Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/eMRsCX4Xa85siVwe10S_pD6z3G4.mft
File: eMRsCX4Xa85siVwe10S_pD6z3G4.mft (raw, json)
Hash identifier: WAmpivRJIrJO3KQbbf3Hg7A0UEYsmbOtk91wvhZPFsU=
Subject key identifier: 59:7E:57:D0:D8:04:D8:7A:FE:FC:BA:DF:C5:34:B2:06:A4:55:1C:CA
Authority key identifier: 78:C4:6C:09:7E:17:6B:CE:6C:89:5C:1E:D7:44:BF:A4:3E:B3:DC:6E
Certificate issuer: /CN=78c46c097e176bce6c895c1ed744bfa43eb3dc6e
Certificate serial: 01A0E92D8B6559F61816755A838E11CA4171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMRsCX4Xa85siVwe10S_pD6z3G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/eMRsCX4Xa85siVwe10S_pD6z3G4.mft
Manifest number: F2
Signing time: Mon 28 Sep 2026 18:01:11 +0000
Manifest this update: Mon 28 Sep 2026 18:01:11 +0000
Manifest next update: Tue 29 Sep 2026 18:01:11 +0000
Files and hashes: 1: HlYqT_kwkLWmKlOfuC7oNKHvGgw.roa (hash: wbmPokxDOoHIPfR7QTpjuQ/c382mpseG/N4hPA1qI84=)
2: OQAcJ8twO-0txHfmVy59HWTOP9w.roa (hash: /n9+qfj0nnJqEu6wg9q6/DDasUmZSfO528DRTQrF9kg=)
3: eMRsCX4Xa85siVwe10S_pD6z3G4.crl (hash: Toe7Fi36WVFH+yzMmafOiMxpeZg4tjuG4HGC0ploLxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/eMRsCX4Xa85siVwe10S_pD6z3G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/eMRsCX4Xa85siVwe10S_pD6z3G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eMRsCX4Xa85siVwe10S_pD6z3G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2d:8b:65:59:f6:18:16:75:5a:83:8e:11:ca:41:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78c46c097e176bce6c895c1ed744bfa43eb3dc6e
Validity
Not Before: Sep 28 18:01:11 2026 GMT
Not After : Sep 29 18:01:11 2026 GMT
Subject: CN=597e57d0d804d87afefcbadfc534b206a4551cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:17:0b:dc:43:d8:ec:54:1d:b5:bd:d5:1d:b2:
3e:3d:a2:89:a5:e6:a1:85:cc:f2:70:fa:bd:b3:fb:
65:00:95:53:42:4a:39:11:a0:13:aa:07:4e:8c:c7:
32:66:98:65:6c:89:d6:ea:da:69:a1:9b:18:31:1e:
09:ea:53:dc:a9:37:b1:20:dd:46:0c:1f:7f:e9:31:
59:ec:6c:21:a5:50:78:f1:33:54:56:96:f8:19:0e:
94:12:da:fc:12:1e:1b:25:96:8c:48:a5:ec:1f:08:
50:e8:f3:4c:32:bb:97:05:70:8f:36:6f:9b:7d:19:
ab:49:ae:35:94:45:a2:30:b9:f4:52:2b:df:3c:1a:
8d:6c:2b:68:88:0c:35:0c:d0:9c:4a:c2:1d:34:8a:
91:fa:9d:57:75:7f:02:ef:25:e6:28:fc:89:bd:6d:
09:e4:da:d0:b0:ae:bc:28:7b:44:cb:5b:35:2d:5a:
91:6a:87:00:0d:e4:42:cc:a3:57:2e:27:3b:4d:72:
4f:a7:20:aa:3a:34:97:87:66:62:0b:d3:4c:47:88:
61:4e:96:90:78:6b:8b:d6:15:4e:b8:7c:ff:16:49:
bb:6f:e8:d8:a8:d6:91:c5:dd:5a:1b:47:62:51:a7:
3d:9a:8a:cc:a1:c1:65:24:ec:7e:5d:f3:7b:7d:e5:
e2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7E:57:D0:D8:04:D8:7A:FE:FC:BA:DF:C5:34:B2:06:A4:55:1C:CA
X509v3 Authority Key Identifier:
