Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
File: Em_8AJbGk7vEIO64zO80vHtTh0M.mft (raw, json)
Hash identifier: +VXPa8P04E22A5J7xhzAm8yeuHNuopJ2KbKlyDz1PRA=
Subject key identifier: 58:FE:4A:B4:AB:F4:D0:FF:52:1F:D1:F8:0C:E3:55:61:D8:4B:EB:69
Authority key identifier: 12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43
Certificate issuer: /CN=126ffc0096c693bbc420eeb8ccef34bc7b538743
Certificate serial: 019D265F9CC6B010B4937388110FE7CA3EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
Manifest number: 121C
Signing time: Wed 25 Mar 2026 19:01:33 +0000
Manifest this update: Wed 25 Mar 2026 19:01:33 +0000
Manifest next update: Thu 26 Mar 2026 19:01:33 +0000
Files and hashes: 1: Em_8AJbGk7vEIO64zO80vHtTh0M.crl (hash: Vqz1nbMGR6LXvHhvIVvyiFXY39rehpl/xcpZcixt9+w=)
2: oPW1SGwP91H4COCpUVzVXa2p0W0.roa (hash: sJ80Hmwvt2BZ4Ckn8z2EQlXDh6xgPaM8/fsDXZd71pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:9c:c6:b0:10:b4:93:73:88:11:0f:e7:ca:3e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126ffc0096c693bbc420eeb8ccef34bc7b538743
Validity
Not Before: Mar 25 19:01:33 2026 GMT
Not After : Mar 26 19:01:33 2026 GMT
Subject: CN=58fe4ab4abf4d0ff521fd1f80ce35561d84beb69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d3:82:7b:13:bd:1e:5a:c2:43:b1:a6:1a:9f:
3e:8b:e0:9a:5f:94:83:d2:57:6f:67:34:5d:32:29:
79:d5:36:ce:4e:ac:a3:b9:6d:8a:75:5a:c0:bf:af:
17:80:fa:0e:4b:fb:71:9b:80:47:f0:e6:10:46:43:
2a:aa:bc:93:af:2f:09:b5:31:97:c4:a0:39:d6:64:
8d:16:d8:00:e0:13:64:b3:bf:5c:51:1c:e7:a8:4f:
c8:71:d0:0c:51:b1:ff:f2:a7:69:93:47:ed:0a:c2:
c8:01:6a:97:ca:c1:fb:23:e2:d6:88:84:e8:6d:d3:
58:e5:27:2f:1f:94:97:60:aa:16:f9:9e:83:ba:c2:
e6:00:a6:37:ca:9c:be:e7:35:fe:42:60:c4:51:4b:
af:73:1c:7f:07:8d:48:4a:17:d9:ac:0e:5c:f0:44:
d8:61:8a:f8:4b:fb:1c:24:d8:9b:23:95:d0:6f:c1:
c0:a7:ca:83:88:10:3f:40:29:78:59:e6:07:5b:1d:
e4:63:9c:d2:ae:82:01:f7:b9:f3:d4:b2:47:9c:bf:
aa:d2:9a:f0:5a:7c:7b:07:87:db:42:cd:ec:51:d9:
07:50:e3:e7:ef:c2:17:22:7c:d5:ac:d7:13:c7:29:
99:46:46:c0:16:c9:22:2c:72:e5:fc:c8:43:5f:fe:
eb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FE:4A:B4:AB:F4:D0:FF:52:1F:D1:F8:0C:E3:55:61:D8:4B:EB:69
X509v3 Authority Key Identifier:
keyid:12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:27:45:ff:7e:20:48:27:a8:f0:5a:ef:db:e3:3a:45:e1:89:
7c:34:1e:94:02:d0:9b:86:b4:ff:22:5a:74:39:4e:8c:2f:57:
7b:b4:15:21:fb:e9:55:73:68:27:47:db:c8:1d:29:78:fc:1c:
51:8d:9e:ae:80:2d:7c:48:9f:98:e8:54:c6:67:8e:5f:22:b8:
7e:6f:58:ea:47:37:3d:6f:34:6e:87:1d:ae:5c:fd:f8:ff:71:
55:62:e3:20:13:95:4b:e7:9a:b6:e7:8c:31:72:02:44:2b:30:
6f:3a:e4:c5:7a:eb:02:0a:2b:36:13:23:ad:e6:50:80:fe:e3:
7f:02:46:c0:09:d9:2a:06:51:0a:95:4c:98:3b:e0:47:d6:53:
6e:05:3d:dc:4a:9a:3b:4a:c0:2a:59:8f:ce:4b:30:dc:df:a8:
3f:3a:6d:f8:c7:3d:3f:45:14:68:f2:c4:56:13:bd:76:64:89:
f4:8b:74:aa:3b:89:15:fc:a0:15:70:1c:f2:6e:ac:22:61:86:
e0:df:58:ba:ad:c8:70:da:63:d4:3d:ea:19:1c:0a:23:72:59:
c6:08:63:68:68:6f:cf:dd:7c:b7:80:54:26:0e:2b:73:14:6f:
9b:18:33:89:90:05:2d:a8:7a:dd:fd:41:1b:b1:88:68:fd:13:
7d:18:ff:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:34:11 2026 by rpki-client