Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.mft
File: EMjta5UtlCnjU08U2TJlmQ8cp84.mft (raw, json)
Hash identifier: xE1EuxUiYO3p9UjJarBDKDfnPQ/2/sPV8kDSanxtbew=
Subject key identifier: 46:7A:0D:5A:9B:EE:5C:65:FF:EF:36:21:91:87:B2:1F:65:2C:6A:80
Authority key identifier: 10:C8:ED:6B:95:2D:94:29:E3:53:4F:14:D9:32:65:99:0F:1C:A7:CE
Certificate issuer: /CN=10c8ed6b952d9429e3534f14d93265990f1ca7ce
Certificate serial: 01A181BDA37AB54B9A41C80C8F544EB27B7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMjta5UtlCnjU08U2TJlmQ8cp84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.mft
Manifest number: 02DF
Signing time: Wed 28 Oct 2026 09:00:51 +0000
Manifest this update: Wed 28 Oct 2026 09:00:51 +0000
Manifest next update: Thu 29 Oct 2026 09:00:51 +0000
Files and hashes: 1: 83u4srH8ACpTsU951VXyIZw_p80.roa (hash: q/HJzvlHBUwM+2hxkEl4HK2p/wjtVm5tBQqZRN97Q3I=)
2: EMjta5UtlCnjU08U2TJlmQ8cp84.crl (hash: ZE4n+F6yNPsts/tgbovCdXQp4b5TNt4FAZWpf0kuSb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.mft
rsync://rpki.ripe.net/repository/DEFAULT/EMjta5UtlCnjU08U2TJlmQ8cp84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:bd:a3:7a:b5:4b:9a:41:c8:0c:8f:54:4e:b2:7b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10c8ed6b952d9429e3534f14d93265990f1ca7ce
Validity
Not Before: Oct 28 09:00:51 2026 GMT
Not After : Oct 29 09:00:51 2026 GMT
Subject: CN=467a0d5a9bee5c65ffef36219187b21f652c6a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:10:0b:69:42:74:51:54:1a:fd:60:2f:49:d2:
a3:c0:d6:72:4f:a6:88:82:32:70:18:7a:23:21:13:
e2:c6:6c:8e:21:e9:1a:01:db:9f:ba:59:aa:3d:d8:
a7:14:d7:a1:ef:07:09:e7:8e:53:5b:64:94:43:e7:
75:be:c8:a5:46:ce:ac:b2:6d:7e:0a:e4:7b:b3:e5:
c6:d8:c8:47:a7:ce:86:e6:11:89:dc:bf:4e:62:e1:
f8:b4:07:60:96:b9:1e:63:8b:c6:a5:95:a5:f2:64:
10:e7:cc:9d:67:f2:7b:f0:e4:b9:b0:01:4c:79:d2:
56:0f:02:9b:03:37:7f:99:bb:59:71:da:cd:14:31:
d3:c7:5c:3d:53:8a:62:e0:e9:90:21:ff:ac:e7:56:
51:77:dc:3d:fd:2d:70:24:fb:af:33:1e:79:fa:a3:
4c:68:ad:ec:3b:30:68:9c:8f:e9:de:99:94:77:95:
57:26:ea:e5:1b:09:ef:08:48:46:9e:44:49:b4:1d:
5a:3a:ce:43:5a:4a:a0:60:d1:d5:24:86:ca:4f:a2:
c1:fa:e1:bb:d6:45:f9:af:dc:2e:74:32:67:05:6d:
19:d5:27:de:c6:85:1e:de:9f:9c:b0:59:74:7b:b7:
bb:72:84:e3:34:27:d5:cf:6d:ce:1c:0e:41:70:93:
e2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7A:0D:5A:9B:EE:5C:65:FF:EF:36:21:91:87:B2:1F:65:2C:6A:80
X509v3 Authority Key Identifier:
keyid:10:C8:ED:6B:95:2D:94:29:E3:53:4F:14:D9:32:65:99:0F:1C:A7:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMjta5UtlCnjU08U2TJlmQ8cp84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e8:d1:6f:63:8d:af:5d:61:1b:9a:c1:0d:69:f8:26:c3:1b:
44:af:4c:ec:ab:c2:42:ea:bf:26:37:8d:42:2b:5e:2a:75:f2:
48:ef:ad:66:a0:65:1a:a0:e1:fa:b4:aa:df:54:15:02:a6:63:
a0:50:fd:4a:41:d0:d5:48:fc:be:2d:db:e4:db:55:25:4f:10:
73:8b:36:cc:57:35:e2:21:b9:7f:10:e8:ac:42:82:d8:f1:9c:
76:4d:27:1b:1b:00:b5:69:f0:fc:e8:00:97:32:13:5a:a7:e8:
25:05:c0:fb:9b:40:67:7f:cb:c4:20:25:fa:2f:26:04:17:04:
a6:80:eb:ab:61:52:4f:e8:53:c2:8d:4c:d6:a7:cf:d6:ca:a8:
46:25:7e:3b:b3:d8:c1:a1:de:42:02:77:ce:fa:aa:cb:f8:2d:
b1:4a:61:bb:e3:ac:1b:38:c6:92:6d:5f:a3:cc:1c:94:c2:b6:
e0:d8:a6:61:72:0d:bf:9d:b9:75:9a:68:4e:2e:ea:ed:c9:0a:
59:58:5e:2c:8f:ac:42:3e:bc:53:c2:0f:81:ae:86:f2:cf:63:
79:94:e9:16:77:30:2a:4c:f5:5e:d0:10:1b:1e:e1:55:e3:06:
fa:d9:a4:6d:13:d3:64:5f:c4:22:2a:8f:1d:a0:39:89:44:12:
6d:e4:e8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:50:18 2026 by rpki-client