Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
File: EMg25c4r_rgh831kpJwWGFX-LFI.mft (raw, json)
Hash identifier: n59tUhUpU8J4bAPk/ci798GVdy9Qho1uroThLzras2Q=
Subject key identifier: 93:34:A6:4A:7E:47:CF:A1:BA:59:3C:2B:78:89:7D:D5:05:02:7E:CE
Authority key identifier: 10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52
Certificate issuer: /CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
Certificate serial: 019DCC3D1862D458930F69720D882146EBC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
Manifest number: 08C0
Signing time: Mon 27 Apr 2026 00:00:49 +0000
Manifest this update: Mon 27 Apr 2026 00:00:49 +0000
Manifest next update: Tue 28 Apr 2026 00:00:49 +0000
Files and hashes: 1: EMg25c4r_rgh831kpJwWGFX-LFI.crl (hash: xGYfMXAVnpyawenavh7DQ3WjKjjuLoniSJxIahLEbPM=)
2: gu3gbqmYc42MBrN2tTrBxhokk-w.roa (hash: TMIVSIIzGJ/WU4Qk37G7HBf3N3RPvDoJEdio74aPoFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:3d:18:62:d4:58:93:0f:69:72:0d:88:21:46:eb:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
Validity
Not Before: Apr 27 00:00:49 2026 GMT
Not After : Apr 28 00:00:49 2026 GMT
Subject: CN=9334a64a7e47cfa1ba593c2b78897dd505027ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c9:db:7f:c7:40:de:58:24:a4:f9:60:9f:e9:
62:43:94:0e:f3:d1:a5:0f:9c:c5:63:ac:a3:bf:83:
53:30:ff:a6:d1:48:97:77:f1:97:3f:ee:ac:28:9d:
cc:05:fa:dc:a4:8c:7b:19:64:23:0a:38:66:22:35:
32:bb:20:88:fc:3b:b1:60:90:77:39:97:fd:34:84:
f9:1d:b2:51:d5:2d:58:b7:ad:f4:b8:79:68:93:b0:
eb:25:47:ce:ab:f5:49:4d:80:6f:fc:f1:2f:3f:53:
b5:d3:16:4b:7d:3d:f7:96:77:d3:99:8d:be:79:ec:
7b:ce:12:eb:a0:7e:8f:cc:8c:e3:1e:f9:6f:99:f7:
cd:9f:2d:be:39:78:8b:d0:11:28:fd:d1:9d:55:e5:
2c:58:c2:f1:f4:51:78:d0:4c:9e:c4:98:80:4e:ea:
36:bf:b4:7e:7c:a1:e2:2e:79:23:52:77:40:31:08:
dc:44:2d:46:93:a7:fa:9e:e1:9c:10:31:6f:78:6a:
42:b9:20:44:72:7c:16:09:20:48:90:61:75:12:6d:
6c:e7:c6:71:32:a6:01:d1:7c:64:70:9a:e1:b4:32:
ce:83:2b:08:09:21:10:de:fb:76:c1:bf:0b:1b:dd:
f4:90:f7:07:5d:fd:aa:ce:d6:0c:81:3b:9f:14:e4:
81:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:34:A6:4A:7E:47:CF:A1:BA:59:3C:2B:78:89:7D:D5:05:02:7E:CE
X509v3 Authority Key Identifier:
keyid:10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:56:a2:bd:96:72:f5:fb:f3:7b:87:7f:74:cf:d2:f9:69:df:
c1:99:4f:a0:7e:da:d1:d8:ef:d7:1f:05:0c:3b:2e:1a:1f:2c:
