Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
File: eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft (raw, json)
Hash identifier: K9SVlBDyeY7rToXLya4iR7mtfNgmQiuZVmnGE80rqJI=
Subject key identifier: 38:F2:A9:E8:DB:39:8B:C0:61:1E:5C:D7:16:BB:19:55:B1:3C:A8:16
Authority key identifier: 78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2
Certificate issuer: /CN=78cb4975b93b4593576048338564ea3eb09dc8e2
Certificate serial: 019D9962504AA9DFED182DDB3BE46931B7F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
Manifest number: 0D6C
Signing time: Fri 17 Apr 2026 03:00:50 +0000
Manifest this update: Fri 17 Apr 2026 03:00:50 +0000
Manifest next update: Sat 18 Apr 2026 03:00:50 +0000
Files and hashes: 1: eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl (hash: +grOXIBeieU19ziQW+MTK5+iPdkomY7LPEB78DHBRWI=)
2: qbIaJec-toVL64n7z-uuxLGTIAQ.roa (hash: T1ieQtaDmRsidOYkDXdJkWB5IsW3s99F+xa0mkqLysM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:50:4a:a9:df:ed:18:2d:db:3b:e4:69:31:b7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78cb4975b93b4593576048338564ea3eb09dc8e2
Validity
Not Before: Apr 17 03:00:50 2026 GMT
Not After : Apr 18 03:00:50 2026 GMT
Subject: CN=38f2a9e8db398bc0611e5cd716bb1955b13ca816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6b:71:9b:88:b0:24:9a:5b:f2:a4:51:01:ac:
1f:28:fe:80:dc:49:34:31:a4:d6:86:a4:0a:c9:ad:
99:b7:dd:b6:e7:b8:4d:e1:6c:18:85:b1:0d:62:77:
91:c5:09:26:b4:b0:91:63:48:95:d1:2c:90:de:b1:
a5:ea:e7:c0:55:43:77:9d:04:3a:df:e5:c0:bf:77:
89:c2:5c:9b:a2:6d:22:ff:b7:58:96:db:2e:0e:ab:
6a:3e:b9:c3:ed:90:68:18:c7:2c:96:7c:b8:de:e2:
22:33:59:1a:0e:1e:88:9e:e2:65:6f:74:00:32:dd:
8f:72:a0:9d:a8:4e:15:d9:aa:3d:9b:bf:a5:80:db:
bf:ff:87:7a:0c:0f:2d:78:05:cd:5e:06:f0:4c:5b:
8a:1f:83:79:ac:10:8d:29:43:03:be:32:68:a8:f0:
33:6a:4c:57:54:15:b5:42:49:2a:b6:3f:2d:0f:88:
a7:1f:bf:57:e1:e5:c6:37:15:c4:5f:ae:c6:17:f1:
5f:88:8a:63:b4:4c:ca:16:4c:1a:1c:5c:5d:e4:ce:
83:a1:52:58:d1:ba:29:43:f1:42:c3:84:bd:85:ec:
df:bc:fe:8a:69:e7:b9:6e:c7:c4:09:a0:3d:ad:29:
fd:2c:7a:42:dd:65:9d:9f:a2:76:5c:be:b4:52:ec:
fc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F2:A9:E8:DB:39:8B:C0:61:1E:5C:D7:16:BB:19:55:B1:3C:A8:16
X509v3 Authority Key Identifier:
keyid:78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:aa:dc:4a:d8:77:3e:8f:d5:52:f8:99:db:fb:67:09:de:2a:
