Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
File: Em_8AJbGk7vEIO64zO80vHtTh0M.mft (raw, json)
Hash identifier: ODMT/6+2fr8udibeGVkMfN1/KfW4Ji2YoP0cifAkOSA=
Subject key identifier: D4:D1:A7:EB:76:3B:40:45:D8:50:D1:4B:59:DD:9F:17:E2:56:37:93
Authority key identifier: 12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43
Certificate issuer: /CN=126ffc0096c693bbc420eeb8ccef34bc7b538743
Certificate serial: 019D98502850E97CE03A3D4318689E1D8D32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
Manifest number: 1257
Signing time: Thu 16 Apr 2026 22:01:23 +0000
Manifest this update: Thu 16 Apr 2026 22:01:23 +0000
Manifest next update: Fri 17 Apr 2026 22:01:23 +0000
Files and hashes: 1: Em_8AJbGk7vEIO64zO80vHtTh0M.crl (hash: O2vRhJGl6bOzsp13wBOayDmnClfuYv68oyKuw2s5Cbc=)
2: oPW1SGwP91H4COCpUVzVXa2p0W0.roa (hash: sJ80Hmwvt2BZ4Ckn8z2EQlXDh6xgPaM8/fsDXZd71pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:28:50:e9:7c:e0:3a:3d:43:18:68:9e:1d:8d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126ffc0096c693bbc420eeb8ccef34bc7b538743
Validity
Not Before: Apr 16 22:01:23 2026 GMT
Not After : Apr 17 22:01:23 2026 GMT
Subject: CN=d4d1a7eb763b4045d850d14b59dd9f17e2563793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b2:fb:e3:65:f3:5a:fb:d4:1b:44:b9:49:50:
8c:de:d5:61:6c:d3:5a:2e:1c:ff:cf:d6:e3:40:75:
f5:48:2d:b1:c4:98:98:b3:02:f5:3d:df:3d:b3:a1:
2a:9b:50:24:00:40:d9:c5:d4:42:27:94:cf:b3:4e:
45:ec:6d:9a:ed:78:a2:a7:4d:06:c8:70:60:ae:38:
c9:06:2b:02:89:78:60:53:29:e5:0d:c8:51:62:e6:
49:05:95:a6:bf:27:52:f9:ea:2b:42:40:fe:a0:5a:
b9:8d:1e:2b:27:44:03:ca:1b:35:b7:54:bb:c2:23:
4a:ae:33:37:b4:52:5f:19:64:a3:3d:0d:cd:e8:ee:
4a:b9:5a:40:44:bf:de:c9:1c:f1:0c:10:9d:1d:5b:
10:f2:c9:65:03:d6:25:c2:0b:f6:bb:68:02:17:08:
fe:49:04:f6:64:21:9b:44:6f:8e:36:16:3d:fe:99:
fe:aa:d6:c9:14:49:bc:38:7b:0f:61:e3:4f:81:4d:
23:ac:34:a4:18:ca:81:66:ee:c8:53:30:8c:e8:0c:
6f:9b:27:14:70:3a:7f:06:0c:e8:9c:fa:67:4e:b0:
80:60:d6:5e:3f:b6:29:80:ac:fd:95:1d:70:c0:86:
0d:06:61:4c:38:31:bf:33:ea:12:1e:f9:0e:81:10:
0e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D1:A7:EB:76:3B:40:45:D8:50:D1:4B:59:DD:9F:17:E2:56:37:93
X509v3 Authority Key Identifier:
keyid:12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:70:67:bc:fe:e3:23:be:2f:a3:37:d2:83:2b:6a:29:ae:be:
02:ea:cf:b3:2e:62:7f:34:3d:98:f7:94:4f:4c:e0:c2:65:af:
e9:d6:f7:62:b3:44:ac:18:b9:e5:fa:2c:d2:cd:e9:2b:a3:3e:
fb:89:20:25:94:d2:7d:59:ae:02:bb:e8:60:98:cb:69:3a:70:
3a:d7:f0:dc:8b:4d:d6:63:5a:5d:83:30:12:8e:e3:9e:8c:3d:
63:17:63:fd:7b:48:7e:4a:cd:64:71:70:ba:3b:86:e2:5e:fc:
9b:c9:6b:0a:28:5a:46:e8:fa:59:9e:c1:a7:17:41:d4:c8:69:
e4:e3:1a:d8:99:e7:92:c1:0f:6e:e7:d8:58:db:51:2b:82:a0:
9d:12:a6:e3:44:11:ca:82:8a:5b:d0:0e:d6:f2:31:28:c3:99:
af:28:b3:e9:4b:cd:85:8d:d1:be:c3:36:40:a0:d3:38:d5:3c:
85:31:24:8e:db:85:aa:99:d0:69:0c:25:7f:6f:93:4f:ab:72:
1c:95:01:c5:73:6d:09:c1:14:ca:97:7e:56:5b:a8:33:55:cd:
7e:0c:5e:b4:38:bd:8e:51:52:d1:40:b7:d3:95:da:ac:65:8c:
90:cd:b5:a1:df:e5:e6:87:70:6e:fb:b1:85:8f:58:7d:60:ae:
99:ef:f8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:50:22 2026 by rpki-client