Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.mft
File: EmCsDOT0xtDo2rrIOva4aYvEjpw.mft (raw, json)
Hash identifier: 1286P765RiOLDtkAbbrgSPjT2bEOCjCIscwskCutX8w=
Subject key identifier: CE:C5:4B:4D:4B:A1:E5:7C:96:03:F4:CA:44:71:CB:CE:80:16:AD:FB
Authority key identifier: 12:60:AC:0C:E4:F4:C6:D0:E8:DA:BA:C8:3A:F6:B8:69:8B:C4:8E:9C
Certificate issuer: /CN=1260ac0ce4f4c6d0e8dabac83af6b8698bc48e9c
Certificate serial: 019D2696608D78FA3BD66C30892BBFEA9FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmCsDOT0xtDo2rrIOva4aYvEjpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.mft
Manifest number: 02A1
Signing time: Wed 25 Mar 2026 20:01:22 +0000
Manifest this update: Wed 25 Mar 2026 20:01:22 +0000
Manifest next update: Thu 26 Mar 2026 20:01:22 +0000
Files and hashes: 1: EmCsDOT0xtDo2rrIOva4aYvEjpw.crl (hash: ABeqjFaijlpORnv3dxoaZgW5X6dpy0HxYBS+Zpqtpr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EmCsDOT0xtDo2rrIOva4aYvEjpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:60:8d:78:fa:3b:d6:6c:30:89:2b:bf:ea:9f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1260ac0ce4f4c6d0e8dabac83af6b8698bc48e9c
Validity
Not Before: Mar 25 20:01:22 2026 GMT
Not After : Mar 26 20:01:22 2026 GMT
Subject: CN=cec54b4d4ba1e57c9603f4ca4471cbce8016adfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:73:9d:7c:8d:06:7a:07:e1:8b:e9:6b:de:de:
c1:82:9d:ae:0c:7d:7d:50:06:96:a2:c3:63:c0:b8:
40:fe:21:50:c6:04:8b:6a:e4:ec:f7:2a:af:a4:68:
9e:cf:09:17:75:a6:c0:e5:6c:5a:e5:41:a1:d9:bf:
87:65:3f:ca:91:1d:59:80:4a:b8:ef:31:80:69:14:
5c:2b:28:40:27:0f:15:ce:0d:44:c3:43:9f:0e:b6:
44:71:3d:b6:e1:57:02:d9:d4:a2:fc:90:e8:20:cc:
3e:2b:99:fc:85:98:4e:bd:b5:35:cd:58:18:88:8b:
49:36:3b:2c:7c:f8:ae:ad:1a:40:3e:d4:88:7f:55:
0d:33:23:d7:25:d1:8e:58:95:4d:be:e0:b0:7e:0a:
85:11:1a:88:8d:01:66:28:47:ec:7c:b6:7a:14:8c:
cd:f3:2b:c9:55:c5:da:07:aa:e3:b2:b7:14:ff:96:
8f:4b:b0:53:34:49:f9:86:58:b3:a2:24:9f:19:42:
1f:3a:7b:1a:05:59:54:44:11:1b:07:c8:39:bc:87:
0d:61:b1:ac:23:78:71:04:ff:83:66:15:28:8e:66:
bc:47:6c:52:fc:34:1b:ea:41:6f:4a:98:89:bd:29:
6d:af:3d:02:56:24:7b:28:c1:bd:66:37:91:4c:04:
6f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C5:4B:4D:4B:A1:E5:7C:96:03:F4:CA:44:71:CB:CE:80:16:AD:FB
X509v3 Authority Key Identifier:
keyid:12:60:AC:0C:E4:F4:C6:D0:E8:DA:BA:C8:3A:F6:B8:69:8B:C4:8E:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmCsDOT0xtDo2rrIOva4aYvEjpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:df:cb:a0:38:3c:a2:7c:43:b0:c4:e6:2d:56:5e:f9:bc:56:
ac:fd:18:e0:cc:36:b5:25:34:71:6d:36:55:13:4f:dd:bc:97:
3c:37:31:da:9e:0f:70:65:72:29:b9:99:25:3b:af:0b:3b:04:
75:c4:eb:85:12:0e:22:44:1e:77:7c:13:3c:a0:67:25:ae:26:
17:3b:38:75:3e:c8:d6:95:d8:7d:34:9f:3b:7c:bc:6d:a3:d5:
dd:bf:22:ff:bb:9f:a4:6b:ed:3f:4f:09:19:81:a1:76:a7:73:
4b:7d:8b:ce:80:6d:d0:eb:50:03:fb:a0:f0:f6:4d:1e:3f:d6:
10:0e:48:da:cf:61:bd:ac:4f:94:45:c0:f1:28:b9:b3:31:10:
6c:dd:3e:5b:a9:6e:4b:aa:f1:c0:9f:0c:c7:0b:e8:20:08:59:
56:fe:23:91:b5:9d:62:0d:65:cd:f0:6c:af:5e:01:ce:a8:d6:
bd:b4:0c:bb:4f:ae:54:e9:5f:ff:6c:7a:2f:5b:8e:4f:22:1d:
2a:e0:44:c9:17:cf:46:85:e1:01:a5:09:f8:ad:7e:af:83:ee:
74:4c:9e:2f:0d:a6:1d:76:07:d5:e8:f3:0a:dd:2c:49:f8:37:
84:0f:0e:0a:8a:d4:0f:6b:21:df:f9:30:83:ec:35:b5:1d:62:
95:b7:7d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:09 2026 by rpki-client