Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
File: eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft (raw, json)
Hash identifier: PxdPZ9YaxqPg03IkgbQRs+nrCJGMI2WxWzH4a4LS6tE=
Subject key identifier: 41:D2:FB:4C:EA:16:6A:8D:3B:49:33:57:92:8A:C7:A6:98:C6:52:7C
Authority key identifier: 78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2
Certificate issuer: /CN=78cb4975b93b4593576048338564ea3eb09dc8e2
Certificate serial: 019D38D2B25D20980C4DEEB546734C559519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
Manifest number: 0D3A
Signing time: Sun 29 Mar 2026 09:00:25 +0000
Manifest this update: Sun 29 Mar 2026 09:00:25 +0000
Manifest next update: Mon 30 Mar 2026 09:00:25 +0000
Files and hashes: 1: eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl (hash: aZRzwZfHaS7rBleGFPeFTBnhFo1h5vOVu3oXUhm42zE=)
2: qbIaJec-toVL64n7z-uuxLGTIAQ.roa (hash: T1ieQtaDmRsidOYkDXdJkWB5IsW3s99F+xa0mkqLysM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:b2:5d:20:98:0c:4d:ee:b5:46:73:4c:55:95:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78cb4975b93b4593576048338564ea3eb09dc8e2
Validity
Not Before: Mar 29 09:00:25 2026 GMT
Not After : Mar 30 09:00:25 2026 GMT
Subject: CN=41d2fb4cea166a8d3b493357928ac7a698c6527c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ed:7c:97:26:8f:3b:ab:f3:1b:a1:71:f1:ce:
2c:3a:a4:fd:03:2d:24:b0:7d:e9:80:f9:8e:8e:25:
aa:6a:e8:48:22:f0:27:d4:b8:26:63:58:19:56:12:
13:d6:33:ed:bc:69:35:e3:cd:9b:b0:c5:bc:27:cd:
05:b8:f9:8f:16:ca:0e:1b:a1:3a:33:17:64:19:07:
11:37:7c:b2:75:d1:94:3c:49:90:82:e3:df:b8:bd:
68:04:42:fb:90:32:4c:93:12:42:14:08:17:4c:23:
3e:20:37:4b:51:39:cc:21:c6:d3:42:24:e1:a2:e2:
a9:fe:db:96:7a:bc:d0:c5:d3:d0:0f:ac:40:93:2f:
b8:bb:4f:bf:cc:e6:8e:bc:be:55:af:5e:9c:90:68:
c3:2b:48:4a:20:7e:b3:78:e9:0d:7f:18:aa:f4:cb:
57:dc:fc:a8:66:83:8d:07:ee:63:5f:49:a3:1c:9d:
67:84:43:b3:27:9d:7d:7c:ed:9d:8f:a3:42:a8:b8:
26:37:6c:3b:b7:3f:d9:5b:4d:17:89:e1:73:13:e4:
47:fe:1d:28:ca:66:a6:15:50:bd:60:75:58:cf:38:
33:44:3c:92:01:b0:d9:56:e9:55:71:0b:15:23:32:
f8:84:32:7c:68:cf:ba:36:c7:2e:28:a6:4f:16:c2:
19:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D2:FB:4C:EA:16:6A:8D:3B:49:33:57:92:8A:C7:A6:98:C6:52:7C
X509v3 Authority Key Identifier:
keyid:78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:cd:58:01:0a:e1:71:e6:2d:c5:43:b2:67:ae:a0:cb:da:c5:
cf:3f:a0:7c:55:8a:d5:b9:1f:15:e2:d0:36:3c:bf:91:3b:50:
dc:25:41:0a:90:d4:a5:fa:ff:b8:9c:54:3e:04:ad:2d:ab:aa:
1f:9d:ec:ed:26:6c:e6:2a:c6:57:b3:e0:9d:21:73:ad:7a:40:
73:b9:3e:66:dd:67:e7:14:8e:b6:c6:58:07:32:1f:45:ad:0e:
44:f4:54:34:4a:f8:98:f1:9e:47:08:d4:bf:f2:8c:aa:c9:23:
58:19:f7:c7:09:ee:16:a5:5b:68:44:54:da:2b:00:a1:e4:81:
3a:c1:e1:34:30:db:ea:c0:aa:fb:89:49:5b:11:c7:16:45:ca:
b5:b3:27:96:f8:a0:09:3c:b8:5e:93:12:8c:60:7a:91:75:1e:
91:c9:a6:64:94:05:62:8c:de:50:4d:71:a3:7e:5c:cd:eb:9c:
4b:d6:2d:98:c1:a2:0d:c2:f4:95:ed:f0:2d:6b:0a:48:4c:59:
3a:33:97:ba:f5:a2:c0:c0:80:6e:cf:48:90:2e:39:bd:c6:c1:
f9:47:5a:15:e3:0b:51:19:ef:b4:91:c9:58:14:5d:60:7c:ba:
03:ac:5b:6f:cb:0d:5b:bd:7f:0f:ac:58:d2:93:9b:bb:30:ba:
4a:20:fb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:32 2026 by rpki-client