Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
File: Em_8AJbGk7vEIO64zO80vHtTh0M.mft (raw, json)
Hash identifier: AckBHn5t4sFZ/3wO8vXbT9h4CPdR6e8Wwdbka5an4HQ=
Subject key identifier: 49:2F:40:B5:2A:7A:31:35:00:19:CD:1E:16:2D:BC:E3:94:F1:AF:DA
Authority key identifier: 12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43
Certificate issuer: /CN=126ffc0096c693bbc420eeb8ccef34bc7b538743
Certificate serial: 019A533FAC7F71395030FC3957E8E77F8AFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
Manifest number: 10A5
Signing time: Wed 05 Nov 2025 09:01:12 +0000
Manifest this update: Wed 05 Nov 2025 09:01:12 +0000
Manifest next update: Thu 06 Nov 2025 09:01:12 +0000
Files and hashes: 1: Em_8AJbGk7vEIO64zO80vHtTh0M.crl (hash: lX7DeKpi0UO8u3wRTKakF81/pmFXuOAgOJWdMZEyq+Q=)
2: wqwxAvFZiZ6bPRDoA0zO-bNhhIc.roa (hash: W+sz9TCOY3wSjFpbMXmTZluRFQBYvoOF99W06O++/x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:ac:7f:71:39:50:30:fc:39:57:e8:e7:7f:8a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126ffc0096c693bbc420eeb8ccef34bc7b538743
Validity
Not Before: Nov 5 09:01:12 2025 GMT
Not After : Nov 6 09:01:12 2025 GMT
Subject: CN=492f40b52a7a31350019cd1e162dbce394f1afda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:67:e7:72:a2:28:54:5e:66:57:68:97:6c:75:
12:1b:26:fb:ad:5c:88:2d:00:9f:48:eb:2d:cd:fa:
b9:36:85:10:0e:8c:3f:72:62:c7:a5:71:03:bc:12:
79:8a:09:a4:05:fb:cf:0c:56:d6:df:df:fa:e8:11:
b7:c6:65:e3:f9:d7:a6:f8:aa:64:dc:85:e2:b1:38:
d6:28:0d:b0:fb:78:25:b4:f9:2e:2c:fc:ba:a9:50:
57:71:9c:c6:86:9c:cf:90:a7:14:d2:fa:4d:40:95:
19:95:2d:39:21:bd:db:e2:b7:3f:3a:48:f7:36:d4:
9e:7a:c9:76:91:c6:90:85:2a:22:95:01:a5:b3:b4:
a0:b6:fd:8d:66:ba:71:65:9a:7f:a6:f8:8d:a8:34:
5b:be:00:f3:a2:1e:f8:2a:7e:dd:4d:9b:78:e4:42:
9e:37:aa:17:ec:72:cc:d9:d0:2c:cd:20:78:49:42:
a3:a0:c2:0d:6d:fd:9e:c5:14:a0:91:a5:02:fb:c8:
8b:77:a9:9f:32:06:c9:ad:56:55:27:61:a8:00:fa:
6c:fe:19:20:47:9a:ab:34:33:78:f7:7e:7d:04:13:
f0:3a:2a:77:f8:99:05:00:0b:c5:77:75:27:e1:73:
f4:6b:1e:04:c9:56:f5:72:8d:22:87:10:c3:ed:17:
0c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2F:40:B5:2A:7A:31:35:00:19:CD:1E:16:2D:BC:E3:94:F1:AF:DA
X509v3 Authority Key Identifier:
keyid:12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7c:51:54:69:c5:c3:08:44:d4:79:b6:0b:88:25:79:df:da:
69:69:35:dd:6f:d6:cb:32:69:d6:79:2b:f1:5f:66:18:ee:72:
