Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.mft
File: EmCsDOT0xtDo2rrIOva4aYvEjpw.mft (raw, json)
Hash identifier: 8EI9hhnOW6UyqujmlPKmk/tpnOQCpBemPKh0V7DVsXY=
Subject key identifier: 2C:70:C8:BD:D1:4C:8B:78:94:ED:AA:C1:59:2F:9B:C5:3A:7E:07:37
Authority key identifier: 12:60:AC:0C:E4:F4:C6:D0:E8:DA:BA:C8:3A:F6:B8:69:8B:C4:8E:9C
Certificate issuer: /CN=1260ac0ce4f4c6d0e8dabac83af6b8698bc48e9c
Certificate serial: 019D39E5B36ED0C0D9C465198F23DE4B70C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmCsDOT0xtDo2rrIOva4aYvEjpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.mft
Manifest number: 02AB
Signing time: Sun 29 Mar 2026 14:00:48 +0000
Manifest this update: Sun 29 Mar 2026 14:00:48 +0000
Manifest next update: Mon 30 Mar 2026 14:00:48 +0000
Files and hashes: 1: EmCsDOT0xtDo2rrIOva4aYvEjpw.crl (hash: WijfPc3/N+ubeqf9K5DAcyK4TbWpBU1gE8VY5yml3Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EmCsDOT0xtDo2rrIOva4aYvEjpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:b3:6e:d0:c0:d9:c4:65:19:8f:23:de:4b:70:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1260ac0ce4f4c6d0e8dabac83af6b8698bc48e9c
Validity
Not Before: Mar 29 14:00:48 2026 GMT
Not After : Mar 30 14:00:48 2026 GMT
Subject: CN=2c70c8bdd14c8b7894edaac1592f9bc53a7e0737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ae:4f:12:a7:f7:34:e1:f1:e7:a3:5e:e1:29:
75:d1:22:1c:15:1e:48:f4:70:fc:4c:c6:f6:9b:fd:
40:fe:a4:3e:28:97:6f:ce:7c:7a:09:87:2e:bf:cb:
52:d6:cc:a8:dc:da:e3:11:84:ed:c6:82:29:91:e3:
00:64:bb:87:87:cc:5f:b9:54:62:96:f4:d8:ff:68:
cb:16:70:e8:d0:26:a4:7b:33:5b:f1:de:51:76:d0:
66:b6:6a:6f:df:81:96:c9:7d:0c:88:a3:7d:12:ae:
3b:d8:b9:2b:2b:c6:6c:e8:a6:8c:a2:d2:d7:19:6b:
ee:e5:2a:5f:5a:5f:43:21:ff:e3:89:59:13:87:40:
fd:fa:3e:33:fd:24:f4:b6:99:b5:61:f6:f5:7a:a1:
c8:be:34:46:24:30:c7:b9:0e:30:fc:b7:12:80:54:
5e:47:6e:96:8a:d2:c7:70:c4:b7:be:c0:54:63:41:
42:27:70:27:6a:d4:79:b2:7a:99:8b:9c:96:5c:58:
b3:91:ba:ee:85:b1:b3:69:35:92:a1:c8:2e:a7:c2:
27:06:1e:d7:5f:ab:e5:d8:c8:37:d0:37:76:64:c4:
b8:27:11:16:ee:bb:ec:ab:6e:81:06:b5:04:6e:74:
e9:f0:d2:f5:db:21:00:2f:3f:99:2a:a6:65:73:17:
1e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:70:C8:BD:D1:4C:8B:78:94:ED:AA:C1:59:2F:9B:C5:3A:7E:07:37
X509v3 Authority Key Identifier:
keyid:12:60:AC:0C:E4:F4:C6:D0:E8:DA:BA:C8:3A:F6:B8:69:8B:C4:8E:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmCsDOT0xtDo2rrIOva4aYvEjpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d5:32:ab:30:38:e3:2f:08:0c:03:1c:5f:8a:31:6a:f7:c4:
