Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
File: EMg25c4r_rgh831kpJwWGFX-LFI.mft (raw, json)
Hash identifier: Z7SvbKDNV8TrbcSOHmTQaE+7e7h6P4rFRgWOSqgOOCE=
Subject key identifier: 46:01:26:FE:CC:84:BC:E9:04:63:61:74:72:DB:E0:AC:08:F9:D8:CE
Authority key identifier: 10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52
Certificate issuer: /CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
Certificate serial: 019D2A046572C2F2E1E3720EA5D245A794C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
Manifest number: 086C
Signing time: Thu 26 Mar 2026 12:00:24 +0000
Manifest this update: Thu 26 Mar 2026 12:00:24 +0000
Manifest next update: Fri 27 Mar 2026 12:00:24 +0000
Files and hashes: 1: EMg25c4r_rgh831kpJwWGFX-LFI.crl (hash: 8hoCFLyNAG1lRlFxH75sZ1cEBUOHq70dFEtlXThWpus=)
2: gu3gbqmYc42MBrN2tTrBxhokk-w.roa (hash: TMIVSIIzGJ/WU4Qk37G7HBf3N3RPvDoJEdio74aPoFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:65:72:c2:f2:e1:e3:72:0e:a5:d2:45:a7:94:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
Validity
Not Before: Mar 26 12:00:24 2026 GMT
Not After : Mar 27 12:00:24 2026 GMT
Subject: CN=460126fecc84bce90463617472dbe0ac08f9d8ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7e:30:e6:ea:23:c3:c7:e5:09:52:da:38:68:
a1:f4:2e:a9:97:97:cc:48:29:94:64:ca:91:93:8a:
a0:b8:a2:c4:24:2d:56:43:c3:ef:11:10:2d:2f:7b:
9f:d9:2c:43:4e:fe:36:a6:63:f7:13:83:10:2f:54:
3a:a9:71:6d:57:fc:99:d7:e7:4b:a0:b0:65:b5:b6:
bf:9f:d0:84:f9:5c:dc:36:d7:76:e6:85:d7:04:fd:
9d:8b:13:e0:ab:49:fb:bd:1e:97:5b:63:55:e7:fc:
ba:b5:54:20:c2:66:d8:80:90:c4:46:09:16:f2:08:
8f:82:42:fc:19:00:41:54:3a:2f:1f:e9:90:05:c1:
0a:77:f0:1e:31:a4:03:f7:8f:02:a5:32:ff:a4:e3:
f8:f8:7e:2b:f3:f5:e1:12:d6:25:ac:d0:77:c3:31:
0e:4c:a2:9e:7c:49:63:5c:1d:4f:33:f4:e2:7a:7d:
0d:9a:2b:19:eb:a5:99:56:8d:d6:ce:6a:de:33:73:
33:1e:40:8e:b7:b9:05:bc:37:8a:22:44:23:19:80:
35:23:8c:88:0b:2f:72:dd:56:e9:34:39:a7:03:b1:
51:c5:47:03:a6:1d:69:d2:71:87:e5:a6:3c:e7:b9:
ae:09:03:df:8b:ba:f3:cc:c5:a1:e1:24:f4:9e:ac:
c6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:01:26:FE:CC:84:BC:E9:04:63:61:74:72:DB:E0:AC:08:F9:D8:CE
X509v3 Authority Key Identifier:
keyid:10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:2e:bf:eb:8b:b0:a4:89:9b:7b:90:bd:ee:e0:ab:fc:48:06:
07:c4:c0:be:5f:c5:88:2c:c5:c0:23:48:0b:35:78:48:e6:ce:
