Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft
File: _EMwm9pG6O0l7AweipMAbyJpHjw.mft (raw, json)
Hash identifier: CtWRps99mwH9MHYcSr3Froezq3JPDDY0wx30uyQtTS4=
Subject key identifier: 64:C7:DF:7B:B5:53:8B:8D:18:35:89:7B:C5:2D:43:14:6E:7A:D5:70
Authority key identifier: FC:43:30:9B:DA:46:E8:ED:25:EC:0C:1E:8A:93:00:6F:22:69:1E:3C
Certificate issuer: /CN=fc43309bda46e8ed25ec0c1e8a93006f22691e3c
Certificate serial: 019CB6CA6C4010CA5884F38D8F62311697AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft
Manifest number: 0D31
Signing time: Wed 04 Mar 2026 03:00:45 +0000
Manifest this update: Wed 04 Mar 2026 03:00:45 +0000
Manifest next update: Thu 05 Mar 2026 03:00:45 +0000
Files and hashes: 1: 29frEdqTENBRNK0Oc_1KS_9Qk1Q.roa (hash: vGa7xo3/I85by9YZTu0euMiRXGdKmp/hEEbulV65ta4=)
2: _EMwm9pG6O0l7AweipMAbyJpHjw.crl (hash: BOsdT+tJzfbgIpRSGHD+aBVwgV0vN7ynj+/4Zc45MpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b6:ca:6c:40:10:ca:58:84:f3:8d:8f:62:31:16:97:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc43309bda46e8ed25ec0c1e8a93006f22691e3c
Validity
Not Before: Mar 4 03:00:45 2026 GMT
Not After : Mar 5 03:00:45 2026 GMT
Subject: CN=64c7df7bb5538b8d1835897bc52d43146e7ad570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1e:22:dc:61:4c:f7:70:0a:56:e6:90:dd:b3:
16:2f:72:7c:9c:45:0a:ef:d7:02:a1:7f:a1:dd:22:
37:58:fa:03:e8:b4:7c:d7:f3:3f:62:c9:f8:2a:91:
09:4c:ac:cc:fe:71:09:4c:f7:5f:7e:84:61:05:23:
c6:ab:ad:4c:c2:ad:84:8c:16:0f:b2:a9:df:f6:29:
39:8a:19:cc:5b:2a:0e:e6:af:64:d9:24:b6:04:58:
63:5e:1b:ba:03:da:8e:2c:9f:a1:3f:13:b8:54:fd:
e6:bc:73:de:19:85:2e:6b:f4:fc:9a:bf:dd:82:d8:
4e:f9:2d:a0:75:71:16:9c:84:bd:fb:46:5b:28:e3:
eb:e9:d7:2f:b1:ed:a6:44:a7:d8:33:aa:54:b1:bb:
fd:7c:3e:8d:23:1e:09:47:e4:ad:8e:11:5f:be:6d:
61:7d:b3:89:68:a9:31:96:4d:6d:97:75:27:32:4e:
b4:b7:d5:8f:8f:a4:b3:2f:49:e7:b6:7e:b5:84:70:
cf:20:f0:82:b8:71:1c:4e:8e:d9:54:c3:72:3d:74:
13:06:fd:fc:bd:60:ca:2c:14:41:c2:39:be:7b:9f:
0a:8a:19:e6:68:5a:ab:41:03:50:b3:8c:3b:93:0a:
5c:29:a5:f8:62:31:2d:03:62:08:ff:04:4f:da:22:
68:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C7:DF:7B:B5:53:8B:8D:18:35:89:7B:C5:2D:43:14:6E:7A:D5:70
X509v3 Authority Key Identifier:
keyid:FC:43:30:9B:DA:46:E8:ED:25:EC:0C:1E:8A:93:00:6F:22:69:1E:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d5:5b:1b:ec:d3:f8:74:31:de:6e:0f:0c:7e:36:41:d1:cb:
40:5d:67:65:04:ed:c8:2b:7b:fc:72:2f:44:1b:b4:4f:a2:c8:
a8:ca:de:3e:49:54:d8:39:dd:be:23:47:5c:5f:36:ba:f6:d0:
a3:d7:46:76:92:3f:30:22:d4:25:a6:94:a2:57:b6:ac:5b:da:
5d:c2:21:65:bf:a4:3b:98:c3:4a:b6:e6:0a:b9:d9:b2:41:1e:
04:cc:27:96:21:fc:bc:5a:3e:00:9f:55:4e:5a:f8:01:b2:e3:
64:5a:12:22:11:29:db:fa:01:94:3b:46:d9:2c:97:d2:78:46:
82:93:6f:dc:63:37:5b:b4:79:db:17:b0:b3:b8:72:bc:e7:e9:
54:30:0d:d5:60:db:c8:34:f4:f8:34:1c:3a:14:8e:dc:15:8c:
91:67:0f:b7:d7:c7:ff:fe:b4:df:c4:56:11:9f:ca:d1:58:d0:
73:8b:fb:6a:17:af:f3:15:1b:b6:c4:f0:e7:e1:05:20:2b:3c:
93:91:07:d6:5d:0a:cd:bf:5d:bb:6b:59:fd:fb:12:70:e3:20:
4e:d5:04:15:98:1f:0c:33:d0:57:74:ec:65:6e:2d:09:f6:ee:
3e:36:97:f9:9b:f4:48:48:ad:f0:dc:f1:c5:91:ea:ee:c3:76:
5a:55:79:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:08:33 2026 by rpki-client