Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
File: EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft (raw, json)
Hash identifier: LtYV158R887R5+OYGiFXFCCrIo6OyPOySWvwa0eT6yk=
Subject key identifier: 29:20:0B:27:88:C3:C8:AD:66:E8:12:23:5E:6F:73:B5:70:7C:F2:E1
Authority key identifier: 10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D
Certificate issuer: /CN=10930d0049ba87004ccc9e5be526c350cc83fa8d
Certificate serial: 019FA8D061E5842067E164F1C47A28C64C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
Manifest number: 19CE
Signing time: Tue 28 Jul 2026 13:00:56 +0000
Manifest this update: Tue 28 Jul 2026 13:00:56 +0000
Manifest next update: Wed 29 Jul 2026 13:00:56 +0000
Files and hashes: 1: EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl (hash: VVjgnJFn17S+KFD2XaC+WEWte4DJhj8EWNa5oBPAtLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:61:e5:84:20:67:e1:64:f1:c4:7a:28:c6:4c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10930d0049ba87004ccc9e5be526c350cc83fa8d
Validity
Not Before: Jul 28 13:00:56 2026 GMT
Not After : Jul 29 13:00:56 2026 GMT
Subject: CN=29200b2788c3c8ad66e812235e6f73b5707cf2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c1:c1:61:e2:50:29:82:60:7e:9b:6d:ea:12:
6f:ea:38:dc:33:c1:a8:7c:29:cd:0c:5a:8a:82:14:
ca:34:d0:41:55:39:43:52:84:1a:f3:42:18:92:e5:
0a:97:f2:63:2b:ef:eb:ed:b5:ae:6c:89:80:ad:00:
fe:79:ef:a6:1a:77:c9:05:ee:9d:40:f4:1b:ef:a7:
4b:e8:b0:3e:22:f1:02:c4:97:f6:bd:88:54:2f:c9:
3b:6c:ed:0b:ce:f9:0a:4d:c4:0f:f6:fc:c4:6e:14:
d2:ac:24:25:7c:a1:90:b1:8e:db:46:78:a7:40:65:
48:f6:d0:9c:5b:1f:f2:ef:83:a8:99:2c:66:ab:ac:
86:32:1c:68:28:5b:65:70:5f:21:54:64:c2:8d:81:
9b:89:20:bc:08:65:25:7f:1f:ad:98:d2:c9:21:4e:
d2:88:bb:5f:4d:b3:f9:01:75:55:85:ea:40:a7:46:
59:e8:54:70:23:5a:02:2f:b8:e5:d8:ed:58:56:19:
b5:ca:fd:5d:bf:dd:df:30:c5:27:79:82:a0:08:6b:
fc:dd:f1:82:e4:2d:ac:4e:ce:ae:cc:a7:1b:a5:52:
31:78:4e:52:e9:55:d1:86:24:08:0e:14:c2:01:4b:
37:fd:03:d4:2f:02:79:ae:d4:31:4d:37:a0:1b:ee:
58:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:20:0B:27:88:C3:C8:AD:66:E8:12:23:5E:6F:73:B5:70:7C:F2:E1
X509v3 Authority Key Identifier:
keyid:10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:1a:8d:18:78:98:28:49:ba:34:d4:0c:a9:0b:e5:81:c7:12:
84:01:cf:cc:a6:c8:1a:56:46:75:13:a9:65:48:dd:b8:7f:f8:
98:9e:44:84:6d:ff:51:1f:aa:5b:83:48:10:75:62:b6:67:67:
df:88:59:21:f0:15:38:ca:3a:88:66:36:b9:37:0a:5c:7b:d6:
de:1b:2e:a6:1c:52:f7:47:51:93:50:e3:a3:d4:3e:07:ab:67:
64:2a:53:0b:b2:92:ee:94:ac:f5:2d:fc:2c:d8:af:db:9a:c3:
12:bf:47:43:69:42:7e:4c:13:8d:0b:d8:5c:f5:69:90:be:22:
59:2d:9d:34:4f:45:03:78:94:1a:98:52:a4:e7:59:18:10:ac:
0b:e6:16:aa:91:2d:a9:2a:f4:48:dd:3c:04:5d:82:7c:59:94:
1f:c9:9b:5f:70:e7:8f:63:5a:13:e1:f1:aa:f5:6e:8a:82:2b:
1a:cb:85:84:68:c6:90:f1:b1:ff:3a:39:9b:ad:24:fa:6e:3a:
16:2d:9d:57:2a:c8:da:4a:16:fb:cd:18:42:52:72:fa:48:e9:
3b:77:9a:ee:31:f1:e3:af:bb:46:0d:88:f9:fc:77:6e:af:45:
e6:5b:6b:ac:58:b1:8d:ff:ab:f6:82:66:85:01:b3:ba:54:e6:
2e:dc:d4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:58:26 2026 by rpki-client