65:65:ed:ae:6a:0c:bc:b9:b6:e0:a5:42:e3:35:2c:a8:14:b8:
03:74:de:70:80:b9:3d:b2:fe:c3:26:c8:f3:ac:1c:19:42:83:
47:32:e4:5e:03:3e:a1:2d:1a:11:53:70:79:3d:4f:a6:1b:dc:
b1:ff:81:e5:73:a6:24:26:fe:ad:24:47:da:78:a0:60:83:2a:
27:b0:bb:f5:3c:06:fb:64:4d:5e:73:4d:bf:ab:bb:68:83:13:
b9:40:c3:82:5c:4c:8e:20:13:62:bd:af:82:e2:62:34:c3:c7:
27:40:a7:53:33:5b:05:fb:4e:dd:8d:a9:37:f7:25:cb:91:54:
d7:8d:f4:3e:7e:af:6e:6f:be:50:74:a8:b1:ff:64:06:bd:68:
7c:47:f6:d3:7b:45:1b:a6:75:07:a4:8e:33:44:54:ba:bc:22:
f3:89:82:d4:9e:ca:fe:8c:42:c5:b9:22:c2:ca:64:46:9c:4c:
04:95:5d:30:3e:a8:49:87:16:47:9d:7e:e3:ab:3c:de:82:1f:
1c:7c:6e:86:2b:e2:e0:a5:45:59:65:9e:4e:72:fd:a0:3c:04:
bd:57:c8:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qBGVywvLh43IOpdJFp5TFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYzgzNmU1Y2UyYmZlYjgyMWYzN2Q2NGE0OWMxNjE4NTVm
ZTJjNTIwHhcNMjYwMzI2MTIwMDI0WhcNMjYwMzI3MTIwMDI0WjAzMTEwLwYDVQQD
Eyg0NjAxMjZmZWNjODRiY2U5MDQ2MzYxNzQ3MmRiZTBhYzA4ZjlkOGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt34w5uojw8flCVLaOGih9C6pl5fM
SCmUZMqRk4qguKLEJC1WQ8PvERAtL3uf2SxDTv42pmP3E4MQL1Q6qXFtV/yZ1+dL
oLBltba/n9CE+VzcNtd25oXXBP2dixPgq0n7vR6XW2NV5/y6tVQgwmbYgJDERgkW
8giPgkL8GQBBVDovH+mQBcEKd/AeMaQD948CpTL/pOP4+H4r8/XhEtYlrNB3wzEO
TKKefEljXB1PM/Tien0NmisZ66WZVo3WzmreM3MzHkCOt7kFvDeKIkQjGYA1I4yI
Cy9y3VbpNDmnA7FRxUcDph1p0nGH5aY857muCQPfi7rzzMWh4ST0nqzG6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYBJv7MhLzpBGNhdHLb4KwI+djOMB8GA1UdIwQY
MBaAFBDINuXOK/64IfN9ZKScFhhV/ixSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRU1nMjVjNHJfcmdoODMxa3BKd1dHRlgtTEZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83NWNkNDUtNjBiNS00YzRiLWI4Yjgt
OWYzYzA5YmI3NDFjLzEvRU1nMjVjNHJfcmdoODMxa3BKd1dHRlgtTEZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi83NWNkNDUtNjBiNS00YzRiLWI4YjgtOWYzYzA5YmI3NDFj
LzEvRU1nMjVjNHJfcmdoODMxa3BKd1dHRlgtTEZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAny6/64uw
pImbe5C97uCr/EgGB8TAvl/FiCzFwCNICzV4SObOZWXtrmoMvLm24KVC4zUsqBS4
A3TecIC5PbL+wybI86wcGUKDRzLkXgM+oS0aEVNweT1Pphvcsf+B5XOmJCb+rSRH
2nigYIMqJ7C79TwG+2RNXnNNv6u7aIMTuUDDglxMjiATYr2vguJiNMPHJ0CnUzNb
BftO3Y2pN/cly5FU1430Pn6vbm++UHSosf9kBr1ofEf203tFG6Z1B6SOM0RUurwi
84mC1J7K/oxCxbkiwspkRpxMBJVdMD6oSYcWR51+46s83oIfHHxuhivi4KVFWWWe
TnL9oDwEvVfIew==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:03 2026 by rpki-client