Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.mft
File: EMjta5UtlCnjU08U2TJlmQ8cp84.mft (raw, json)
Hash identifier: x+lX7X7JV7PZZpFMtiEDPEIardxcf8uP5ut+8D+HfIA=
Subject key identifier: 86:94:AE:BB:B4:21:49:A6:DF:ED:D5:96:5E:FB:7F:E6:60:C5:FF:C8
Authority key identifier: 10:C8:ED:6B:95:2D:94:29:E3:53:4F:14:D9:32:65:99:0F:1C:A7:CE
Certificate issuer: /CN=10c8ed6b952d9429e3534f14d93265990f1ca7ce
Certificate serial: 01A17BF1F6C54B1E757E71689974DE5853A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMjta5UtlCnjU08U2TJlmQ8cp84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.mft
Manifest number: 02DC
Signing time: Tue 27 Oct 2026 06:00:17 +0000
Manifest this update: Tue 27 Oct 2026 06:00:17 +0000
Manifest next update: Wed 28 Oct 2026 06:00:17 +0000
Files and hashes: 1: 83u4srH8ACpTsU951VXyIZw_p80.roa (hash: q/HJzvlHBUwM+2hxkEl4HK2p/wjtVm5tBQqZRN97Q3I=)
2: EMjta5UtlCnjU08U2TJlmQ8cp84.crl (hash: plNnq/ZqFv2GX4pj1fC5qXNCmej7HQoNScxu1zMg0Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.mft
rsync://rpki.ripe.net/repository/DEFAULT/EMjta5UtlCnjU08U2TJlmQ8cp84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f1:f6:c5:4b:1e:75:7e:71:68:99:74:de:58:53:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10c8ed6b952d9429e3534f14d93265990f1ca7ce
Validity
Not Before: Oct 27 06:00:17 2026 GMT
Not After : Oct 28 06:00:17 2026 GMT
Subject: CN=8694aebbb42149a6dfedd5965efb7fe660c5ffc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:44:b5:6a:fa:5b:5c:1e:6e:4d:3e:e2:3b:8f:
d4:46:64:23:d2:8b:4e:ed:b3:8b:03:f7:d0:f5:bf:
fb:05:75:f3:5f:5b:d3:47:70:99:48:78:de:34:8c:
bc:64:d4:ca:85:fc:bd:48:6d:dd:eb:29:4e:8a:88:
3f:6c:6c:fe:26:45:19:ce:8c:a1:0d:bc:73:ab:40:
00:4c:0a:50:15:ed:79:37:3a:49:42:56:71:b5:91:
f6:02:b3:33:24:12:f0:3b:3d:e3:0b:84:ad:e1:d0:
0d:3f:11:91:af:44:68:89:40:47:07:b0:b5:23:de:
99:57:1e:b9:a1:72:3a:cb:5d:96:d6:7e:6b:d8:db:
82:49:f2:c8:20:5f:53:eb:48:75:ba:e0:7b:f6:38:
ae:8c:8d:fe:6d:fa:62:78:1a:bf:60:e4:29:42:66:
d2:29:23:54:66:f4:23:d4:c2:71:38:b6:b1:55:d3:
98:73:8f:a5:fd:ee:a0:7d:5a:d6:b1:06:41:60:2b:
c4:2f:bd:f9:b0:b1:37:a5:80:d4:66:bc:21:95:96:
cb:db:51:f8:b8:ee:27:3c:2b:d1:6a:5f:51:fb:a9:
e2:2b:ac:fb:29:15:e7:b9:0b:d0:81:fb:56:8a:5d:
46:9e:bc:9b:99:31:50:34:25:83:ce:ce:20:64:84:
76:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:94:AE:BB:B4:21:49:A6:DF:ED:D5:96:5E:FB:7F:E6:60:C5:FF:C8
X509v3 Authority Key Identifier:
keyid:10:C8:ED:6B:95:2D:94:29:E3:53:4F:14:D9:32:65:99:0F:1C:A7:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMjta5UtlCnjU08U2TJlmQ8cp84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:bf:0b:32:6d:cf:09:c0:b3:0a:b2:66:89:b4:65:26:31:ea:
67:74:7b:9e:9a:52:e5:95:84:e4:24:47:17:62:b2:45:38:ba:
8a:3a:73:e5:90:f4:27:7a:ac:2b:de:76:4f:50:d4:17:74:80:
74:ab:67:d1:ec:d6:d3:98:3f:61:86:93:bf:08:80:c8:63:8b:
5d:88:e0:d5:1f:00:a5:40:26:5e:74:74:15:5b:cb:e5:6c:51:
03:bf:66:d5:f4:ec:90:ab:5f:a9:1a:10:7e:aa:17:ca:b7:e9:
46:cf:1c:7a:8a:86:0d:34:10:de:5e:1c:7a:7d:0d:77:87:6e:
b9:4a:20:35:d4:4f:cf:36:4c:6d:16:bc:43:e1:ca:b6:14:26:
d1:09:66:34:23:11:21:ca:c5:28:da:3d:42:f5:02:82:87:50:
ec:64:d4:44:f9:79:f3:fd:d1:d6:c6:3b:24:c2:56:79:3b:88:
8d:66:76:07:f5:7c:9c:4f:95:1e:d7:78:0f:75:46:a6:1e:10:
ff:08:dc:61:f4:c6:21:29:e0:59:fc:cd:4f:9a:e0:be:eb:45:
fa:4d:c5:46:f2:9b:fc:b3:c7:bf:60:7a:c8:5d:28:ef:6a:cd:
41:cd:8b:bb:d9:5f:43:c8:25:70:bc:42:d3:f4:ea:b7:bc:d9:
86:dc:3a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:51:54 2026 by rpki-client