Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
File: eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft (raw, json)
Hash identifier: aQtmK2LoZRQ8sbEiw91+vBAAF/KBbDjXt876GKXVVnc=
Subject key identifier: 96:9B:10:A6:B2:A4:21:24:0B:DA:61:8F:93:57:F5:08:BD:B6:B5:BF
Authority key identifier: 78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2
Certificate issuer: /CN=78cb4975b93b4593576048338564ea3eb09dc8e2
Certificate serial: 019CABD9050866CF34CF71B846DA09AB77E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
Manifest number: 0CF1
Signing time: Mon 02 Mar 2026 00:00:52 +0000
Manifest this update: Mon 02 Mar 2026 00:00:52 +0000
Manifest next update: Tue 03 Mar 2026 00:00:52 +0000
Files and hashes: 1: eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl (hash: DkGMXrKzf4cENgmysdw+RXewgp09+ytUScTYqOtUxl0=)
2: qbIaJec-toVL64n7z-uuxLGTIAQ.roa (hash: T1ieQtaDmRsidOYkDXdJkWB5IsW3s99F+xa0mkqLysM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:05:08:66:cf:34:cf:71:b8:46:da:09:ab:77:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78cb4975b93b4593576048338564ea3eb09dc8e2
Validity
Not Before: Mar 2 00:00:52 2026 GMT
Not After : Mar 3 00:00:52 2026 GMT
Subject: CN=969b10a6b2a421240bda618f9357f508bdb6b5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:95:dd:bc:09:f3:15:15:a0:20:73:cb:10:76:
c0:4f:c7:c3:6d:bd:1e:a5:39:c6:45:b4:4e:5f:da:
e0:94:dc:85:7c:fb:71:3b:71:29:28:36:f9:8f:24:
87:66:59:88:27:dc:20:4a:bd:1f:60:b4:40:0c:cf:
b8:4a:5f:f3:2d:87:0f:83:a3:0f:54:bd:8e:2a:f1:
c3:cb:87:94:9a:ad:4f:aa:e1:d2:f1:80:3a:6f:ec:
6c:c1:7e:cc:e2:fe:70:bf:6f:03:ff:9c:44:f9:d8:
58:fd:9f:c4:a9:67:8b:c9:f0:89:13:8c:87:3d:64:
56:bd:35:63:3e:af:9e:38:e3:06:44:fd:e5:4c:af:
5b:12:18:42:bc:ea:44:95:b0:78:1a:26:5e:f9:42:
8f:e0:bc:4f:6a:0c:d7:0b:f3:89:d5:08:93:b0:40:
d2:ab:ac:ad:86:9a:6d:e7:03:a5:89:8f:9c:e9:06:
76:91:43:a8:e2:7d:4a:d6:9e:7d:e6:2d:6c:cb:e3:
e3:b9:fa:0c:23:f2:a0:d2:59:b0:20:f5:18:81:99:
f0:da:43:ce:70:b1:3b:a3:cf:a5:35:b1:39:7a:12:
cf:83:b4:42:e4:75:84:b7:2d:31:b1:66:ef:86:52:
70:18:ee:52:73:25:fd:70:49:69:b5:c4:f4:c2:2d:
d4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9B:10:A6:B2:A4:21:24:0B:DA:61:8F:93:57:F5:08:BD:B6:B5:BF
X509v3 Authority Key Identifier:
keyid:78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ef:61:76:18:88:49:dd:02:63:9f:5e:42:68:28:f9:c6:e8:
ec:36:90:f4:ec:41:e1:4b:d7:0c:b8:7e:9b:46:6f:a7:4f:7b:
