Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
File: eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft (raw, json)
Hash identifier: Vj+3fETpDcfsnfq1XAEAfpAm1qdoQKsePYMDudzqqAg=
Subject key identifier: D2:CC:EC:30:34:5A:5D:4C:F6:89:94:EC:FA:54:BE:33:4F:0C:88:E0
Authority key identifier: 78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2
Certificate issuer: /CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
Certificate serial: 019CAB6ACAEC04AAE0E8D4F72379EA590D70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
Manifest number: 1490
Signing time: Sun 01 Mar 2026 22:00:28 +0000
Manifest this update: Sun 01 Mar 2026 22:00:28 +0000
Manifest next update: Mon 02 Mar 2026 22:00:28 +0000
Files and hashes: 1: IkSWs7EkuQhyXRbP9F6EHBtTz1o.roa (hash: Byu4YYkguBqvjzQYm5SoI51Ex0ZiZOLUbV6kTS2GuBk=)
2: eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl (hash: LmftBeDLohAV1nNWItHUnizfs7v2KDylPdTh06cDG0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:ca:ec:04:aa:e0:e8:d4:f7:23:79:ea:59:0d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
Validity
Not Before: Mar 1 22:00:28 2026 GMT
Not After : Mar 2 22:00:28 2026 GMT
Subject: CN=d2ccec30345a5d4cf68994ecfa54be334f0c88e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:37:f3:34:77:1a:ef:ff:47:0b:cd:95:f6:
96:3d:84:84:3c:f8:f0:c4:24:3f:7c:71:1b:c5:c8:
9b:04:b0:55:2d:0c:72:6d:59:de:23:04:2d:1d:c8:
e3:1c:86:d7:ff:e6:20:91:d0:7f:6e:f0:6c:b8:14:
7c:2b:b9:84:cf:22:ca:44:4b:6b:f3:bc:c4:74:36:
e4:41:a8:10:39:7c:4e:94:78:e0:d8:5a:d0:77:e7:
4c:7e:13:a1:96:7b:8f:0b:6a:1f:3a:03:c2:f5:84:
e3:48:28:16:38:09:23:d2:8d:a9:77:4e:04:eb:7a:
9f:47:f2:78:58:2e:0c:0e:0e:bd:a2:87:dc:f2:39:
a4:9e:ea:c0:74:ed:72:8b:1b:6b:6b:d3:60:78:8f:
49:6f:83:55:6c:ca:19:92:f2:9f:34:a3:b9:68:99:
cc:ef:36:f6:8c:5a:32:e6:1e:76:40:1e:37:b6:23:
77:9b:c8:59:95:9f:34:57:0f:c2:43:3a:a8:16:ee:
97:fa:d4:df:21:35:fc:65:53:73:54:85:75:7b:c8:
c8:c7:89:f5:0e:c9:6e:d3:c4:8f:69:32:48:06:8c:
39:30:ca:2f:22:86:cd:fd:cc:9e:f8:31:0c:42:73:
73:82:cb:02:4a:87:c1:d4:c9:ed:80:8f:c3:fd:f3:
c1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CC:EC:30:34:5A:5D:4C:F6:89:94:EC:FA:54:BE:33:4F:0C:88:E0
X509v3 Authority Key Identifier:
keyid:78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:fa:7e:f4:3e:2f:36:c5:30:0b:b9:2e:b3:60:94:de:98:11:
8e:bb:74:f4:a6:54:de:a3:b6:71:2c:86:7e:57:8e:5b:0d:3e:
f2:51:01:68:00:4f:3a:3f:c9:56:6e:26:1f:44:ca:90:4f:83:
fa:ec:73:58:3d:05:5c:9f:00:ef:0c:81:30:0c:4d:b2:48:f3:
d4:be:a4:17:46:d0:45:54:81:5d:b5:6f:55:18:e0:e8:0b:20:
e1:97:35:01:42:46:95:77:6b:c0:83:b6:35:1a:9c:01:37:80:
86:f0:1a:23:7e:52:f1:5e:5c:90:0d:38:c7:eb:7c:8c:76:0b:
9c:4f:b7:bf:4a:f3:28:44:13:fb:a6:6a:88:8b:7b:e4:d2:1a:
5b:72:83:97:92:38:cb:c8:f9:8f:ed:08:b3:7f:1d:c5:01:4c:
08:6b:05:17:32:ef:e9:5d:63:d9:65:2b:d5:b8:ed:9e:f2:e4:
06:a8:d4:92:80:78:36:a7:a1:fd:8f:1e:17:8a:d0:eb:fc:ef:
dc:b5:3a:4a:11:33:e6:42:a4:78:fd:87:76:65:20:d1:4d:d6:
c7:44:7c:09:2b:77:1c:f7:5b:52:f6:70:d5:7f:43:e8:6b:cf:
93:07:2e:81:90:bb:97:b2:b4:6e:ba:65:b0:bd:18:11:93:e7:
65:bc:53:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:55 2026 by rpki-client