Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
File: EMg25c4r_rgh831kpJwWGFX-LFI.mft (raw, json)
Hash identifier: nSnP1Dc9qkN2WlS9VHKO6EeEwRSuULhoN1x2zBX3t/c=
Subject key identifier: 86:A8:61:91:38:CD:6A:13:12:57:D2:CD:73:9B:90:C8:2A:D3:1B:79
Authority key identifier: 10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52
Certificate issuer: /CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
Certificate serial: 01A08B317ECB8CA5B635FFDA094DAEDB1C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
Manifest number: 0A2C
Signing time: Thu 10 Sep 2026 12:01:11 +0000
Manifest this update: Thu 10 Sep 2026 12:01:11 +0000
Manifest next update: Fri 11 Sep 2026 12:01:11 +0000
Files and hashes: 1: EMg25c4r_rgh831kpJwWGFX-LFI.crl (hash: VhUqsW8jpEdo5pqn9b170BK0wat4LTJe2Pfe4nQO61M=)
2: gu3gbqmYc42MBrN2tTrBxhokk-w.roa (hash: TMIVSIIzGJ/WU4Qk37G7HBf3N3RPvDoJEdio74aPoFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:7e:cb:8c:a5:b6:35:ff:da:09:4d:ae:db:1c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
Validity
Not Before: Sep 10 12:01:11 2026 GMT
Not After : Sep 11 12:01:11 2026 GMT
Subject: CN=86a8619138cd6a131257d2cd739b90c82ad31b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c8:d6:bc:fa:f0:23:5d:93:1a:cd:ff:4b:3f:
67:a5:de:df:dc:a8:de:22:c0:49:cf:fd:99:78:79:
46:4d:28:a2:b0:b1:e2:d2:4b:e3:8d:65:f5:01:06:
c8:24:da:60:3b:cc:3e:ec:f4:4c:51:0c:b9:0f:00:
e5:95:73:27:0e:42:1e:0d:68:6d:d7:a5:c3:8a:0e:
70:e0:ac:0b:a5:e4:bd:37:11:cf:71:40:e3:04:7e:
2c:5f:bd:42:d9:e7:5f:6b:22:12:b3:f5:13:ec:08:
88:19:82:1b:15:69:d1:ce:f4:61:70:4b:e3:0d:b7:
0e:34:58:c5:25:b1:11:8b:a7:59:52:f8:98:19:31:
ef:a6:e3:d5:e0:1a:3e:e3:2f:55:bd:7f:7a:bf:e9:
9d:7a:41:cb:49:bb:c3:84:44:2b:b0:d2:d4:68:e0:
0b:a9:31:e7:24:e1:db:50:ce:ce:a2:08:55:02:19:
b0:43:c6:97:51:92:13:f4:3f:fa:7e:0f:f9:57:03:
40:1e:de:78:04:a8:86:7c:6c:1c:9f:1e:96:0a:bd:
62:f0:37:38:c5:5f:5e:4a:93:82:83:11:a7:11:45:
9a:5d:c3:a3:47:eb:dd:ad:35:47:7d:2e:03:0d:7f:
a7:f1:33:6a:79:7d:57:2c:5c:c5:cc:64:dc:56:b0:
bd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A8:61:91:38:CD:6A:13:12:57:D2:CD:73:9B:90:C8:2A:D3:1B:79
X509v3 Authority Key Identifier:
keyid:10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a7:2c:ef:3d:21:4a:c4:7e:86:e0:3d:5d:52:52:c9:fb:ad:
c0:eb:a1:73:91:08:c6:a2:28:da:8f:2d:25:af:9c:ca:d7:bc:
0b:11:9b:cd:82:fc:33:cd:31:18:84:05:f9:82:ec:6a:d5:2c:
ec:65:0b:f3:eb:a5:23:90:e6:0d:0a:96:c6:cf:8b:63:3a:a8:
b7:4c:3d:9b:a9:a4:eb:71:6b:db:f6:ba:cd:2a:d6:12:25:df:
59:41:20:28:2b:3a:43:e5:b4:00:0d:ef:c3:81:18:ee:74:58:
ed:76:96:1b:c7:04:dc:fb:b1:75:b0:c1:8c:9c:e2:8b:28:29:
95:7d:8e:ff:f8:31:1d:ba:08:f7:85:17:ab:c7:83:13:ee:bf:
48:0a:5a:3f:ec:58:92:04:1f:d3:b4:de:08:69:dd:65:27:d9:
22:f6:79:f2:81:a3:13:c5:92:40:1d:d8:18:4c:da:f1:99:6d:
05:94:fd:b7:f7:f8:6b:29:d0:be:a1:17:97:98:b0:b6:61:0d:
eb:8e:ab:9a:af:88:11:88:51:05:da:d1:08:48:ef:f6:e9:01:
87:ad:9b:58:cd:63:d0:07:e7:58:9c:09:b5:04:b1:bc:8c:9f:
47:69:a0:56:f2:16:aa:d9:4b:22:95:a4:01:c4:ce:d7:d8:5a:
d5:1d:f4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:57:39 2026 by rpki-client