Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
File: _EjmUG7G1TxZFdyPKWREhd-S_Ok.mft (raw, json)
Hash identifier: z99QYYwAFfkXKvjjXsO5orbTqbNhTPF8f2xlHXhKjNI=
Subject key identifier: 00:BA:45:57:D9:70:7B:CF:84:99:62:08:43:67:9D:52:7F:1B:F9:19
Authority key identifier: FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
Certificate issuer: /CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Certificate serial: 019D9AABF848649D57C1221C647A1D205BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
Manifest number: 1572
Signing time: Fri 17 Apr 2026 09:00:54 +0000
Manifest this update: Fri 17 Apr 2026 09:00:54 +0000
Manifest next update: Sat 18 Apr 2026 09:00:54 +0000
Files and hashes: 1: _EjmUG7G1TxZFdyPKWREhd-S_Ok.crl (hash: Exwpc5SuR8SncIhhFbvN1wF/92N/5C+OLoc2D9alVXI=)
2: s10iu-qYEl97SkdPFFc91UCyTP8.roa (hash: mY1Xwqy7Z6NydVJ4ZdfvfAq3+ajlgxpmGG9kYDrwGTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:f8:48:64:9d:57:c1:22:1c:64:7a:1d:20:5b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Validity
Not Before: Apr 17 09:00:54 2026 GMT
Not After : Apr 18 09:00:54 2026 GMT
Subject: CN=00ba4557d9707bcf8499620843679d527f1bf919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4d:1d:81:24:1b:77:65:03:9c:80:22:8e:60:
e5:48:1e:1c:4e:91:45:ac:a8:8f:18:f3:21:db:1e:
92:49:de:ad:2e:3d:47:7e:6b:98:ab:71:6f:78:12:
92:ca:51:09:58:91:c3:84:58:d0:52:35:0f:ec:08:
3c:89:5e:02:4c:5e:ff:26:a2:c1:ed:60:10:4d:8e:
78:52:ab:0b:ac:fd:11:37:6b:e5:41:59:5b:31:af:
e0:aa:be:2c:0f:b5:1f:52:2f:41:73:a2:3b:f9:ea:
af:47:25:a2:08:49:1a:ce:a5:b6:5e:db:cb:4c:8b:
29:1a:4c:01:13:88:61:3c:5b:e6:08:69:bc:38:7c:
e8:5d:3a:35:01:8d:cd:65:4b:f2:ef:a1:ee:0c:f4:
23:f8:57:ae:c4:5a:6f:c3:ad:af:3d:e0:25:ec:0f:
b2:33:c3:42:9d:51:71:e1:40:ea:ac:f8:92:cd:be:
73:e9:3a:1d:98:3e:4b:72:17:12:15:9d:87:b0:2f:
d3:ea:0a:2e:cf:79:d7:6e:24:21:d3:2a:a6:e2:6a:
09:86:44:61:28:02:f9:66:a2:96:3d:86:2e:85:36:
91:2e:6f:b1:24:7e:74:b7:fc:80:f6:10:a4:c4:bd:
42:99:15:55:dc:94:ec:1b:45:8a:dc:24:0f:98:a0:
67:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BA:45:57:D9:70:7B:CF:84:99:62:08:43:67:9D:52:7F:1B:F9:19
X509v3 Authority Key Identifier:
keyid:FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:47:32:8e:d3:d4:15:5d:d8:bb:84:c7:7a:e4:3d:c6:59:cd:
8f:fb:0e:3d:30:5d:e0:d0:f4:16:14:13:00:72:54:01:8c:36:
d2:4f:55:db:92:ee:a9:53:82:ca:d1:ac:a1:b8:9c:66:69:2c:
28:31:6a:e0:bc:e1:52:b7:a2:8e:1f:31:34:c9:61:fb:72:79:
23:69:5a:5d:31:37:df:d5:f5:58:fe:e4:c7:93:3d:27:4d:16:
89:e4:52:e4:f3:97:4e:3b:81:db:b2:75:3f:46:60:ed:2f:17:
89:aa:c2:b5:34:1a:06:fe:73:f0:8a:92:ed:c2:ce:76:48:5c:
ad:65:ef:d5:a0:a3:6d:ab:11:53:c2:61:48:77:13:26:88:00:
76:b1:01:4e:2a:60:38:8c:9a:d2:8e:0c:2b:ad:5c:2a:3a:53:
ca:42:e4:18:c0:43:70:4d:59:b6:4f:06:8b:85:21:30:92:67:
71:3f:47:03:45:cd:91:77:87:a6:e8:46:ec:58:b5:51:14:5d:
53:9e:21:18:0f:17:12:46:53:71:e5:c4:9c:aa:90:ea:d1:29:
be:57:56:48:43:45:61:28:74:e7:61:d1:de:4c:c8:b0:28:a9:
30:59:a7:68:3f:4f:09:60:2d:30:a5:88:2c:87:eb:05:11:14:
15:b3:dc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:57:12 2026 by rpki-client