Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
File: EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft (raw, json)
Hash identifier: TASwolCMwjgzwb1aODzBpjRheMME1iXTvu6Hma9KStk=
Subject key identifier: E8:E4:8C:E1:48:D1:29:5C:6A:34:33:EF:AE:5A:DA:77:0F:C7:5E:D1
Authority key identifier: 10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D
Certificate issuer: /CN=10930d0049ba87004ccc9e5be526c350cc83fa8d
Certificate serial: 01A13C6E4A244A58927343F17649E99560FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
Manifest number: 1A9F
Signing time: Wed 14 Oct 2026 22:00:23 +0000
Manifest this update: Wed 14 Oct 2026 22:00:23 +0000
Manifest next update: Thu 15 Oct 2026 22:00:23 +0000
Files and hashes: 1: EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl (hash: jytqqiXxYXzRPbGdJms8tu9KySHioz2XTgwuNW/s3gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:4a:24:4a:58:92:73:43:f1:76:49:e9:95:60:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10930d0049ba87004ccc9e5be526c350cc83fa8d
Validity
Not Before: Oct 14 22:00:23 2026 GMT
Not After : Oct 15 22:00:23 2026 GMT
Subject: CN=e8e48ce148d1295c6a3433efae5ada770fc75ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9e:80:ca:04:e8:a3:0c:a9:16:b0:a8:cd:50:
98:e8:43:ef:b1:50:0b:2f:7a:64:87:43:93:7e:23:
91:9a:64:0d:ed:00:51:7b:eb:91:4c:df:00:89:ae:
9c:93:3f:85:5e:46:74:3e:48:cc:d9:9d:02:85:1b:
99:70:0c:c7:d4:3c:84:6c:fe:f7:d4:ea:77:78:ba:
47:ea:97:1b:51:55:bf:c3:8b:3d:87:f9:47:24:c0:
d2:40:53:d8:58:b8:d8:dd:f6:34:b1:3f:b8:1e:cd:
5e:97:76:8e:1d:db:df:f4:d1:f6:22:04:47:37:83:
7f:1b:4b:0e:d2:fc:ba:f1:89:02:7d:1c:e8:7b:84:
1d:4a:76:55:64:04:28:ff:26:09:23:b4:9e:c6:bc:
56:94:b9:c8:d8:3f:de:42:fc:4e:05:03:ee:42:96:
1b:3e:82:6f:6f:0d:61:38:44:73:4a:ee:f4:e4:69:
75:e3:7c:9c:88:cd:dc:46:8e:81:52:9f:1c:c3:0c:
8c:c8:70:12:ee:a4:da:ec:34:b1:ca:0b:0d:16:46:
94:f7:63:87:75:e4:b2:50:3c:89:43:da:a2:07:5b:
4a:87:80:ad:c8:7b:ff:6f:31:0d:cf:2d:4e:c5:e3:
29:58:1a:69:a9:b1:a8:dd:68:05:43:e6:8b:b0:9f:
33:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E4:8C:E1:48:D1:29:5C:6A:34:33:EF:AE:5A:DA:77:0F:C7:5E:D1
X509v3 Authority Key Identifier:
keyid:10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:32:5f:77:b3:ad:92:a5:97:9e:0f:e8:29:8d:30:4b:09:46:
6b:93:46:af:18:38:c9:87:20:d1:18:68:9f:fc:46:aa:ff:b4:
1b:76:b4:32:79:f0:f9:96:6f:44:9d:59:f0:e8:22:c8:07:eb:
f4:8e:8f:df:12:0c:87:36:14:16:d2:fe:55:cb:b5:76:e8:5e:
d8:d6:56:56:15:14:49:15:e5:79:1e:92:60:0d:5e:be:30:83:
34:c9:a6:58:31:5b:ca:7f:43:ad:d9:b3:3e:80:2f:a9:ae:58:
3c:3c:f5:62:7f:8f:b4:e0:8b:2d:50:9b:19:1d:d5:bf:1f:5a:
f6:f0:10:fd:3d:68:d4:7e:92:64:48:94:b1:7b:f5:4e:3e:c2:
3c:bf:a0:03:81:8c:8d:d8:dd:1c:27:75:fd:48:8d:da:07:3c:
42:77:aa:d7:df:f9:24:9a:b3:e8:f0:6b:66:3f:1c:50:a7:db:
3e:d3:09:1e:4c:0c:d7:ce:1b:4e:a3:2b:5a:78:ca:ba:07:fc:
d8:01:54:5d:f8:e3:2b:d3:15:b1:5d:f7:ff:81:47:9e:04:d4:
34:6b:64:d7:8d:f7:c5:3f:10:3e:00:6d:c9:ec:69:13:d9:6d:
c8:4f:03:5e:c8:af:d8:62:6c:2f:ea:c2:07:8d:3d:e5:4a:91:
a9:22:94:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:13:14 2026 by rpki-client