Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
File: Emcb67isPjC118PSU3NXo7JUbVs.mft (raw, json)
Hash identifier: sBK7YXzqPMtDDHVt6/YZBLQTi6gLtj04M6tzfJ3geRg=
Subject key identifier: D3:73:15:B2:AB:DB:BC:69:33:1C:7D:E8:D7:8E:B0:0E:16:38:43:DE
Authority key identifier: 12:67:1B:EB:B8:AC:3E:30:B5:D7:C3:D2:53:73:57:A3:B2:54:6D:5B
Certificate issuer: /CN=12671bebb8ac3e30b5d7c3d2537357a3b2546d5b
Certificate serial: 01A0E1AB7CBB38DCE1A0DDBC84C77B641504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
Manifest number: 09B0
Signing time: Sun 27 Sep 2026 07:01:47 +0000
Manifest this update: Sun 27 Sep 2026 07:01:47 +0000
Manifest next update: Mon 28 Sep 2026 07:01:47 +0000
Files and hashes: 1: Emcb67isPjC118PSU3NXo7JUbVs.crl (hash: FaLNVw/WfGyWHYDniLMveUcvhRMP63l2YmaRpQ1gx+g=)
2: IbMGTXyTOTdiq2NpG4tVLW4bQtQ.roa (hash: j1uMtZdT3V+8GANHlpcXgXLtn7udaUVnpZ9J8VG0PMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:ab:7c:bb:38:dc:e1:a0:dd:bc:84:c7:7b:64:15:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12671bebb8ac3e30b5d7c3d2537357a3b2546d5b
Validity
Not Before: Sep 27 07:01:47 2026 GMT
Not After : Sep 28 07:01:47 2026 GMT
Subject: CN=d37315b2abdbbc69331c7de8d78eb00e163843de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c1:2e:88:7e:9f:78:cf:2a:04:f0:65:90:a9:
68:78:ba:f3:3f:96:04:8e:b2:3e:e1:04:0d:9a:b4:
b2:2c:36:9d:ef:0f:a2:6b:47:f5:62:b2:6e:94:72:
7e:79:8b:a5:90:96:58:86:c2:07:77:9a:f9:f7:2a:
4e:23:6c:04:62:c7:9e:a1:4e:1f:cc:57:78:1c:5f:
94:db:52:ae:8f:9d:e5:e0:0d:db:93:a0:61:31:15:
f2:73:91:d0:9f:ea:79:84:f1:e3:b2:72:a3:a3:21:
41:69:d1:f9:9f:a6:2f:7e:e0:5b:df:e4:13:fa:66:
84:6f:a8:de:a6:cf:db:8e:da:2f:24:45:84:99:72:
0a:6f:c3:e8:ae:b2:59:6d:e0:9c:10:fb:ce:0c:19:
93:5c:9f:6d:09:a5:07:97:15:5b:29:38:4e:0d:55:
13:8d:c9:be:b7:6c:36:fc:c5:87:c6:4d:03:e9:56:
96:37:01:44:52:94:e5:00:74:e3:be:4a:d9:eb:d7:
d9:83:3c:67:63:42:92:82:07:ff:32:8d:81:a5:b1:
ed:98:f7:5b:4c:af:45:3a:b8:d8:fb:c6:9c:f7:4c:
76:c6:7a:87:a6:1e:43:d6:ad:d0:66:c8:12:c1:7e:
2b:68:d3:14:f9:c1:7d:e1:ec:25:0a:e1:06:2d:12:
16:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:73:15:B2:AB:DB:BC:69:33:1C:7D:E8:D7:8E:B0:0E:16:38:43:DE
X509v3 Authority Key Identifier:
keyid:12:67:1B:EB:B8:AC:3E:30:B5:D7:C3:D2:53:73:57:A3:B2:54:6D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3a:b6:9e:34:da:6e:30:44:cd:ee:91:11:2b:b7:99:7d:26:
f6:a5:17:6b:64:01:56:6d:00:76:2e:1d:0d:37:0d:6c:43:90:
11:fe:2e:68:97:e5:09:2b:a3:13:07:f5:dd:b2:b4:c5:4e:54:
eb:f6:f0:06:27:c7:12:d7:5a:01:73:f9:2a:ba:2c:96:07:28:
67:91:3b:2f:d2:1e:b4:20:28:34:1c:94:dd:e8:45:a0:80:99:
2f:85:eb:e9:a2:29:55:3b:57:01:22:30:c5:9f:c1:1e:46:47:
06:6f:38:7c:75:51:d5:a4:ca:3e:21:e3:f1:65:72:54:28:b6:
1f:a0:1c:71:7b:50:b1:07:65:54:11:32:0e:c7:3b:54:44:49:
99:38:34:ad:3f:c2:46:f2:47:7f:99:2b:69:84:ae:de:e2:e9:
ab:63:d3:8c:6a:50:61:13:e7:99:43:7b:03:e1:24:a4:c1:8c:
2b:4b:4c:7d:8e:21:60:b0:30:b6:6d:25:13:97:9a:d7:61:3c:
55:ba:f4:54:cc:0f:95:60:b0:02:33:cd:3b:26:de:08:32:af:
98:6d:ed:4c:58:4b:51:b9:96:29:4d:54:be:d9:1f:9b:e5:ac:
72:91:7c:45:25:1d:61:22:a3:90:a4:d3:80:96:bc:6a:9c:9f:
37:b3:e0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:42:48 2026 by rpki-client