0f:30:15:c0:be:0b:53:96:bb:a5:4b:1e:08:83:8f:90:b8:12:
ec:48:da:a2:49:0b:f2:b8:f1:1f:c1:1c:95:e0:4a:f4:90:69:
3a:0a:98:5c:6a:4f:88:fa:ed:37:f8:eb:0a:42:3a:31:76:d6:
e7:a8:fb:d8:f4:6f:c4:46:df:3b:8f:56:a6:d0:2d:9f:fc:3b:
f8:87:54:4d:08:c8:b1:bf:1a:da:a6:4c:78:ee:59:4a:7a:ef:
57:d8:a1:e5:9d:46:86:08:f7:70:99:15:38:c2:d7:25:c3:b9:
64:c8:76:da:1b:45:0f:8e:c6:a2:01:2c:06:c8:26:5a:7d:02:
9e:91:44:73:62:a4:84:97:44:57:90:45:8c:d9:12:13:e8:04:
1a:b3:78:ca:be:a7:46:7c:af:02:e6:2d:5f:2a:11:28:e8:b4:
48:e5:cf:24:fc:5e:d5:ca:8e:a2:82:4c:7b:4f:9f:b8:07:ec:
aa:25:cd:32:1e:b1:25:81:e2:d7:cd:58:49:92:96:03:28:03:
94:21:c3:15:c6:3c:53:f6:30:52:6c:c0:d9:7d:6f:8f:35:03:
27:45:ac:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2QUIZs80z3G4RtoJq3fiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4Y2I0OTc1YjkzYjQ1OTM1NzYwNDgzMzg1NjRlYTNlYjA5
ZGM4ZTIwHhcNMjYwMzAyMDAwMDUyWhcNMjYwMzAzMDAwMDUyWjAzMTEwLwYDVQQD
Eyg5NjliMTBhNmIyYTQyMTI0MGJkYTYxOGY5MzU3ZjUwOGJkYjZiNWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJXdvAnzFRWgIHPLEHbAT8fDbb0e
pTnGRbROX9rglNyFfPtxO3EpKDb5jySHZlmIJ9wgSr0fYLRADM+4Sl/zLYcPg6MP
VL2OKvHDy4eUmq1PquHS8YA6b+xswX7M4v5wv28D/5xE+dhY/Z/EqWeLyfCJE4yH
PWRWvTVjPq+eOOMGRP3lTK9bEhhCvOpElbB4GiZe+UKP4LxPagzXC/OJ1QiTsEDS
q6ythppt5wOliY+c6QZ2kUOo4n1K1p595i1sy+PjufoMI/Kg0lmwIPUYgZnw2kPO
cLE7o8+lNbE5ehLPg7RC5HWEty0xsWbvhlJwGO5ScyX9cElptcT0wi3UxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJabEKaypCEkC9phj5NX9Qi9trW/MB8GA1UdIwQY
MBaAFHjLSXW5O0WTV2BIM4Vk6j6wncjiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU10SmRiazdSWk5YWUVnemhXVHFQckNkeU9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy85ZDFiNDQtMWRlYy00NWVlLTkyZGUt
ZmE3OTg4YjcxNGJjLzEvZU10SmRiazdSWk5YWUVnemhXVHFQckNkeU9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy85ZDFiNDQtMWRlYy00NWVlLTkyZGUtZmE3OTg4YjcxNGJj
LzEvZU10SmRiazdSWk5YWUVnemhXVHFQckNkeU9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApO9hdhiI
Sd0CY59eQmgo+cbo7DaQ9OxB4UvXDLh+m0Zvp097DzAVwL4LU5a7pUseCIOPkLgS
7EjaokkL8rjxH8EcleBK9JBpOgqYXGpPiPrtN/jrCkI6MXbW56j72PRvxEbfO49W
ptAtn/w7+IdUTQjIsb8a2qZMeO5ZSnrvV9ih5Z1Ghgj3cJkVOMLXJcO5ZMh22htF
D47GogEsBsgmWn0CnpFEc2KkhJdEV5BFjNkSE+gEGrN4yr6nRnyvAuYtXyoRKOi0
SOXPJPxe1cqOooJMe0+fuAfsqiXNMh6xJYHi181YSZKWAygDlCHDFcY8U/YwUmzA
2X1vjzUDJ0WsRg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:51 2026 by rpki-client