Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
File: EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft (raw, json)
Hash identifier: E5NYjOG/EJn6EmfIWfF7aJ7GSiymrv6ABWmgvNUEmcU=
Subject key identifier: BD:42:38:86:06:15:E5:64:20:7F:C6:B7:5A:1A:DC:1D:41:91:8F:69
Authority key identifier: 10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D
Certificate issuer: /CN=10930d0049ba87004ccc9e5be526c350cc83fa8d
Certificate serial: 019F17F9C0003B1F4A83C106556BD8ECF64D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
Manifest number: 1983
Signing time: Tue 30 Jun 2026 10:01:11 +0000
Manifest this update: Tue 30 Jun 2026 10:01:11 +0000
Manifest next update: Wed 01 Jul 2026 10:01:11 +0000
Files and hashes: 1: EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl (hash: V7ZuXqDh+LLG5g3BHqXnxgvfHvQXyqHoFFsxvYD4dEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:c0:00:3b:1f:4a:83:c1:06:55:6b:d8:ec:f6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10930d0049ba87004ccc9e5be526c350cc83fa8d
Validity
Not Before: Jun 30 10:01:11 2026 GMT
Not After : Jul 1 10:01:11 2026 GMT
Subject: CN=bd4238860615e564207fc6b75a1adc1d41918f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:25:0f:09:d4:c6:fc:a0:43:ae:31:f0:9a:dd:
71:f5:25:40:b3:88:bc:cf:eb:2e:a6:55:8d:8e:00:
88:d2:a3:75:fe:37:8f:98:6e:7f:84:3a:01:31:57:
0d:11:70:79:88:a0:b8:f7:bc:be:6e:99:aa:bd:87:
25:12:59:5e:28:3a:26:d6:3e:d3:09:3e:19:aa:fa:
00:7f:c3:86:0d:79:55:24:50:6f:da:37:98:66:77:
94:62:cb:cf:cb:21:f4:46:d6:32:93:02:45:a5:a3:
b0:4c:32:17:f0:65:d4:e2:47:32:10:65:d8:75:07:
23:78:7e:74:b6:b0:4b:ed:5e:9f:37:72:ae:2a:e4:
82:6b:b5:99:37:a2:24:e6:92:c3:44:57:57:d4:8e:
74:5b:e6:5c:a2:5a:70:13:28:3e:e6:9e:60:32:19:
5c:3a:9e:d1:b1:16:a9:1d:b0:fd:80:52:d7:9e:a6:
d9:0b:30:dd:d7:a5:b5:f0:37:8d:61:f1:69:16:ac:
2c:a4:e0:7f:e1:de:09:7a:76:1f:0f:f9:d4:ef:05:
a5:f3:e3:3a:c4:4c:79:78:8d:c3:f6:ff:42:fd:6b:
af:e7:05:c2:93:89:75:b2:53:0a:7b:5a:84:5c:37:
9b:62:b0:88:e6:12:14:12:74:86:67:5c:17:34:fd:
2b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:42:38:86:06:15:E5:64:20:7F:C6:B7:5A:1A:DC:1D:41:91:8F:69
X509v3 Authority Key Identifier:
keyid:10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2c:3f:5e:e8:bf:86:b1:30:a8:dd:ad:05:1c:e2:91:c9:b2:
85:16:b1:39:ea:96:b2:4e:00:49:d5:11:c3:ec:ca:0d:51:3b:
67:b0:ef:2d:47:47:6a:54:99:4f:df:9e:83:bb:55:32:de:ab:
bb:bc:09:f9:79:96:b4:a5:bc:54:26:38:b1:57:f0:5e:c6:45:
4d:6c:94:19:6e:f2:23:86:97:d6:13:81:89:40:ee:2b:41:72:
8e:8b:a5:7f:32:ad:7e:58:13:8e:20:58:98:90:6a:aa:b5:53:
44:06:b2:a2:f4:04:7e:bb:a8:c1:cf:a3:14:84:2e:51:8f:e0:
f8:4e:7a:14:4f:80:b6:a7:a7:d9:92:c1:f5:68:f8:cb:d9:04:
fe:23:85:a4:ee:a8:d6:2e:28:12:23:df:83:6f:31:8b:d2:46:
70:96:b4:41:7f:b3:a9:07:46:52:b9:34:01:f9:37:57:8d:c1:
b5:aa:9b:ca:24:c2:84:eb:d4:ea:92:51:4a:73:0a:e5:ee:6d:
8b:e3:b9:b9:3f:99:7d:ce:01:c5:3b:c5:16:26:3c:c9:8b:bc:
e7:c4:12:4a:89:af:59:59:ac:78:3a:54:c0:b1:55:b2:73:3e:
12:ef:18:0e:14:af:be:f4:89:8a:64:cc:03:c8:eb:56:90:e3:
db:ec:de:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:58 2026 by rpki-client