keyid:78:C4:6C:09:7E:17:6B:CE:6C:89:5C:1E:D7:44:BF:A4:3E:B3:DC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMRsCX4Xa85siVwe10S_pD6z3G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/eMRsCX4Xa85siVwe10S_pD6z3G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/eMRsCX4Xa85siVwe10S_pD6z3G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ec:d2:71:b1:a4:30:b4:6c:0f:0f:a5:8a:d6:76:3d:eb:8c:
85:bd:c9:c6:c0:3c:38:76:22:12:0b:fc:2a:41:0e:6d:e1:87:
cf:e3:a9:26:2f:29:dd:15:d9:6d:4d:d1:4e:54:ca:7c:0c:02:
bc:a9:cb:6c:16:92:a2:fe:6f:ef:de:e7:d3:03:ca:f5:fe:f3:
c7:0e:6c:05:42:0d:3f:1c:39:5a:ae:5d:c5:5c:8c:f6:df:72:
ec:bb:f0:91:57:41:e9:38:4a:ab:7a:d6:c7:64:24:9f:89:c6:
c5:c5:a7:b6:09:74:55:fe:6d:5e:83:44:d3:89:fa:80:92:ee:
ec:8c:92:3f:dd:07:eb:48:98:2f:46:79:cc:ec:62:8c:32:a2:
86:fb:93:9b:6f:2d:31:78:68:28:f2:b1:b4:66:8c:c9:48:c9:
ea:8e:11:08:82:33:33:a7:83:8b:64:cd:cb:5e:db:cd:99:2b:
08:ef:74:24:5a:dd:46:22:0d:13:de:cd:4b:22:9d:96:56:11:
d1:9f:5c:1f:fb:02:bd:1f:09:63:96:cd:18:8e:4d:00:e1:0a:
c0:74:b2:f1:a2:a7:61:fa:45:76:0d:7a:73:f6:22:2f:eb:15:
20:01:3a:da:89:19:9f:d2:e5:d6:6b:3b:62:70:51:d8:5f:29:
58:02:4f:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDpLYtlWfYYFnVag44RykFxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4YzQ2YzA5N2UxNzZiY2U2Yzg5NWMxZWQ3NDRiZmE0M2Vi
M2RjNmUwHhcNMjYwOTI4MTgwMTExWhcNMjYwOTI5MTgwMTExWjAzMTEwLwYDVQQD
Eyg1OTdlNTdkMGQ4MDRkODdhZmVmY2JhZGZjNTM0YjIwNmE0NTUxY2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRcL3EPY7FQdtb3VHbI+PaKJpeah
hczycPq9s/tlAJVTQko5EaATqgdOjMcyZphlbInW6tppoZsYMR4J6lPcqTexIN1G
DB9/6TFZ7GwhpVB48TNUVpb4GQ6UEtr8Eh4bJZaMSKXsHwhQ6PNMMruXBXCPNm+b
fRmrSa41lEWiMLn0UivfPBqNbCtoiAw1DNCcSsIdNIqR+p1XdX8C7yXmKPyJvW0J
5NrQsK68KHtEy1s1LVqRaocADeRCzKNXLic7TXJPpyCqOjSXh2ZiC9NMR4hhTpaQ
eGuL1hVOuHz/Fkm7b+jYqNaRxd1aG0diUac9morMocFlJOx+XfN7feXiKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFl+V9DYBNh6/vy638U0sgakVRzKMB8GA1UdIwQY
MBaAFHjEbAl+F2vObIlcHtdEv6Q+s9xuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU1Sc0NYNFhhODVzaVZ3ZTEwU19wRDZ6M0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80OGM5ZjYtNWI1Zi00MWQ0LThlNTYt
MDhlNGI3OTM4N2MwLzEvZU1Sc0NYNFhhODVzaVZ3ZTEwU19wRDZ6M0c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC80OGM5ZjYtNWI1Zi00MWQ0LThlNTYtMDhlNGI3OTM4N2Mw
LzEvZU1Sc0NYNFhhODVzaVZ3ZTEwU19wRDZ6M0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjOzScbGk
MLRsDw+litZ2PeuMhb3JxsA8OHYiEgv8KkEObeGHz+OpJi8p3RXZbU3RTlTKfAwC
vKnLbBaSov5v797n0wPK9f7zxw5sBUINPxw5Wq5dxVyM9t9y7LvwkVdB6ThKq3rW
x2Qkn4nGxcWntgl0Vf5tXoNE04n6gJLu7IySP90H60iYL0Z5zOxijDKihvuTm28t
MXhoKPKxtGaMyUjJ6o4RCIIzM6eDi2TNy17bzZkrCO90JFrdRiINE97NSyKdllYR
0Z9cH/sCvR8JY5bNGI5NAOEKwHSy8aKnYfpFdg16c/YiL+sVIAE62okZn9Ll1ms7
YnBR2F8pWAJPiA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 22:48:18 2026 by rpki-client