Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.mft
File: elmlzGH-vbkW1GJLvowQiXNTsME.mft (raw, json)
Hash identifier: NxEjCPZqliRD5bkb20pMjXu48AZos1s0xQcdmpyKmFs=
Subject key identifier: 96:8C:98:2F:B4:8E:38:C9:BD:8F:1C:7C:4F:D1:DC:F3:4C:C1:E7:25
Authority key identifier: 7A:59:A5:CC:61:FE:BD:B9:16:D4:62:4B:BE:8C:10:89:73:53:B0:C1
Certificate issuer: /CN=7a59a5cc61febdb916d4624bbe8c10897353b0c1
Certificate serial: 019CAC469A902EF2AE09F47A88C8D466465B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elmlzGH-vbkW1GJLvowQiXNTsME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 02:00:34 +0000
Manifest this update: Mon 02 Mar 2026 02:00:34 +0000
Manifest next update: Tue 03 Mar 2026 02:00:34 +0000
Files and hashes: 1: Uc8J9mXAeOJT6T8Cc2pg7ur7EVE.roa (hash: GBBdZarUNSiLkjjpGT6+8iJpn2p2RM8BoqoVzDBwtCw=)
2: elmlzGH-vbkW1GJLvowQiXNTsME.crl (hash: Q722ndmNYwPS30btOg7cQ7sHYFM1ZyZM7D1z3L74x0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.mft
rsync://rpki.ripe.net/repository/DEFAULT/elmlzGH-vbkW1GJLvowQiXNTsME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:9a:90:2e:f2:ae:09:f4:7a:88:c8:d4:66:46:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a59a5cc61febdb916d4624bbe8c10897353b0c1
Validity
Not Before: Mar 2 02:00:34 2026 GMT
Not After : Mar 3 02:00:34 2026 GMT
Subject: CN=968c982fb48e38c9bd8f1c7c4fd1dcf34cc1e725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5f:f9:06:d6:0f:f9:54:8a:ea:5a:e7:79:76:
80:dc:8e:66:17:2a:95:67:2e:ad:6b:fc:eb:b4:8d:
7e:fb:38:2a:db:7c:df:d4:4a:6d:6e:93:02:aa:ad:
b8:42:0a:68:52:69:59:2c:d4:60:34:3d:d8:3f:09:
00:aa:ec:72:7f:51:26:ee:ae:f9:ee:da:f1:75:e0:
d6:78:ca:03:eb:2e:4c:1a:85:25:1d:fc:b8:3b:c4:
f5:9e:de:5a:3a:e3:5c:9b:c8:d9:af:af:65:f5:71:
ee:6c:a1:13:9d:d1:26:fd:f0:36:ee:8b:ed:7e:10:
2f:39:79:f6:65:6e:7a:71:80:2a:14:00:0b:6d:c4:
18:f1:85:b9:c6:85:6c:ab:98:ad:39:e9:26:ce:60:
64:0e:3f:99:69:b4:5f:9e:b2:a6:a4:8f:0a:8c:47:
58:21:0b:bd:1b:99:2e:e3:dc:59:71:d0:f7:2c:93:
da:ea:58:f0:2d:7f:ce:99:54:7e:a6:ba:28:cc:9c:
2d:df:c7:60:0c:74:d1:78:03:43:a8:18:cf:df:95:
b8:f0:64:86:e5:8f:00:3f:b7:f9:88:27:71:0e:77:
8e:9b:9d:87:3d:7a:3a:0e:50:03:e4:ff:20:c0:a9:
fc:75:a5:cf:0a:8f:ed:8f:36:a6:12:06:26:7f:8f:
ea:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8C:98:2F:B4:8E:38:C9:BD:8F:1C:7C:4F:D1:DC:F3:4C:C1:E7:25
X509v3 Authority Key Identifier:
keyid:7A:59:A5:CC:61:FE:BD:B9:16:D4:62:4B:BE:8C:10:89:73:53:B0:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elmlzGH-vbkW1GJLvowQiXNTsME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f0:6b:36:ab:c1:81:80:b6:cc:4d:47:bb:ad:fd:a1:05:24:
