Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
File: EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft (raw, json)
Hash identifier: hEfDVyRAu5COGJ4JakePfZIgH2I5L0pdo6U/om3hyv4=
Subject key identifier: 98:7C:88:50:0F:12:96:83:50:B1:7A:61:0C:DB:71:9E:25:3F:5D:5C
Authority key identifier: 10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D
Certificate issuer: /CN=10930d0049ba87004ccc9e5be526c350cc83fa8d
Certificate serial: 019D371BE5D627D7D1E2500E7FD2E1076759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 01:01:08 +0000
Manifest this update: Sun 29 Mar 2026 01:01:08 +0000
Manifest next update: Mon 30 Mar 2026 01:01:08 +0000
Files and hashes: 1: EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl (hash: qz4MD1kHrITbRlxbHyEnH+5gI0OEbiiAx7IWeyhE/6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:e5:d6:27:d7:d1:e2:50:0e:7f:d2:e1:07:67:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10930d0049ba87004ccc9e5be526c350cc83fa8d
Validity
Not Before: Mar 29 01:01:08 2026 GMT
Not After : Mar 30 01:01:08 2026 GMT
Subject: CN=987c88500f12968350b17a610cdb719e253f5d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:41:b8:ce:4b:cf:ee:5d:c9:3a:3f:c0:ef:34:
93:d7:b3:cd:75:ab:08:ca:e4:ac:0c:b9:f2:00:00:
d9:02:66:90:8a:31:10:af:4b:19:31:8b:29:30:c8:
7f:3d:49:cd:e2:1d:70:7f:6a:96:33:84:3b:c4:1e:
14:51:78:7f:22:76:08:92:01:b1:02:5b:cc:ab:10:
23:8d:73:0e:90:65:c8:96:de:9d:ec:ca:5e:ff:74:
9d:aa:d9:78:27:b5:74:ca:50:8e:11:be:eb:40:55:
ef:f7:eb:04:58:0d:6d:ea:52:3b:76:da:1e:34:55:
e0:fe:4d:bd:34:2a:1f:8b:a5:ec:23:0a:11:c7:db:
e5:a8:0b:4d:c3:8a:78:cc:2b:1b:f7:28:52:c7:6e:
33:48:3f:62:21:47:af:d4:d2:3a:6c:7a:09:6a:01:
0b:25:15:25:30:88:6a:10:c6:ac:ed:59:ee:13:92:
78:32:30:d0:1d:b2:0d:1d:d9:b4:08:6c:8f:5b:62:
1f:82:9b:76:ab:c1:32:89:fe:5f:d7:4f:50:7e:01:
7f:be:e3:39:f8:c2:6f:79:a7:29:5a:72:59:ff:35:
02:26:67:ca:5d:e2:15:17:2d:57:e8:79:d5:6c:47:
f6:e7:93:ef:25:83:1c:00:59:61:51:05:95:a7:75:
c0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7C:88:50:0F:12:96:83:50:B1:7A:61:0C:DB:71:9E:25:3F:5D:5C
X509v3 Authority Key Identifier:
keyid:10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a3:97:4b:2a:66:68:47:86:2a:30:52:f7:61:8d:34:99:e8:
bf:3c:8a:d0:3b:a2:4a:cd:99:10:26:91:d0:b8:f3:cd:03:bf:
31:89:00:51:d6:61:36:14:13:18:3b:4e:f1:2f:92:8c:36:b5:
3f:b2:4b:f4:ca:f2:ca:c3:32:92:58:4c:b4:ef:eb:6a:05:3f:
a5:20:74:7c:5e:d2:10:3b:47:9f:30:6e:c6:98:26:ed:01:57:
84:63:f8:b9:81:23:a7:d3:a0:c5:a9:25:e3:c1:3c:24:c5:08:
cb:bf:39:ca:6a:8f:db:00:be:52:a4:60:87:57:25:ca:37:ad:
6e:07:e2:c3:7b:9b:b7:9f:63:a9:34:b0:35:04:b9:18:df:6e:
07:56:51:1c:73:c7:39:9f:95:cc:84:8e:23:31:df:b1:a9:72:
ad:d1:e9:04:26:2f:02:69:a6:b2:61:e1:1f:c0:55:d9:33:ac:
53:aa:0e:b0:3c:83:b5:33:85:38:ed:3d:fd:4a:9c:e5:6f:ff:
55:b4:dc:83:7f:f4:41:be:fd:cc:7a:d8:4e:8e:e1:be:1f:28:
db:7a:c5:6c:04:d2:2e:bb:96:6e:e7:36:a1:47:56:2b:78:36:
92:4f:37:ac:7d:a5:33:23:05:fc:db:40:46:29:c0:04:e3:fb:
58:08:19:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:43 2026 by rpki-client