Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
File: EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft (raw, json)
Hash identifier: XLgUkasXLOSS4514MV6ICvoEJbLEOJX/QTJ/1xyDlqk=
Subject key identifier: 11:96:90:13:69:89:A3:C7:F1:99:4E:C3:CE:31:9A:8B:92:0F:91:EA
Authority key identifier: 10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D
Certificate issuer: /CN=10930d0049ba87004ccc9e5be526c350cc83fa8d
Certificate serial: 019D27A9111FEA3C39CC850BD815408754CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 01:01:24 +0000
Manifest this update: Thu 26 Mar 2026 01:01:24 +0000
Manifest next update: Fri 27 Mar 2026 01:01:24 +0000
Files and hashes: 1: EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl (hash: bM9Ii2bkvtG0CCaeJUdKdeDpcChnjVSoVkoEp8chQuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:11:1f:ea:3c:39:cc:85:0b:d8:15:40:87:54:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10930d0049ba87004ccc9e5be526c350cc83fa8d
Validity
Not Before: Mar 26 01:01:24 2026 GMT
Not After : Mar 27 01:01:24 2026 GMT
Subject: CN=119690136989a3c7f1994ec3ce319a8b920f91ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:95:ff:0a:b0:f7:cf:31:72:5a:9a:bb:da:15:
d2:51:62:28:3d:32:df:84:83:f8:e5:c8:e7:e7:ec:
13:71:4b:a8:1f:de:30:dd:93:a9:52:cb:d8:09:07:
ee:88:64:05:e9:44:08:b5:e0:64:55:e7:ba:d1:fe:
5e:12:df:2d:da:83:8f:68:ef:8f:5e:47:7b:ea:ff:
29:b5:fd:34:15:c4:6d:5b:de:38:94:77:77:d3:9e:
93:04:b3:c8:51:c4:34:dd:ab:31:ac:f5:4c:a7:03:
cb:3c:df:be:e7:c6:27:ae:8a:9c:49:c3:ec:ab:11:
d6:a5:5e:d5:46:51:87:d3:52:bf:15:19:31:0f:a7:
78:ad:af:ab:32:3a:a1:a3:34:71:7a:9b:c3:44:80:
04:87:67:7b:32:17:dc:35:54:94:17:31:f7:4c:a3:
b1:a9:23:8d:60:95:b4:3a:70:34:ee:9a:21:56:fd:
81:e1:08:c4:d7:74:0d:c9:67:3f:67:c5:4f:e3:00:
c5:e0:6e:eb:44:9f:8a:45:29:4a:a1:c5:47:65:c0:
76:58:9c:08:cf:f7:4d:21:52:15:36:06:de:d8:6c:
3b:dc:4f:83:e9:92:0d:ef:ee:cd:3a:a5:2e:72:ff:
e1:27:86:ec:bf:3e:0a:e8:c7:32:0f:f8:96:bd:2b:
6d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:96:90:13:69:89:A3:C7:F1:99:4E:C3:CE:31:9A:8B:92:0F:91:EA
X509v3 Authority Key Identifier:
keyid:10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1f:5e:7c:ef:23:3b:36:12:5d:02:bf:cc:57:cc:2d:6e:54:
a2:08:ba:02:4d:78:95:03:45:0b:7d:e6:a4:5b:ec:e2:55:1a:
7a:36:27:3e:ba:6a:cf:63:35:94:e5:14:b8:34:58:5a:59:1e:
41:1f:d7:ca:85:51:bf:1c:c6:15:9c:c3:4c:a2:e9:87:b5:59:
b3:44:69:e1:df:74:07:3b:9b:ba:ab:32:93:60:90:54:85:d0:
fe:74:6d:d7:c2:f9:0b:47:05:48:21:85:4a:19:e5:ee:b4:8c:
45:31:5d:bd:3f:c5:a8:eb:4f:2e:7d:ce:59:c3:4b:58:03:05:
b1:36:61:ff:5a:7b:f8:e1:5c:15:13:78:50:07:18:87:4c:d4:
5e:95:a2:df:c1:4d:d8:9a:18:38:93:69:1d:be:6c:9f:7b:30:
a0:d2:34:f2:b7:6f:5f:ad:7d:ef:41:ee:29:a6:7c:7c:07:35:
ee:36:29:2a:2f:ba:60:39:7c:7b:c9:2b:d3:fc:d6:d1:9b:ff:
39:68:3c:b4:7c:02:a6:e7:6c:c0:dc:99:b8:7e:b8:2e:3c:96:
47:30:3d:dc:76:bc:10:cf:f0:24:59:77:7c:a9:04:31:15:44:
9e:d5:41:6c:9d:1c:1a:4d:e3:47:7c:65:fd:d4:77:99:dc:32:
2c:db:59:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:54 2026 by rpki-client