Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
File: Em_8AJbGk7vEIO64zO80vHtTh0M.mft (raw, json)
Hash identifier: CNjh2yr1JHbz1i9aPwmVKEg0bXwOkUGUsINwuB+bi/0=
Subject key identifier: 69:2A:DB:F8:11:3C:20:DA:C4:4A:66:76:9C:73:B1:27:F2:92:D2:20
Authority key identifier: 12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43
Certificate issuer: /CN=126ffc0096c693bbc420eeb8ccef34bc7b538743
Certificate serial: 019CAAC7051E456FD0FC3B5522F447CEE920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
Manifest number: 11DC
Signing time: Sun 01 Mar 2026 19:01:35 +0000
Manifest this update: Sun 01 Mar 2026 19:01:35 +0000
Manifest next update: Mon 02 Mar 2026 19:01:35 +0000
Files and hashes: 1: Em_8AJbGk7vEIO64zO80vHtTh0M.crl (hash: nSPlEj/xTmmxkb7GgPgvMJ8blL2lQE8nfPlzk8SS+fw=)
2: oPW1SGwP91H4COCpUVzVXa2p0W0.roa (hash: sJ80Hmwvt2BZ4Ckn8z2EQlXDh6xgPaM8/fsDXZd71pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:05:1e:45:6f:d0:fc:3b:55:22:f4:47:ce:e9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126ffc0096c693bbc420eeb8ccef34bc7b538743
Validity
Not Before: Mar 1 19:01:35 2026 GMT
Not After : Mar 2 19:01:35 2026 GMT
Subject: CN=692adbf8113c20dac44a66769c73b127f292d220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cf:3a:30:5b:ab:94:ea:8f:1a:24:1a:38:f1:
d4:71:1c:27:46:3a:47:d7:d7:ce:80:8c:ec:25:ac:
be:bd:5e:27:ca:ac:71:d8:34:93:96:cc:97:9d:1e:
4c:2e:1e:5a:0a:af:34:df:d7:64:19:7b:0e:10:11:
dd:b7:37:19:ef:2a:b5:de:00:b8:e8:11:73:f2:d6:
99:e1:0a:2e:8c:91:97:30:b3:01:f1:f2:49:0e:7f:
88:31:be:b1:cf:19:4b:8b:e4:f1:b9:b9:5c:61:02:
af:6a:c7:13:a2:87:0e:55:c3:d3:cd:ab:21:08:f7:
2b:94:8d:4f:5e:1d:f9:24:16:47:11:19:47:5c:03:
38:13:0b:d1:ea:a0:1a:63:a6:91:9c:78:b9:5d:18:
b8:b1:cf:e2:5b:9a:70:0b:ea:8b:4c:d9:a6:9f:99:
5f:3e:e2:ea:1f:e3:f8:03:01:38:e0:ad:63:84:08:
f6:8e:4c:71:04:84:60:35:8e:e5:7f:9a:b8:11:5e:
cf:42:c5:dd:5a:6b:d4:b8:6d:c7:ef:d0:f5:c2:e5:
83:a7:06:2d:4f:d5:ba:54:1d:a6:df:e5:6d:92:c3:
92:e5:e8:eb:cb:18:a6:88:a4:9f:c9:6b:82:56:47:
3a:a2:96:08:e5:86:73:34:51:90:2f:c8:a2:eb:3b:
03:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:2A:DB:F8:11:3C:20:DA:C4:4A:66:76:9C:73:B1:27:F2:92:D2:20
X509v3 Authority Key Identifier:
keyid:12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:af:03:1f:6f:ca:e8:40:a7:11:2b:14:ac:15:81:d3:59:3b:
cf:47:b8:5d:f6:59:c2:05:0b:d2:52:97:1f:4a:63:74:5f:05:
d7:88:53:d1:1c:66:ba:5a:9f:c4:e1:9b:55:e1:46:8e:2e:9d:
03:35:3e:2e:08:b5:3f:74:80:cb:53:67:12:dc:47:81:06:9e:
11:4e:6c:42:33:9f:b3:8b:4d:e8:c5:d0:25:be:51:91:5a:55:
df:96:47:1e:8d:ff:5f:54:f0:6b:5e:1c:0f:b4:8c:e0:b6:88:
39:dc:71:20:45:e2:3e:17:90:9f:65:33:ba:b2:21:67:29:35:
32:c6:0f:d4:6f:68:eb:9f:2e:f4:3a:91:0a:d6:5e:fb:25:44:
57:07:4f:da:0a:1c:30:b4:d8:42:c2:eb:01:0a:59:bc:7b:3e:
b9:cf:c6:95:ee:c5:ce:b5:f2:a8:36:95:3e:4e:ce:29:77:e1:
64:ef:b7:82:a3:3c:3c:5e:73:5e:39:6d:53:d7:d2:90:f1:2b:
fa:c0:ec:63:59:e1:9b:af:4e:e1:ce:97:46:e6:e4:7d:df:15:
b4:49:a2:70:1c:0a:45:2b:2f:91:71:63:e5:c6:f0:f9:30:a6:
95:98:10:62:b7:b2:35:8b:38:58:d1:46:64:e3:de:5e:68:22:
8a:5a:1c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:24 2026 by rpki-client