Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.mft
File: egm3YjoIVFfYx2tJTs2ITY_vpNE.mft (raw, json)
Hash identifier: Z6uxiDCjGhZ5BGEiSeF7HMommpsZb221AYlpNdXPIY0=
Subject key identifier: 2D:63:6A:F9:1B:B3:38:37:70:A2:DE:81:37:C8:C4:45:BB:5D:8E:D1
Authority key identifier: 7A:09:B7:62:3A:08:54:57:D8:C7:6B:49:4E:CD:88:4D:8F:EF:A4:D1
Certificate issuer: /CN=7a09b7623a085457d8c76b494ecd884d8fefa4d1
Certificate serial: 019D9B87C58AE00ACA1B1A27946E59801614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egm3YjoIVFfYx2tJTs2ITY_vpNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.mft
Manifest number: 0217
Signing time: Fri 17 Apr 2026 13:00:59 +0000
Manifest this update: Fri 17 Apr 2026 13:00:59 +0000
Manifest next update: Sat 18 Apr 2026 13:00:59 +0000
Files and hashes: 1: 3v1fDqNftzfSsbjae5v8U-0Yix0.roa (hash: nSifXf8r+ikjFXrJx3sG9Ogaxxz2ug4esGN19vdxBUs=)
2: 7WKrJrhvhGi9RYRIgcoWd2xmbkc.roa (hash: GeJ8x38uiqGaYg3LXRMD8PkKkjHNwyyZii4Sa8DdSEs=)
3: A2iR7wBI4WsWOWxk0yIEXCMnkKY.roa (hash: pmcJfdZ5WR1prZx2M0Vbhr4nYAqdO1+A5gfYqn4i1XE=)
4: egm3YjoIVFfYx2tJTs2ITY_vpNE.crl (hash: ITRa92PNIGdp/NhAIN5En0I+0kLQQvrwAr7SNcKOgqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/egm3YjoIVFfYx2tJTs2ITY_vpNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:c5:8a:e0:0a:ca:1b:1a:27:94:6e:59:80:16:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a09b7623a085457d8c76b494ecd884d8fefa4d1
Validity
Not Before: Apr 17 13:00:59 2026 GMT
Not After : Apr 18 13:00:59 2026 GMT
Subject: CN=2d636af91bb3383770a2de8137c8c445bb5d8ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:85:49:e8:ce:42:02:bb:d1:7b:f5:8b:a3:78:
f1:4f:6a:6b:14:7a:e8:26:74:b6:6f:71:ab:4b:00:
f8:d9:b7:2c:09:ea:46:79:8b:bc:54:4b:58:5e:b6:
3c:b7:a8:7f:10:e8:fe:88:26:2b:3b:03:34:a1:45:
00:50:ef:94:75:41:d1:51:bf:08:35:38:c4:30:53:
9e:8d:82:a6:f5:51:d4:ed:eb:c1:2c:34:f0:ba:9b:
9d:76:1e:8d:14:0d:fd:54:dd:48:52:e1:38:b3:0f:
95:3b:c3:4c:53:01:b3:fc:d2:f8:2d:52:e4:71:b2:
c9:9c:ad:08:72:93:33:59:ab:e1:39:3e:d6:ff:8e:
15:c9:7d:16:61:c6:a9:85:21:84:6b:76:5f:6e:f5:
4d:18:1f:7c:b9:7d:eb:ba:6a:76:2b:35:60:d9:94:
c9:1a:2e:48:da:52:45:36:11:47:25:c5:5a:48:69:
dd:28:d8:da:b4:6f:0f:6a:06:a1:fb:ff:0e:43:46:
35:85:b0:8f:b7:52:e1:e5:d8:ed:00:ca:e7:a7:29:
d3:1f:47:fe:70:47:1e:94:ea:e7:fb:a4:74:b2:c8:
6b:b6:c2:ef:35:09:74:d9:f9:95:29:0b:c2:96:b9:
07:aa:ee:c8:c9:a0:bc:82:fa:08:0c:fc:1d:d9:5a:
db:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:63:6A:F9:1B:B3:38:37:70:A2:DE:81:37:C8:C4:45:BB:5D:8E:D1
X509v3 Authority Key Identifier:
keyid:7A:09:B7:62:3A:08:54:57:D8:C7:6B:49:4E:CD:88:4D:8F:EF:A4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egm3YjoIVFfYx2tJTs2ITY_vpNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:30:5c:0e:c4:2b:9f:fd:04:29:ca:0a:04:ed:02:36:f3:9e:
1a:9e:a1:21:a0:62:e0:17:78:c4:45:ab:25:79:42:8a:20:83:
32:b8:68:d8:81:1d:51:97:88:b2:39:ff:ff:20:c9:27:b6:30:
82:0f:b8:b6:0f:4d:11:18:91:7a:db:aa:7d:79:e8:77:68:15:
c6:f8:29:23:0d:d9:77:2c:4a:36:ae:f4:17:db:21:b3:e3:75:
d3:3a:a3:a3:d7:43:92:7d:0e:29:26:91:5b:cb:3b:d8:d8:d0:
14:37:41:01:30:6c:26:40:2b:0d:a4:8b:35:17:0e:ab:db:ee:
6a:a8:61:d0:81:b2:bf:d0:ea:1c:b2:d8:34:d3:4f:d6:29:e9:
22:52:1b:d1:0d:d4:7e:4f:75:60:f9:b0:eb:8f:92:64:90:64:
d8:99:4a:5f:f0:9d:2e:56:75:ee:22:a2:ee:50:0a:c0:2f:7b:
c8:de:bd:2d:f0:3d:2b:fa:43:c7:e7:12:f1:ba:d4:c5:35:13:
a3:a2:08:2c:3f:94:23:ca:e6:d4:17:c0:06:f4:97:2f:8c:8d:
25:a1:dd:26:63:11:47:09:ff:5e:92:0d:0b:f4:a6:2e:62:c1:
53:d6:0a:16:30:06:e1:0d:e3:eb:25:f5:29:ec:ff:98:70:ab:
d4:78:ce:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:32:59 2026 by rpki-client