Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft
File: EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft (raw, json)
Hash identifier: StdkFfDxk4yHGUrG0w4xKIHZ5NvVPuA2q53jPq0S9tI=
Subject key identifier: 8B:E7:A1:BA:AB:9B:E1:AE:55:F2:72:6F:69:A4:B2:F0:62:AB:C4:60
Authority key identifier: 12:62:F7:DA:8F:EE:5D:2A:7B:CD:D4:01:4A:70:A9:27:DB:49:9F:A4
Certificate issuer: /CN=1262f7da8fee5d2a7bcdd4014a70a927db499fa4
Certificate serial: 019D288478C950DAF7C7C11CEBFBC7111CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft
Manifest number: 16CB
Signing time: Thu 26 Mar 2026 05:01:03 +0000
Manifest this update: Thu 26 Mar 2026 05:01:03 +0000
Manifest next update: Fri 27 Mar 2026 05:01:03 +0000
Files and hashes: 1: EmL32o_uXSp7zdQBSnCpJ9tJn6Q.crl (hash: TXDca/v0ey327yQZDpnn6TGUBV5vJi27KxO4w9Q9Ie4=)
2: uTl0JvlxYYPXSlWv5UjY4JUTXms.roa (hash: vAyl07+E7ZfATYQNzl4ukqmCla5aJ3MshRD6eW95zyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:78:c9:50:da:f7:c7:c1:1c:eb:fb:c7:11:1c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1262f7da8fee5d2a7bcdd4014a70a927db499fa4
Validity
Not Before: Mar 26 05:01:03 2026 GMT
Not After : Mar 27 05:01:03 2026 GMT
Subject: CN=8be7a1baab9be1ae55f2726f69a4b2f062abc460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:35:0e:c0:62:9f:e7:d7:62:9a:a1:35:c8:48:
84:f9:47:42:81:88:70:62:d1:cf:f7:4d:6c:fc:b4:
c2:b9:73:70:cc:02:58:b2:da:e6:99:a9:4a:fe:ae:
0f:68:29:f4:a4:00:d0:2a:42:e3:17:d7:e5:ea:b9:
1f:4a:f8:85:8a:5c:07:c9:26:ee:a0:82:fe:6d:df:
f0:18:3c:fe:ff:54:cc:05:97:38:b2:52:af:f4:27:
8b:82:db:9a:e1:5f:ec:79:15:c0:46:c6:8c:ea:79:
a6:38:75:76:19:33:fe:34:06:e8:e0:2b:27:f5:cb:
9b:f7:47:ae:9e:e4:17:cc:ac:4d:b1:3f:08:c6:22:
41:66:46:76:33:29:e9:0c:5a:2d:22:5b:df:bc:fb:
a5:d9:1a:22:08:c3:7f:1d:19:d5:7d:1a:a0:c8:98:
b4:db:82:f7:a4:ea:2d:ef:7f:95:d5:ac:57:e7:78:
8c:29:e5:b5:65:2f:90:0c:9c:f2:47:1f:5b:a5:ce:
51:1e:9b:71:2b:cd:ee:2c:d0:8e:d7:74:c7:fb:4c:
57:db:9e:78:e7:74:50:f8:1d:e0:e4:d2:a9:7a:03:
f4:5c:67:46:af:87:3b:a5:54:cd:11:a9:24:cf:71:
47:6d:0f:6a:11:0e:a6:be:ed:d8:94:4e:92:4e:72:
58:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E7:A1:BA:AB:9B:E1:AE:55:F2:72:6F:69:A4:B2:F0:62:AB:C4:60
X509v3 Authority Key Identifier:
keyid:12:62:F7:DA:8F:EE:5D:2A:7B:CD:D4:01:4A:70:A9:27:DB:49:9F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:d0:77:13:a9:c9:98:d6:9e:b0:3b:27:ce:e5:fa:0f:88:ab:
cc:aa:4e:0d:c0:0b:07:7a:c7:55:91:69:1c:e8:f3:69:81:c5:
ff:62:fd:3d:a4:27:7c:e3:cd:c1:e3:05:ec:bf:80:77:0a:f5:
71:03:1c:42:77:d3:1c:3f:60:58:b7:96:70:85:70:9e:6e:02:
53:e6:32:e9:26:70:f0:7b:73:2b:f1:32:80:b0:0c:99:f7:5c:
bd:33:f2:f4:2f:60:ae:37:4b:a0:eb:96:2d:39:e2:44:78:71:
9c:e8:b2:48:84:b3:78:d2:af:ef:31:75:57:87:33:f2:55:a4:
3f:c1:a6:71:81:1d:b7:06:15:c8:bc:4f:a1:13:00:2d:b0:a7:
73:64:06:f8:3f:53:1e:90:07:8d:d9:ba:0e:26:92:0f:d0:87:
ef:72:f9:aa:1c:1c:b9:c3:84:44:58:87:00:ee:e8:ec:ab:a9:
cf:2f:4f:96:92:22:fc:14:bf:57:2b:30:e6:92:6f:f8:31:dc:
d3:93:e7:5d:f9:c0:82:da:27:08:12:3d:d0:3f:ca:a7:41:06:
de:eb:a0:30:26:f0:d8:7a:a8:ab:ba:f9:5f:fb:45:42:3e:02:
20:6d:a7:03:08:01:60:9c:a0:08:06:0c:01:50:fb:69:1a:55:
bb:75:bc:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:36:51 2026 by rpki-client