c9:12:d2:03:34:51:a0:56:d9:be:19:d7:fc:ba:a8:c8:b7:68:
23:28:55:64:e3:e7:63:2f:c2:33:45:e2:7e:82:24:83:8b:1f:
ca:0d:50:6b:5c:c7:1e:58:09:62:4f:67:61:b3:99:ba:65:a3:
c4:9c:b2:6c:fc:77:18:60:af:3a:72:e9:69:77:ad:18:25:1d:
c7:2b:71:df:e1:10:97:27:67:62:a4:8f:cb:08:3f:82:9d:9b:
0b:bd:bc:93:19:18:7c:1f:26:34:8b:5a:4d:2a:15:0e:ae:5b:
14:8c:9c:9e:f0:f6:7c:25:e8:ac:b0:ba:ae:47:22:68:ca:dd:
f7:15:34:54:a7:b5:df:98:97:86:90:7e:d5:21:eb:9e:ed:e5:
27:25:76:55:c8:3a:56:08:e2:a0:81:12:b8:3d:21:17:f7:6d:
55:6e:65:37:6d:89:dc:62:5e:e5:13:42:54:70:b7:36:f2:64:
8f:1f:a4:45:7d:fb:c3:59:04:dc:60:76:d9:18:5b:c6:20:d1:
c2:b9:79:46:f3:fa:ef:52:40:d4:8e:f3:6e:6b:92:40:96:b5:
c5:8f:39:71:9b:be:24:5c:04:82:16:79:dd:2f:49:13:f9:eb:
11:44:87:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYlBKqd/tGC3bO+RpMbfzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4Y2I0OTc1YjkzYjQ1OTM1NzYwNDgzMzg1NjRlYTNlYjA5
ZGM4ZTIwHhcNMjYwNDE3MDMwMDUwWhcNMjYwNDE4MDMwMDUwWjAzMTEwLwYDVQQD
EygzOGYyYTllOGRiMzk4YmMwNjExZTVjZDcxNmJiMTk1NWIxM2NhODE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGtxm4iwJJpb8qRRAawfKP6A3Ek0
MaTWhqQKya2Zt92257hN4WwYhbENYneRxQkmtLCRY0iV0SyQ3rGl6ufAVUN3nQQ6
3+XAv3eJwlybom0i/7dYltsuDqtqPrnD7ZBoGMcslny43uIiM1kaDh6InuJlb3QA
Mt2PcqCdqE4V2ao9m7+lgNu//4d6DA8teAXNXgbwTFuKH4N5rBCNKUMDvjJoqPAz
akxXVBW1Qkkqtj8tD4inH79X4eXGNxXEX67GF/FfiIpjtEzKFkwaHFxd5M6DoVJY
0bopQ/FCw4S9hezfvP6Kaee5bsfECaA9rSn9LHpC3WWdn6J2XL60Uuz8vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjyqejbOYvAYR5c1xa7GVWxPKgWMB8GA1UdIwQY
MBaAFHjLSXW5O0WTV2BIM4Vk6j6wncjiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU10SmRiazdSWk5YWUVnemhXVHFQckNkeU9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy85ZDFiNDQtMWRlYy00NWVlLTkyZGUt
ZmE3OTg4YjcxNGJjLzEvZU10SmRiazdSWk5YWUVnemhXVHFQckNkeU9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy85ZDFiNDQtMWRlYy00NWVlLTkyZGUtZmE3OTg4YjcxNGJj
LzEvZU10SmRiazdSWk5YWUVnemhXVHFQckNkeU9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6rcSth3
Po/VUviZ2/tnCd4qyRLSAzRRoFbZvhnX/LqoyLdoIyhVZOPnYy/CM0XifoIkg4sf
yg1Qa1zHHlgJYk9nYbOZumWjxJyybPx3GGCvOnLpaXetGCUdxytx3+EQlydnYqSP
ywg/gp2bC728kxkYfB8mNItaTSoVDq5bFIycnvD2fCXorLC6rkciaMrd9xU0VKe1
35iXhpB+1SHrnu3lJyV2Vcg6VgjioIESuD0hF/dtVW5lN22J3GJe5RNCVHC3NvJk
jx+kRX37w1kE3GB22RhbxiDRwrl5RvP671JA1I7zbmuSQJa1xY85cZu+JFwEghZ5
3S9JE/nrEUSHYA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:44:55 2026 by rpki-client