Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
File: EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft (raw, json)
Hash identifier: LGU74yAFoivueZCbt6nfRtMh2br1P6NSxrOfc0AImww=
Subject key identifier: A0:D4:91:21:95:42:C5:6A:B8:5C:0D:0F:24:F4:50:F5:71:32:D6:F7
Authority key identifier: 10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D
Certificate issuer: /CN=10930d0049ba87004ccc9e5be526c350cc83fa8d
Certificate serial: 019E303BF2152CAFAF41DFBFAF8B8BCA692B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
Manifest number: 190B
Signing time: Sat 16 May 2026 10:01:35 +0000
Manifest this update: Sat 16 May 2026 10:01:35 +0000
Manifest next update: Sun 17 May 2026 10:01:35 +0000
Files and hashes: 1: EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl (hash: tx4IUxxtCQSqHRpn9YL3/uPl/JYrQsGa59wfrTX5XdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:f2:15:2c:af:af:41:df:bf:af:8b:8b:ca:69:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10930d0049ba87004ccc9e5be526c350cc83fa8d
Validity
Not Before: May 16 10:01:35 2026 GMT
Not After : May 17 10:01:35 2026 GMT
Subject: CN=a0d491219542c56ab85c0d0f24f450f57132d6f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:89:12:2a:bd:4d:f2:4c:dd:bf:31:c5:2f:0d:
98:49:a7:1c:73:3e:4a:ed:9f:7f:6a:77:a0:e9:f7:
9b:a9:13:0d:e1:4f:dd:be:de:9c:b8:bd:59:6f:30:
06:00:7c:29:b6:35:17:12:3c:33:91:53:46:f3:c7:
f8:9e:83:60:d2:70:2b:08:89:00:a7:31:53:9a:07:
bd:fe:93:2b:b7:fa:45:05:8c:9d:df:e9:20:48:03:
90:3a:e1:f2:fc:8b:d9:be:77:f1:04:81:fb:07:05:
30:ee:93:ea:6d:c1:2e:45:9c:67:e3:ce:be:53:4b:
bf:0e:07:f7:5e:92:ff:43:01:62:17:68:ac:90:69:
c2:14:fc:f6:4e:d9:3b:35:cc:d5:51:aa:ed:d9:bd:
dd:d0:38:b2:a4:bf:7d:6d:d8:46:cc:65:78:d8:3c:
af:2b:e6:16:9c:63:2f:83:5f:53:e9:5c:c1:b7:da:
c2:d7:ae:d0:ec:be:85:ed:20:f5:79:1c:7e:ff:84:
b4:f9:a8:3b:30:be:99:68:cf:94:6f:12:86:36:8a:
73:57:e4:b5:a5:a3:c1:1a:be:72:c2:1f:0c:df:e0:
6c:11:aa:d0:37:76:d5:bb:ba:da:cc:c0:07:52:07:
4c:a7:e6:92:77:0b:c7:f7:2e:ef:98:7b:51:90:5e:
93:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D4:91:21:95:42:C5:6A:B8:5C:0D:0F:24:F4:50:F5:71:32:D6:F7
X509v3 Authority Key Identifier:
keyid:10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:13:7e:31:ab:20:9c:f3:d7:ad:de:10:04:97:55:69:35:30:
da:fb:d4:19:bf:5a:30:58:b3:9b:df:8f:9a:95:be:1c:dd:c3:
65:66:4e:f4:5f:c5:1c:f0:a7:e1:de:f0:aa:29:94:2f:e1:82:
02:a3:1e:4f:71:5f:55:c7:7f:59:7c:20:80:61:0d:50:b6:d6:
a4:ea:47:3d:eb:cd:5a:96:f6:14:15:24:c1:2c:ba:fb:9a:f6:
cf:bc:2a:a6:5d:a0:f6:dd:cc:0e:12:15:88:23:3d:69:37:d7:
44:4e:4e:5e:0e:bc:49:90:23:f7:76:d4:9a:fb:5c:15:8d:8e:
12:0d:6c:3a:1a:4c:65:14:00:44:d5:f1:7a:ce:0d:48:7b:59:
f3:88:94:f8:ad:63:63:e8:dd:dd:60:e6:0b:47:e3:0d:a2:55:
a2:b9:bb:f5:99:5c:c3:91:1e:03:e5:6e:39:32:40:b6:75:fc:
62:3d:46:e4:8f:ea:1a:51:95:42:e2:7d:4a:0d:e2:49:49:18:
62:53:b6:22:95:d9:58:3e:33:87:29:9f:c2:86:91:62:0a:53:
e4:d8:ad:d0:7c:73:29:b7:3c:5f:1a:84:a7:18:0f:38:2d:a8:
7a:d1:e7:69:fe:78:b8:cd:7e:c0:53:fd:2b:68:b8:5b:03:e5:
f7:ee:d8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:06 2026 by rpki-client