Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
File: _EjmUG7G1TxZFdyPKWREhd-S_Ok.mft (raw, json)
Hash identifier: ORwUoa7iUlDmXENgZ3uYELbsMnyyoD1sm8IJT0Ed55M=
Subject key identifier: CD:28:B7:A0:23:47:B8:23:4F:6C:B6:D5:4E:D3:85:CA:AD:CF:8C:CD
Authority key identifier: FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
Certificate issuer: /CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Certificate serial: 019CA945B2F8B29C1D222E27A82FDE6E0018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
Manifest number: 14F5
Signing time: Sun 01 Mar 2026 12:00:43 +0000
Manifest this update: Sun 01 Mar 2026 12:00:43 +0000
Manifest next update: Mon 02 Mar 2026 12:00:43 +0000
Files and hashes: 1: _EjmUG7G1TxZFdyPKWREhd-S_Ok.crl (hash: VM3DarKXR0RMQo5WuU9X6jmXYPWdCd56m+xY8AFefak=)
2: s10iu-qYEl97SkdPFFc91UCyTP8.roa (hash: mY1Xwqy7Z6NydVJ4ZdfvfAq3+ajlgxpmGG9kYDrwGTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:b2:f8:b2:9c:1d:22:2e:27:a8:2f:de:6e:00:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Validity
Not Before: Mar 1 12:00:43 2026 GMT
Not After : Mar 2 12:00:43 2026 GMT
Subject: CN=cd28b7a02347b8234f6cb6d54ed385caadcf8ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5b:cc:2e:23:3f:bd:28:df:75:fd:a0:78:a6:
1a:e3:9f:23:d6:b9:1e:94:04:53:60:81:b9:1b:c2:
63:c8:6c:7f:13:96:fc:01:f2:0c:98:34:6f:03:04:
f3:1e:18:98:3a:c0:e6:e3:01:6b:16:d9:86:04:c1:
ec:07:c4:d0:59:4e:6a:3f:77:e0:78:bf:30:43:ae:
c4:07:03:20:15:b6:67:84:a8:45:97:28:66:af:9a:
a0:21:c3:ec:2e:af:14:52:93:13:6b:16:3f:33:31:
75:69:13:28:19:c4:af:cb:f5:d4:d1:13:79:05:b7:
7f:a6:6e:e0:1a:82:49:5e:27:d1:dc:57:77:a3:01:
21:2f:03:0e:08:45:eb:6a:8b:47:15:4d:2d:c0:94:
a2:be:21:00:ff:e8:c9:99:4f:f1:a2:74:a6:17:04:
bb:6c:3d:8b:9b:cb:cc:eb:ae:29:91:a7:e4:ac:08:
c4:ea:15:57:a8:2b:6e:96:34:33:56:81:5b:db:bd:
85:99:39:28:08:96:43:35:1a:40:58:92:a1:04:51:
d2:b4:44:ff:62:a2:73:63:95:cd:1a:24:e2:dc:a5:
cd:ce:14:71:44:50:30:11:b8:92:8e:41:1a:b9:8b:
b8:94:c5:7f:eb:09:b4:8f:32:c4:2d:e2:9f:00:35:
67:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:28:B7:A0:23:47:B8:23:4F:6C:B6:D5:4E:D3:85:CA:AD:CF:8C:CD
X509v3 Authority Key Identifier:
keyid:FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:86:7f:5e:51:34:75:2b:9d:65:df:55:af:62:a4:f0:0d:c1:
2a:6f:ef:fc:61:0e:8a:50:ca:93:6b:25:29:7d:41:95:1b:04:
f3:65:0c:06:16:cb:8c:1e:85:bf:b5:83:ac:bf:5c:e4:8b:c7:
9b:74:42:78:80:d0:08:60:a6:33:72:d6:76:34:2b:50:a6:9d:
f8:ac:0e:15:c7:55:dc:b6:9a:37:56:d7:d4:c4:5a:66:5f:bf:
59:b6:dc:06:2c:f9:6e:f6:fd:2f:d2:5e:46:b6:0a:d7:bf:e9:
10:d6:37:62:f1:72:c5:ac:c7:9c:6d:a2:91:d6:40:61:3d:18:
7d:e7:b4:db:e5:37:a3:17:19:46:a4:f3:ec:15:60:c7:76:aa:
f7:fe:29:10:b6:c1:0c:20:91:2c:ad:a7:1d:2d:3f:41:9e:67:
eb:3a:c5:14:74:83:55:c3:da:e1:fd:12:8d:59:d7:6d:05:72:
de:36:53:54:8e:af:64:aa:4d:4c:4f:0b:4f:9f:3f:f4:1c:da:
aa:0d:2e:6d:18:ec:c8:05:3b:92:38:9e:90:dd:1e:c3:8d:5c:
23:a5:8d:d6:67:6e:2f:84:06:92:8c:45:29:2e:e0:6b:59:f7:
d3:be:8b:c1:76:e8:a6:e8:4e:13:67:38:33:e6:ba:94:2d:7d:
f7:87:96:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:37 2026 by rpki-client