cb:07:a3:ac:ac:9e:dc:5b:a1:6e:a1:5a:2f:37:50:6c:df:5f:
18:fa:d8:2d:e9:c0:35:68:e6:f8:bd:51:96:9e:36:56:28:c0:
7e:38:65:2c:55:6d:ae:c4:ee:40:be:c0:41:33:45:b6:66:c3:
c9:72:6a:47:44:75:66:9e:da:92:bf:03:62:11:f4:5a:84:e5:
af:93:50:08:7a:e3:f7:fd:db:5f:60:71:bf:ad:12:83:9e:83:
89:2a:23:55:7a:1d:64:21:00:d5:de:b0:83:0a:0d:0c:0e:96:
5d:56:9d:29:7b:3a:db:ed:4d:9a:aa:8f:b4:a2:9c:e4:db:fc:
55:66:a5:f5:25:28:2c:3b:1d:21:74:b9:f2:d9:85:10:f4:b7:
4c:85:b3:8b:91:8a:ee:e0:e3:4d:71:f4:92:b8:73:e5:38:05:
c9:e7:6d:64:bc:e4:fd:ea:ce:83:07:5f:8e:af:47:81:f6:a3:
50:26:59:5f:cf:60:3f:c2:f6:79:8e:42:21:a6:98:dc:ee:b3:
96:9f:04:03:e5:fb:1f:02:23:a3:0e:d2:d3:42:2c:26:a3:0b:
5f:ee:87:7f:ea:61:9b:3d:94:75:bb:04:22:10:ff:64:82:4d:
e7:ec:fd:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055bNu0MDZxGUZjyPeS3DIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNjBhYzBjZTRmNGM2ZDBlOGRhYmFjODNhZjZiODY5OGJj
NDhlOWMwHhcNMjYwMzI5MTQwMDQ4WhcNMjYwMzMwMTQwMDQ4WjAzMTEwLwYDVQQD
EygyYzcwYzhiZGQxNGM4Yjc4OTRlZGFhYzE1OTJmOWJjNTNhN2UwNzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq5PEqf3NOHx56Ne4Sl10SIcFR5I
9HD8TMb2m/1A/qQ+KJdvznx6CYcuv8tS1syo3NrjEYTtxoIpkeMAZLuHh8xfuVRi
lvTY/2jLFnDo0CakezNb8d5RdtBmtmpv34GWyX0MiKN9Eq472LkrK8Zs6KaMotLX
GWvu5SpfWl9DIf/jiVkTh0D9+j4z/ST0tpm1Yfb1eqHIvjRGJDDHuQ4w/LcSgFRe
R26WitLHcMS3vsBUY0FCJ3AnatR5snqZi5yWXFizkbruhbGzaTWSocgup8InBh7X
X6vl2Mg30Dd2ZMS4JxEW7rvsq26BBrUEbnTp8NL12yEALz+ZKqZlcxceYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxwyL3RTIt4lO2qwVkvm8U6fgc3MB8GA1UdIwQY
MBaAFBJgrAzk9MbQ6Nq6yDr2uGmLxI6cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW1Dc0RPVDB4dERvMnJySU92YTRhWXZFanB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi81NTFhMWYtMTU0Mi00NDNiLWE1ZjQt
YjA2ZGFjMzU3OTY2LzEvRW1Dc0RPVDB4dERvMnJySU92YTRhWXZFanB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi81NTFhMWYtMTU0Mi00NDNiLWE1ZjQtYjA2ZGFjMzU3OTY2
LzEvRW1Dc0RPVDB4dERvMnJySU92YTRhWXZFanB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMtUyqzA4
4y8IDAMcX4oxavfEywejrKye3FuhbqFaLzdQbN9fGPrYLenANWjm+L1Rlp42VijA
fjhlLFVtrsTuQL7AQTNFtmbDyXJqR0R1Zp7akr8DYhH0WoTlr5NQCHrj9/3bX2Bx
v60Sg56DiSojVXodZCEA1d6wgwoNDA6WXVadKXs62+1NmqqPtKKc5Nv8VWal9SUo
LDsdIXS58tmFEPS3TIWzi5GK7uDjTXH0krhz5TgFyedtZLzk/erOgwdfjq9Hgfaj
UCZZX89gP8L2eY5CIaaY3O6zlp8EA+X7HwIjow7S00IsJqMLX+6Hf+phmz2UdbsE
IhD/ZIJN5+z9Cg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:48 2026 by rpki-client