fe:bc:87:23:13:1d:1d:71:84:d9:b7:01:eb:
a2:e1:25:51:be:97:2c:45:37:e3:fb:3f:d9:b5:51:15:f5:ea:
b5:58:4e:a1:a6:11:09:b7:d8:e4:b6:99:f7:de:5f:74:1e:01:
1c:95:d7:83:23:f6:38:17:71:69:38:ed:b6:7d:4b:7a:72:19:
16:7f:72:73:3f:77:04:c7:ad:9c:41:1a:27:d3:da:a4:bc:fd:
2e:86:d7:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGUaNnAko7RfBhmaavRdRvwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNDhlNjUwNmVjNmQ1M2M1OTE1ZGM4ZjI5NjQ0NDg1ZGY5
MmZjZTkwHhcNMjYxMTAxMDAwMTAxWhcNMjYxMTAyMDAwMTAxWjAzMTEwLwYDVQQD
EyhjYTZlNzBlMTliMzQyNGNiYjQ2YjgzMjYzZjM5NDU4OGQ0YTA4MjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyQFOb24So4GXPwdtkvM5dHFd3xR
n4WKSLeLVs/bLOhCYmeP1sVHK7cCT5L8fATmExns7HKSd4sqbzEm39rq97UCQQS+
P6RsqqCMpXOw6+feXMU7YRj4jNuCwZSguvex4pQSgpVr9ZaslU/92Vvohxvtg0Qu
hwNXPTMLnl7W5p6sdYeFYRmJxYQMcjBryqwj3MPeUmd/iNhzslcsfX3CM1E5qBZQ
cQhZDUB3TFVvSnoTqvtpgC7Seh2DOEF8GoCJi0MkNWkf/f4bLI6dVDrFhpHUW8kY
DpIfHBklDc/Hg9jBYX3UfTRyAfJpozG2VSXDf2Vh3p1xo5+b2q9MhaRWzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpucOGbNCTLtGuDJj85RYjUoIJvMB8GA1UdIwQY
MBaAFPxI5lBuxtU8WRXcjylkRIXfkvzpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0VqbVVHN0cxVHhaRmR5UEtXUkVoZC1TX09rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zYWI2Y2YtOTljZC00YWM0LTkwMTMt
ZjViZWUxNmVkM2E3LzEvX0VqbVVHN0cxVHhaRmR5UEtXUkVoZC1TX09rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8zYWI2Y2YtOTljZC00YWM0LTkwMTMtZjViZWUxNmVkM2E3
LzEvX0VqbVVHN0cxVHhaRmR5UEtXUkVoZC1TX09rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaDy7QzaC
cJdbCjr0T81XIVbF1xtJwrhwe5mkuju8v4lhhylBa11e5K+5vu2CfKHGN3PGseLS
vmpOBpHEDdLThg9JeGTM9bP2tVPAVbhore9wtzn3gKirzJdf4ifObQ81kGuUW5eG
A2nEo8MbeUYh8eQRrt1woCnRQwHBHbt2oheSODJ0CPenUDlzveDa5Qm32+e9svZn
mXJzJgyVinwkigyoj0RhVbj+vIcjEx0dcYTZtwHrouElUb6XLEU34/s/2bVRFfXq
tVhOoaYRCbfY5LaZ995fdB4BHJXXgyP2OBdxaTjttn1LenIZFn9ycz93BMetnEEa
J9PapLz9LobXYw==
-----END CERTIFICATE-----
Generated at Sun Nov 1 08:36:45 2026 by rpki-client