Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
File: EImgJR4yvzxID1qUq7X7TrkGpbM.mft (raw, json)
Hash identifier: qAqWIV4u7RsHCcbZ7HpuHghqHayhL3cLSZ8EbpfdJjU=
Subject key identifier: 13:E4:90:3E:B0:81:1E:69:90:17:58:CC:9E:80:14:B4:44:22:88:0A
Authority key identifier: 10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
Certificate issuer: /CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Certificate serial: 019D3941A22C09E7E3124315933850984007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
Manifest number: 17E7
Signing time: Sun 29 Mar 2026 11:01:35 +0000
Manifest this update: Sun 29 Mar 2026 11:01:35 +0000
Manifest next update: Mon 30 Mar 2026 11:01:35 +0000
Files and hashes: 1: EImgJR4yvzxID1qUq7X7TrkGpbM.crl (hash: JFKBnTblPbVZLkD6gaBCJc621xGirZqyggLphrCyrGo=)
2: lJ6MK4EWxS2iDNPG8gtC0QXW6QY.roa (hash: gfFr5x9q2uzGjatgMbItLXzkpsrcI9SLgHSTPYcd2mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:a2:2c:09:e7:e3:12:43:15:93:38:50:98:40:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Validity
Not Before: Mar 29 11:01:35 2026 GMT
Not After : Mar 30 11:01:35 2026 GMT
Subject: CN=13e4903eb0811e69901758cc9e8014b44422880a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:32:13:d2:44:fa:de:f7:04:5c:17:ad:db:82:
e8:04:e8:4a:1d:62:dd:22:ff:3e:30:e2:4c:3c:3e:
3c:5c:81:43:3f:e0:38:f0:2b:fb:c7:0a:db:a5:1c:
cf:4a:98:a6:78:9e:41:55:2b:b3:19:d3:d4:a9:82:
30:60:8e:53:26:89:b8:84:90:32:57:ee:ba:c1:66:
15:ea:7f:87:2a:cd:e4:d4:5b:21:83:d8:92:01:ae:
18:4f:67:91:42:d4:49:04:c7:28:ae:54:69:eb:1b:
f1:7f:03:ca:86:98:5c:9a:33:5f:2f:b8:c6:d6:53:
1e:13:a6:20:3d:b6:ee:46:b4:32:9e:d2:bf:a6:6e:
9e:0f:e9:f4:0d:c3:82:ac:df:51:b9:e7:b5:b1:d5:
67:f1:71:e0:3a:dc:ec:41:4b:55:47:cd:a8:2a:6e:
8d:52:11:7b:28:33:d4:2d:de:3a:96:3b:11:de:16:
c5:59:50:af:d5:f4:15:c1:0d:52:5a:c5:78:05:ee:
93:fd:e0:62:5c:e8:8c:eb:6f:78:ab:ec:40:3b:6e:
11:be:0a:d1:26:f6:f9:9c:55:a0:6e:39:37:ca:12:
b0:6c:51:c6:e2:de:e3:b1:fd:26:14:23:87:09:5d:
4b:5f:8a:1d:2b:84:11:f7:05:35:38:b0:70:14:e6:
8d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E4:90:3E:B0:81:1E:69:90:17:58:CC:9E:80:14:B4:44:22:88:0A
X509v3 Authority Key Identifier:
keyid:10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:99:ee:4a:0b:ae:1f:32:8e:31:f3:94:af:0e:62:79:ef:8e:
c9:e4:e7:06:47:a1:98:06:e0:28:e5:d9:dd:19:00:8d:fa:9a:
ff:4e:df:04:f9:99:25:8e:3c:94:a9:28:d5:f8:c4:00:dc:09:
17:8d:83:11:cf:0a:e9:05:84:a0:20:ab:b9:a1:79:ce:c1:e1:
3d:a7:b0:a1:8c:32:b0:5c:e8:23:60:2c:f4:63:b1:ee:85:4d:
86:6f:a6:8f:3d:e0:15:dd:20:06:2c:1e:91:d2:a5:26:9f:99:
bb:79:dd:b1:25:1f:00:2d:3c:28:3b:6a:f3:37:7c:b8:c5:5d:
64:fc:98:95:85:50:f5:6e:d8:e2:72:9c:73:48:4a:41:d6:81:
d6:31:62:da:a1:26:ee:2b:fe:0c:12:47:8c:43:76:f5:f6:00:
6e:e0:90:52:06:bc:71:d8:02:27:c6:4c:a4:c5:9b:69:b7:00:
ed:4e:84:f5:af:6d:b6:d8:1f:d5:56:a4:d5:26:97:0d:7d:13:
32:3c:46:62:79:9b:2a:8e:98:56:7c:95:41:e2:8c:52:e4:b5:
5b:24:11:00:28:8b:90:d9:1f:43:c5:ed:39:cb:fe:24:3d:04:
61:76:cd:c7:f6:7a:2e:5a:61:e9:de:6e:0f:3c:55:ea:ff:b9:
4a:28:72:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:33 2026 by rpki-client