b4:94:15:df:79:06:37:e7:ae:96:79:b3:29:32:fd:f2:15:4b:
63:ba:39:0a:c5:6c:38:62:59:95:fa:83:18:2e:47:91:20:6f:
da:b2:86:cd:ed:f4:7d:60:c7:78:07:6f:52:1f:e8:4e:cb:5d:
0a:e2:21:77:81:75:72:52:ac:c0:f7:98:f8:75:be:94:b2:df:
62:08:89:dc:6e:7a:3c:1e:0e:e1:70:10:6e:01:1b:da:87:8c:
d4:70:4f:0c:02:f8:cb:14:98:17:fd:59:55:5a:eb:d1:b5:d3:
e1:20:2b:b3:06:89:28:bb:06:65:92:2f:ff:b1:4f:34:a6:7c:
82:e6:9b:5a:b9:27:f7:a8:c8:2d:86:e0:11:c6:4f:75:1d:a2:
50:be:2b:e0:22:d6:5d:e7:4f:ac:8a:70:09:97:c8:c7:3d:df:
c6:8d:6d:ba:24:f2:05:ed:8c:bc:72:56:65:44:42:af:ad:a4:
07:b3:73:d5:87:0e:70:b5:36:e6:69:76:a0:75:d5:88:a4:2b:
44:0c:06:fb:1f:72:d2:1f:1b:f6:cb:e6:85:e8:47:ee:ab:2e:
1a:bf:07:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3MPRhi1FiTD2lyDYghRuvHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYzgzNmU1Y2UyYmZlYjgyMWYzN2Q2NGE0OWMxNjE4NTVm
ZTJjNTIwHhcNMjYwNDI3MDAwMDQ5WhcNMjYwNDI4MDAwMDQ5WjAzMTEwLwYDVQQD
Eyg5MzM0YTY0YTdlNDdjZmExYmE1OTNjMmI3ODg5N2RkNTA1MDI3ZWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMnbf8dA3lgkpPlgn+liQ5QO89Gl
D5zFY6yjv4NTMP+m0UiXd/GXP+6sKJ3MBfrcpIx7GWQjCjhmIjUyuyCI/DuxYJB3
OZf9NIT5HbJR1S1Yt630uHlok7DrJUfOq/VJTYBv/PEvP1O10xZLfT33lnfTmY2+
eex7zhLroH6PzIzjHvlvmffNny2+OXiL0BEo/dGdVeUsWMLx9FF40EyexJiATuo2
v7R+fKHiLnkjUndAMQjcRC1Gk6f6nuGcEDFveGpCuSBEcnwWCSBIkGF1Em1s58Zx
MqYB0XxkcJrhtDLOgysICSEQ3vt2wb8LG930kPcHXf2qztYMgTufFOSBHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJM0pkp+R8+hulk8K3iJfdUFAn7OMB8GA1UdIwQY
MBaAFBDINuXOK/64IfN9ZKScFhhV/ixSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRU1nMjVjNHJfcmdoODMxa3BKd1dHRlgtTEZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83NWNkNDUtNjBiNS00YzRiLWI4Yjgt
OWYzYzA5YmI3NDFjLzEvRU1nMjVjNHJfcmdoODMxa3BKd1dHRlgtTEZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi83NWNkNDUtNjBiNS00YzRiLWI4YjgtOWYzYzA5YmI3NDFj
LzEvRU1nMjVjNHJfcmdoODMxa3BKd1dHRlgtTEZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjFaivZZy
9fvze4d/dM/S+WnfwZlPoH7a0djv1x8FDDsuGh8stJQV33kGN+eulnmzKTL98hVL
Y7o5CsVsOGJZlfqDGC5HkSBv2rKGze30fWDHeAdvUh/oTstdCuIhd4F1clKswPeY
+HW+lLLfYgiJ3G56PB4O4XAQbgEb2oeM1HBPDAL4yxSYF/1ZVVrr0bXT4SArswaJ
KLsGZZIv/7FPNKZ8guabWrkn96jILYbgEcZPdR2iUL4r4CLWXedPrIpwCZfIxz3f
xo1tuiTyBe2MvHJWZURCr62kB7Nz1YcOcLU25ml2oHXViKQrRAwG+x9y0h8b9svm
hehH7qsuGr8Hag==
-----END CERTIFICATE-----
Generated at Mon Apr 27 10:44:51 2026 by rpki-client