5c:c9:96:a3:f0:76:fa:79:96:a7:ca:37:72:d5:57:de:95:11:
5d:da:40:01:8f:96:02:c8:32:4b:d8:ff:f2:a6:3d:c9:4d:a4:
5f:00:b5:d8:31:bc:ed:77:64:2a:eb:37:ab:22:c4:57:96:82:
bd:a3:12:17:03:4a:e0:c9:5c:17:fc:bb:6f:a5:54:c1:c8:5e:
2d:ff:50:fe:8e:b5:c7:c0:44:e4:10:8c:e2:98:19:a0:1f:7f:
87:ce:96:09:7c:8d:67:9c:30:15:a7:00:ea:ca:4b:2b:d0:f2:
d9:89:ed:af:2a:da:d6:88:9b:c8:ea:7a:29:02:d4:62:fc:9b:
5a:04:e1:fd:66:25:a3:63:2b:b0:49:23:a0:f5:d8:4d:8a:d2:
5e:41:7e:94:e3:4c:d8:a8:5f:6c:dd:66:88:d8:6d:ea:e5:c7:
0c:40:b1:e7:55:f8:ee:9e:7f:6b:bf:1d:11:b0:85:a6:56:84:
b3:8a:f2:d4:ac:8a:da:0d:84:b5:2a:90:c0:01:27:88:84:c7:
70:f8:e5:42:cb:fa:8e:f2:dc:f4:a9:67:31:98:40:13:9f:3b:
f7:3d:b6:7a:1e:6a:ed:e5:6c:85:43:dc:16:92:b3:bc:c6:7d:
f3:f6:08:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRpqQLvKuCfR6iMjUZkZbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNTlhNWNjNjFmZWJkYjkxNmQ0NjI0YmJlOGMxMDg5NzM1
M2IwYzEwHhcNMjYwMzAyMDIwMDM0WhcNMjYwMzAzMDIwMDM0WjAzMTEwLwYDVQQD
Eyg5NjhjOTgyZmI0OGUzOGM5YmQ4ZjFjN2M0ZmQxZGNmMzRjYzFlNzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1/5BtYP+VSK6lrneXaA3I5mFyqV
Zy6ta/zrtI1++zgq23zf1EptbpMCqq24QgpoUmlZLNRgND3YPwkAquxyf1Em7q75
7trxdeDWeMoD6y5MGoUlHfy4O8T1nt5aOuNcm8jZr69l9XHubKETndEm/fA27ovt
fhAvOXn2ZW56cYAqFAALbcQY8YW5xoVsq5itOekmzmBkDj+ZabRfnrKmpI8KjEdY
IQu9G5ku49xZcdD3LJPa6ljwLX/OmVR+proozJwt38dgDHTReANDqBjP35W48GSG
5Y8AP7f5iCdxDneOm52HPXo6DlAD5P8gwKn8daXPCo/tjzamEgYmf4/q5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJaMmC+0jjjJvY8cfE/R3PNMweclMB8GA1UdIwQY
MBaAFHpZpcxh/r25FtRiS76MEIlzU7DBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWxtbHpHSC12YmtXMUdKTHZvd1FpWE5Uc01FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9iMWFiMWItMGU5NS00YzNjLTg3Njgt
OTAzZDA4MzQ5NmU1LzEvZWxtbHpHSC12YmtXMUdKTHZvd1FpWE5Uc01FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9iMWFiMWItMGU5NS00YzNjLTg3NjgtOTAzZDA4MzQ5NmU1
LzEvZWxtbHpHSC12YmtXMUdKTHZvd1FpWE5Uc01FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/BrNqvB
gYC2zE1Hu639oQUkXMmWo/B2+nmWp8o3ctVX3pURXdpAAY+WAsgyS9j/8qY9yU2k
XwC12DG87XdkKus3qyLEV5aCvaMSFwNK4MlcF/y7b6VUwcheLf9Q/o61x8BE5BCM
4pgZoB9/h86WCXyNZ5wwFacA6spLK9Dy2Yntryra1oibyOp6KQLUYvybWgTh/WYl
o2MrsEkjoPXYTYrSXkF+lONM2KhfbN1miNht6uXHDECx51X47p5/a78dEbCFplaE
s4ry1KyK2g2EtSqQwAEniITHcPjlQsv6jvLc9KlnMZhAE5879z22eh5q7eVshUPc
FpKzvMZ98/YICA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:37 2026 by rpki-client