Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
File: EMg25c4r_rgh831kpJwWGFX-LFI.mft (raw, json)
Hash identifier: uBoP+TKIsikYeXafTWaO6ZNxFEK6h2pcKoD8PRhQDu8=
Subject key identifier: 23:E1:28:CD:41:E1:3B:0A:14:CA:3B:67:6C:C4:F7:9F:A8:4B:B0:D3
Authority key identifier: 10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52
Certificate issuer: /CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
Certificate serial: 01A0D4947B87B5FFD46484AB5DDE20AFCA1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
Manifest number: 0A52
Signing time: Thu 24 Sep 2026 18:01:35 +0000
Manifest this update: Thu 24 Sep 2026 18:01:35 +0000
Manifest next update: Fri 25 Sep 2026 18:01:35 +0000
Files and hashes: 1: EMg25c4r_rgh831kpJwWGFX-LFI.crl (hash: EfbwnHWC9pAU0aiKHT6RZQwQTFIoKgcl8OuluLiBQPQ=)
2: gu3gbqmYc42MBrN2tTrBxhokk-w.roa (hash: TMIVSIIzGJ/WU4Qk37G7HBf3N3RPvDoJEdio74aPoFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:7b:87:b5:ff:d4:64:84:ab:5d:de:20:af:ca:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
Validity
Not Before: Sep 24 18:01:35 2026 GMT
Not After : Sep 25 18:01:35 2026 GMT
Subject: CN=23e128cd41e13b0a14ca3b676cc4f79fa84bb0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f1:63:85:04:ef:d6:21:a1:6a:01:e2:57:15:
d0:95:5f:13:da:9b:ac:2d:72:49:be:51:22:fc:b7:
3a:13:1a:28:99:b4:ac:0a:7e:e1:fe:ce:09:b0:18:
6e:a4:d4:fb:5f:4f:87:f7:e3:08:5b:f9:43:47:e7:
dc:4f:a9:2e:8e:c4:12:eb:5f:23:a3:2a:e6:9a:1c:
8a:4f:ef:dd:4c:df:2c:d1:c3:0b:a3:c4:65:92:73:
54:2c:cc:6e:2d:4e:06:c8:e8:5d:9d:00:90:c4:e3:
c5:8f:aa:be:a7:cd:51:4f:49:0b:82:63:55:2a:8c:
a4:b3:de:10:81:ab:8e:90:75:ba:6b:12:47:7a:f3:
c1:64:53:79:03:52:a4:f5:6d:39:b5:e3:1c:1a:01:
4d:78:f7:50:97:7a:b1:06:df:91:fa:01:e9:d4:61:
ae:e0:f7:a5:5b:70:4e:d9:f4:c0:92:4b:e1:66:00:
65:8b:99:91:56:77:88:83:f5:8b:8d:a4:41:ee:05:
c3:c6:4b:92:2d:ef:41:40:7e:a5:92:bc:74:72:bf:
a7:20:54:a2:fd:48:43:a5:70:17:48:88:f3:c5:49:
3c:98:16:83:a6:ec:77:60:6b:dc:9c:0a:da:07:c0:
1a:6b:79:b7:14:e5:35:ce:3b:27:10:45:48:31:3d:
d2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E1:28:CD:41:E1:3B:0A:14:CA:3B:67:6C:C4:F7:9F:A8:4B:B0:D3
X509v3 Authority Key Identifier:
keyid:10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ba:00:f1:da:1c:09:00:b6:57:ab:43:7d:6e:1a:be:72:95:
30:6c:b9:59:03:ea:8d:c0:59:c2:17:7d:38:e2:25:fc:13:0f:
f4:b9:84:46:13:1d:85:2f:d7:a0:40:81:c0:2a:b9:94:7a:29:
6e:81:d0:17:5d:27:14:65:f8:b4:74:6c:7e:88:79:23:b2:52:
5a:db:eb:83:06:ce:a6:0d:71:86:b6:82:5a:0a:5b:b0:a6:3a:
7d:b0:0c:c5:ae:25:fc:09:e8:d8:18:5c:4c:88:e5:25:55:c6:
2e:95:08:b9:57:ca:ff:59:99:a5:0c:ee:be:4a:d1:d3:6e:a2:
c2:65:ce:e6:de:33:76:f1:30:48:09:9d:54:aa:44:e0:8b:50:
bc:0d:ba:c0:21:91:b7:c4:ea:ad:0c:e6:58:90:f9:05:93:ad:
b0:a1:02:42:f5:ed:b2:be:e4:5b:d0:78:37:52:48:c8:6d:3e:
56:21:8d:1b:92:97:d7:87:f9:3f:c8:61:8f:96:6b:b6:20:62:
86:d4:f9:1f:2d:59:62:a2:db:2d:d0:a1:57:dd:d5:86:f4:9a:
c1:ce:e6:6f:81:5e:a5:d7:03:11:5a:ec:41:49:cd:84:b0:43:
01:ef:5c:3c:11:6b:0e:b3:03:8f:e5:c2:11:57:85:b1:49:77:
6b:1a:c2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:58:17 2026 by rpki-client