Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
File: tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft (raw, json)
Hash identifier: Lw20vEhTPtsylpg0uk92HCFOWb/EI09c3Q9fZKS3OCc=
Subject key identifier: BB:BE:78:97:2C:F6:5E:5C:26:83:3D:AB:7C:7A:8F:E1:49:B7:B9:B6
Authority key identifier: B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17
Certificate issuer: /CN=b4430ba11506741d676ea202e291ec7ec6191b17
Certificate serial: 019D38D355A5633211C10A1E2ECD12EFC4DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 09:01:07 +0000
Manifest this update: Sun 29 Mar 2026 09:01:07 +0000
Manifest next update: Mon 30 Mar 2026 09:01:07 +0000
Files and hashes: 1: NDhq8_kQqGPgm41GchZ3TtgeGeg.roa (hash: +9TejtgpguDTAT190VXenQHqi2LFLLtouTU0DZkmU8U=)
2: tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl (hash: aJrDVp4YuFjksNLUAgOuebQkgkh7motRaN5hWKdtfgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:55:a5:63:32:11:c1:0a:1e:2e:cd:12:ef:c4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4430ba11506741d676ea202e291ec7ec6191b17
Validity
Not Before: Mar 29 09:01:07 2026 GMT
Not After : Mar 30 09:01:07 2026 GMT
Subject: CN=bbbe78972cf65e5c26833dab7c7a8fe149b7b9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:69:1b:a5:52:c9:d6:dc:7e:bb:98:18:17:50:
a7:c0:c9:a5:79:b0:9d:fd:cc:f0:6b:b0:64:7d:29:
4e:f1:2d:33:1c:26:fb:7d:b8:36:ab:d1:99:9d:d9:
cb:6c:ff:dc:db:6b:e7:bd:94:56:4a:f9:f3:25:3d:
cb:24:33:db:27:c1:cb:dc:05:1e:51:c0:80:50:cf:
d3:d4:1e:c2:f8:15:b6:81:83:f6:9e:b7:7e:4d:c2:
27:41:5c:f2:57:a6:63:85:a7:1c:0b:bc:c4:02:1d:
06:fc:43:d9:78:54:33:a9:93:e6:5c:0d:bd:e5:d1:
98:6c:5b:03:11:c1:1d:12:05:44:a7:a7:ad:d4:22:
73:c4:b2:0c:29:b9:81:30:a9:95:3d:81:b5:1c:da:
14:29:cb:f5:16:b1:73:b7:bb:aa:22:fb:3a:7b:75:
b2:0f:86:de:90:1a:33:43:9d:a3:81:54:1b:00:e7:
03:d1:5f:33:de:ed:4d:c6:eb:d9:cd:b1:15:88:9c:
b3:79:ab:00:ef:e6:b4:6b:03:0d:7e:0b:06:37:ca:
81:d6:e1:a4:09:07:19:04:c8:19:39:6e:9c:74:22:
0b:a8:ba:97:18:20:ba:28:7e:9a:0f:5d:7f:e3:99:
64:70:c2:cd:a6:c9:0f:7f:37:fb:9a:11:95:c1:25:
af:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BE:78:97:2C:F6:5E:5C:26:83:3D:AB:7C:7A:8F:E1:49:B7:B9:B6
X509v3 Authority Key Identifier:
keyid:B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:4c:0f:9e:f5:ee:16:80:ca:58:c1:75:47:bd:4f:95:2f:72:
46:57:68:ed:0d:cb:92:88:2c:64:ff:05:04:b5:51:ad:c1:36:
9f:cf:53:dd:fb:28:ea:30:4c:45:27:8f:09:e5:88:6b:19:44:
61:5b:e9:50:1a:87:d3:b2:13:2d:49:18:43:49:1c:f4:bc:eb:
76:1c:66:93:cd:8e:a8:60:c6:e8:36:38:15:2e:bb:31:43:05:
12:4c:c7:59:70:ef:d4:66:ba:75:4c:af:20:32:ba:5e:3a:d7:
c6:00:ad:a3:d9:a4:b8:93:8c:a7:02:b1:4d:e9:3e:40:11:f0:
23:56:72:34:1a:97:ee:ef:e9:e7:01:4d:1f:83:c1:e4:b7:0d:
03:5e:09:f9:ef:5d:58:e3:37:7c:3d:5f:75:2c:31:63:15:fd:
05:ab:62:ad:14:a0:3e:43:0c:13:ab:fa:05:bd:1c:e4:a1:ff:
21:61:c4:b8:2c:c8:91:25:ab:7d:e3:df:35:7b:10:22:62:29:
2e:06:05:a3:5c:ed:c7:df:59:a5:cf:2d:b1:c1:5e:d4:1b:96:
31:ab:61:8d:a5:dd:7f:3d:61:af:4a:54:73:3b:a7:65:d8:52:
c9:f4:80:c6:50:6c:24:e8:6e:a7:9e:28:c3:34:8d:52:c2:0c:
5a:5f:42:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:42 2026 by rpki-client