Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
File: Em_8AJbGk7vEIO64zO80vHtTh0M.mft (raw, json)
Hash identifier: vwrpDKZOZ+z4x2nPH62+8a12t3QJnI89FWRbvuONflI=
Subject key identifier: E0:92:9F:1F:07:05:50:50:81:91:92:C4:F1:32:AB:71:05:0A:4B:6D
Authority key identifier: 12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43
Certificate issuer: /CN=126ffc0096c693bbc420eeb8ccef34bc7b538743
Certificate serial: 019E2B1576E0FACEEF11D411B934ABBABCE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
Manifest number: 12A3
Signing time: Fri 15 May 2026 10:01:27 +0000
Manifest this update: Fri 15 May 2026 10:01:27 +0000
Manifest next update: Sat 16 May 2026 10:01:27 +0000
Files and hashes: 1: Em_8AJbGk7vEIO64zO80vHtTh0M.crl (hash: TssGE2uEiX+SyG0j8YCC66h7MJsf5rx2dqjaeXUvlYU=)
2: oPW1SGwP91H4COCpUVzVXa2p0W0.roa (hash: sJ80Hmwvt2BZ4Ckn8z2EQlXDh6xgPaM8/fsDXZd71pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 10:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:15:76:e0:fa:ce:ef:11:d4:11:b9:34:ab:ba:bc:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126ffc0096c693bbc420eeb8ccef34bc7b538743
Validity
Not Before: May 15 10:01:27 2026 GMT
Not After : May 16 10:01:27 2026 GMT
Subject: CN=e0929f1f07055050819192c4f132ab71050a4b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:38:0f:23:88:55:49:58:09:19:12:4d:89:83:
b0:26:3d:18:93:46:05:1c:c0:8f:23:c6:31:be:af:
3b:c7:f2:68:e8:71:29:0a:c5:52:99:44:22:2f:29:
b0:b7:14:ea:a4:47:7a:f0:38:65:eb:64:b6:79:73:
1b:c4:64:14:68:6f:74:9f:c3:64:63:c8:a3:38:0f:
25:07:57:0c:56:a9:f7:e4:f1:93:8f:95:5b:18:33:
6d:be:f4:fe:ec:69:17:4c:20:50:a7:9b:06:0c:92:
17:56:7b:10:8e:03:02:3c:b8:65:b7:9a:b9:f2:06:
c4:1a:54:a4:cd:55:0b:28:74:d6:fe:4e:0b:90:43:
dc:42:fd:f5:c1:01:62:f4:1f:b3:53:26:23:52:a9:
b0:6f:02:ad:c7:72:cc:a8:1f:ce:44:ef:fe:15:fb:
13:31:71:6a:b2:45:c5:67:26:9a:97:36:9e:f8:fe:
14:b5:c3:31:6c:d0:a3:6e:e4:f8:b2:eb:c0:90:a1:
50:24:99:35:f3:20:74:ef:8b:61:99:cd:ea:6a:41:
04:23:ea:e6:7c:0c:a3:2e:39:1a:3f:ff:ed:45:f6:
00:69:07:d0:99:d2:ec:21:1b:db:5f:3b:41:c6:16:
c8:78:ea:b7:9c:36:a2:f2:03:8f:87:5c:14:57:68:
f6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:92:9F:1F:07:05:50:50:81:91:92:C4:F1:32:AB:71:05:0A:4B:6D
X509v3 Authority Key Identifier:
keyid:12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:fc:68:f0:e2:2d:54:4f:b6:f3:b1:b0:59:a6:71:86:cf:ae:
9f:e8:20:6c:15:31:bb:87:2d:bb:15:ae:b0:18:73:c3:70:c8:
3e:2e:7f:6f:54:bc:38:d4:ee:2a:1c:97:df:70:da:15:92:05:
7d:6a:ac:a8:f6:03:80:6f:1b:14:5e:14:fb:1b:13:cc:37:74:
5e:ef:ea:82:3c:82:69:9b:1a:19:5e:68:61:36:79:aa:fc:91:
5f:b3:50:93:2b:aa:87:08:7e:de:93:65:9c:ca:27:22:bd:90:
3e:54:0a:ae:e7:25:db:85:c3:4e:d6:bb:9c:b8:fb:ba:a1:83:
30:da:b1:38:8b:b8:16:f7:37:5f:57:fd:c1:f4:36:ef:2d:e6:
7a:17:94:a5:96:14:97:5a:0a:9d:a9:ba:2e:c9:47:c7:1a:58:
aa:91:59:91:04:c7:17:7e:13:de:77:5b:6b:45:0b:7d:ec:cc:
b6:a7:3e:8f:fd:a2:2e:1f:d3:a4:51:5a:86:d5:c9:c2:8c:ce:
c4:67:bd:c5:d9:10:9e:05:73:c6:68:0d:24:8c:6f:7f:e7:f1:
3a:55:48:f2:af:da:a1:0c:a8:4e:a3:d5:41:16:31:f7:e6:fc:
e7:c2:39:db:0f:cf:8f:74:d3:41:79:47:ea:61:7f:ef:ed:ef:
d7:09:95:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 19:26:32 2026 by rpki-client