Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
File: EImgJR4yvzxID1qUq7X7TrkGpbM.mft (raw, json)
Hash identifier: ZMmYlC+iV2d1HAt0WgRlNCxrI9105jHrRiWztyiz2CM=
Subject key identifier: E8:B1:54:84:DF:27:70:4C:84:8D:02:3C:F5:4D:1F:52:0A:78:DF:33
Authority key identifier: 10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
Certificate issuer: /CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Certificate serial: 01A13E9519D6E18B87ADDD8240F29D7965B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
Manifest number: 19FC
Signing time: Thu 15 Oct 2026 08:02:01 +0000
Manifest this update: Thu 15 Oct 2026 08:02:01 +0000
Manifest next update: Fri 16 Oct 2026 08:02:01 +0000
Files and hashes: 1: EImgJR4yvzxID1qUq7X7TrkGpbM.crl (hash: 1l8UazWn4wzOcI9yZOBdGxhSQEimahBixfxevvrK8/A=)
2: lJ6MK4EWxS2iDNPG8gtC0QXW6QY.roa (hash: gfFr5x9q2uzGjatgMbItLXzkpsrcI9SLgHSTPYcd2mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:95:19:d6:e1:8b:87:ad:dd:82:40:f2:9d:79:65:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Validity
Not Before: Oct 15 08:02:01 2026 GMT
Not After : Oct 16 08:02:01 2026 GMT
Subject: CN=e8b15484df27704c848d023cf54d1f520a78df33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:19:da:b0:23:3e:f9:63:e2:56:47:4a:00:ad:
88:68:2a:df:b9:40:aa:b6:27:4b:f8:96:13:4f:86:
f8:8f:f3:77:46:08:e8:ce:b1:c8:fa:30:ee:f8:80:
b4:ec:3e:67:59:6b:d5:14:30:72:1d:53:a6:4c:d0:
bd:8d:d0:63:ee:ae:ea:71:1e:59:48:12:ad:53:86:
6a:0b:de:bf:bb:24:f7:7e:16:5e:c4:be:74:3b:ca:
1e:f6:a3:18:15:f6:2b:cc:2f:16:92:f5:0f:04:dc:
60:3a:d2:20:46:6b:25:06:0c:51:7b:73:ec:3f:22:
17:21:c5:01:7e:3b:cd:0c:9a:fc:02:bd:14:c7:e3:
45:cf:b2:48:a7:ac:66:9c:99:f6:14:74:3f:e9:6f:
2e:0f:07:d2:0b:66:4f:4e:76:99:d5:b6:75:d9:4d:
f3:2f:d5:a7:1b:d5:73:ba:8c:da:e9:06:03:7b:2a:
99:2f:5c:53:5c:21:95:85:6d:f2:69:83:76:bf:ef:
0f:1e:d7:01:0a:46:82:7e:bc:82:52:cb:9a:67:33:
ce:f3:e4:6f:c8:d4:7a:0c:2b:b9:6b:70:24:2f:2b:
c8:4c:08:dd:3f:6f:e6:62:3e:b6:83:e0:5e:a7:54:
a8:5e:04:43:df:3a:12:e3:f2:95:7b:37:57:c2:45:
eb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B1:54:84:DF:27:70:4C:84:8D:02:3C:F5:4D:1F:52:0A:78:DF:33
X509v3 Authority Key Identifier:
keyid:10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f4:67:12:40:67:76:73:fc:ad:89:b9:31:75:7d:a6:64:9c:
33:c5:ee:6c:bf:f9:de:1b:93:56:7e:d4:c8:80:51:16:30:5f:
2a:5e:e2:31:a3:85:cf:64:ad:ad:b7:3e:f0:fb:d3:88:4b:55:
3c:1d:1c:3a:be:5a:03:4c:f5:9e:2d:73:07:cf:a5:c0:60:41:
e8:2b:e0:3e:26:df:43:2e:0c:a0:80:2a:c9:11:68:b1:ae:fe:
1a:63:a4:02:4b:a1:92:49:ae:86:9e:dd:74:4c:6c:44:33:65:
73:c5:45:3b:a1:cb:e5:6b:a5:ed:4b:e8:a9:ce:9d:c7:d9:de:
35:c6:3e:fb:d9:d6:02:c1:5f:ed:52:08:91:32:10:2f:06:52:
7d:7c:ca:ee:27:05:30:f4:35:0b:f2:b3:11:f0:e1:5f:c4:3e:
a0:45:94:1b:60:c7:40:ef:4c:1e:ef:77:06:a9:2a:0d:f9:db:
2b:3e:e7:ce:4c:1b:87:58:92:a0:79:14:7b:09:97:d5:10:b0:
af:d3:3d:c1:67:50:cf:c9:f5:cf:74:73:13:c4:cf:25:1c:69:
69:84:50:9a:d5:d9:44:a7:8f:7b:31:79:61:8c:50:47:b3:0e:
fd:af:af:b0:1c:a6:7b:54:f2:f1:b4:0f:50:32:98:25:d6:71:
f2:03:0f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:22:15 2026 by rpki-client