28:7a:0a:74:c4:5a:c0:ec:ed:cb:59:65:44:74:36:22:2e:da:
b2:4f:d1:e9:a9:9a:64:bd:16:ea:16:69:97:73:b2:61:8e:21:
37:88:ea:80:46:34:77:62:8e:64:6e:fb:09:9e:45:f4:b2:21:
20:28:b0:31:21:84:2f:51:93:43:74:74:1e:0f:92:36:61:1f:
fb:af:3e:a9:07:33:23:47:42:73:68:6d:ca:25:48:06:45:1e:
77:a9:93:f4:86:9e:26:b3:49:95:84:48:3a:be:05:18:58:8c:
13:17:33:55:09:ed:74:27:2e:8a:1a:18:ed:86:2e:0c:a7:fa:
43:f6:1d:14:71:8c:5f:ed:08:16:4b:8d:85:65:50:17:cd:d9:
cf:60:e0:b3:d8:d7:b6:f3:57:f6:a7:44:3b:c9:89:03:89:8a:
1c:5b:d1:f8:bc:5a:ab:a0:ed:0a:72:fd:39:d7:6f:97:f6:96:
be:bd:25:7c:ea:79:a2:20:92:c5:9d:91:23:50:9e:bc:a6:e4:
0e:90:3b:67:7d:82:73:65:2f:f6:be:32:19:89:fa:ec:5e:78:
1a:09:3c:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTP6x/cTlQMPw5V+jnf4r+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNmZmYzAwOTZjNjkzYmJjNDIwZWViOGNjZWYzNGJjN2I1
Mzg3NDMwHhcNMjUxMTA1MDkwMTEyWhcNMjUxMTA2MDkwMTEyWjAzMTEwLwYDVQQD
Eyg0OTJmNDBiNTJhN2EzMTM1MDAxOWNkMWUxNjJkYmNlMzk0ZjFhZmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mfncqIoVF5mV2iXbHUSGyb7rVyI
LQCfSOstzfq5NoUQDow/cmLHpXEDvBJ5igmkBfvPDFbW39/66BG3xmXj+dem+Kpk
3IXisTjWKA2w+3gltPkuLPy6qVBXcZzGhpzPkKcU0vpNQJUZlS05Ib3b4rc/Okj3
NtSeesl2kcaQhSoilQGls7Sgtv2NZrpxZZp/pviNqDRbvgDzoh74Kn7dTZt45EKe
N6oX7HLM2dAszSB4SUKjoMINbf2exRSgkaUC+8iLd6mfMgbJrVZVJ2GoAPps/hkg
R5qrNDN49359BBPwOip3+JkFAAvFd3Un4XP0ax4EyVb1co0ihxDD7RcMvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkvQLUqejE1ABnNHhYtvOOU8a/aMB8GA1UdIwQY
MBaAFBJv/ACWxpO7xCDuuMzvNLx7U4dDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW1fOEFKYkdrN3ZFSU82NHpPODB2SHRUaDBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS82MTY4N2MtMTE4Mi00YjA4LTk0OGUt
MWM4NmM1N2UyZTlmLzEvRW1fOEFKYkdrN3ZFSU82NHpPODB2SHRUaDBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS82MTY4N2MtMTE4Mi00YjA4LTk0OGUtMWM4NmM1N2UyZTlm
LzEvRW1fOEFKYkdrN3ZFSU82NHpPODB2SHRUaDBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALnxRVGnF
wwhE1Hm2C4gled/aaWk13W/WyzJp1nkr8V9mGO5yKHoKdMRawOzty1llRHQ2Ii7a
sk/R6amaZL0W6hZpl3OyYY4hN4jqgEY0d2KOZG77CZ5F9LIhICiwMSGEL1GTQ3R0
Hg+SNmEf+68+qQczI0dCc2htyiVIBkUed6mT9IaeJrNJlYRIOr4FGFiMExczVQnt
dCcuihoY7YYuDKf6Q/YdFHGMX+0IFkuNhWVQF83Zz2Dgs9jXtvNX9qdEO8mJA4mK
HFvR+Lxaq6DtCnL9Oddvl/aWvr0lfOp5oiCSxZ2RI1CevKbkDpA7Z32Cc2Uv9r4y
GYn67F54Ggk8XQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:44:54 2025 by rpki-client