Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
File: EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft (raw, json)
Hash identifier: arbfrW4wu8IbXagpq7EnUS3v/rR9p1JPeWe8Ydz4ihc=
Subject key identifier: CF:38:76:E6:09:22:61:7F:D5:05:74:08:E5:9F:E9:8A:C2:8F:3D:C7
Authority key identifier: 10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D
Certificate issuer: /CN=10930d0049ba87004ccc9e5be526c350cc83fa8d
Certificate serial: 019EBF232B8CB9265B2DF153B77A694A3E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
Manifest number: 1955
Signing time: Sat 13 Jun 2026 04:00:13 +0000
Manifest this update: Sat 13 Jun 2026 04:00:13 +0000
Manifest next update: Sun 14 Jun 2026 04:00:13 +0000
Files and hashes: 1: EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl (hash: hx/m5npzHgDGbozPsrOraF18cK8sqhIxAAubABKCEqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:2b:8c:b9:26:5b:2d:f1:53:b7:7a:69:4a:3e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10930d0049ba87004ccc9e5be526c350cc83fa8d
Validity
Not Before: Jun 13 04:00:13 2026 GMT
Not After : Jun 14 04:00:13 2026 GMT
Subject: CN=cf3876e60922617fd5057408e59fe98ac28f3dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5f:07:9c:b2:d0:1b:cd:44:7a:64:82:16:17:
3d:61:09:07:9a:39:88:e3:16:09:a1:b5:9c:7f:87:
fa:85:87:0c:ea:17:57:7d:72:ba:78:47:73:2c:5c:
4b:f8:6b:26:d6:8b:d6:f5:2b:55:08:b6:2f:0f:f8:
2f:e3:a4:f0:36:14:96:91:85:0e:85:bd:17:6c:de:
2f:33:8c:50:3e:b2:ba:91:6e:ae:48:1d:67:84:f2:
0c:6f:96:5a:66:10:e4:62:85:8e:00:f6:eb:41:a7:
25:a0:b3:ff:e9:bf:32:f0:e6:a2:1d:6b:d9:5e:a6:
8b:5f:07:57:96:7e:66:b9:e9:d6:f3:5a:8b:88:16:
83:cf:bc:f7:fc:5d:51:d4:49:48:e2:d7:0e:7a:4d:
76:6f:4c:8d:4a:e8:df:23:db:db:c7:f7:6b:09:e9:
fc:48:30:6c:0f:c0:d4:e2:b8:04:70:a5:69:43:0c:
fd:e3:7d:ac:fd:83:58:34:46:6b:ce:05:32:74:75:
a7:c2:60:e6:4b:c5:e8:7c:ef:b5:29:c9:f6:d8:b8:
af:5c:a9:73:ab:61:82:bf:e0:b6:78:f0:bb:1c:45:
37:fa:41:ec:48:6c:7c:19:9b:fb:53:0b:72:ad:17:
82:92:27:cc:a2:f2:ec:05:1d:88:8e:ae:87:cc:61:
1c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:38:76:E6:09:22:61:7F:D5:05:74:08:E5:9F:E9:8A:C2:8F:3D:C7
X509v3 Authority Key Identifier:
keyid:10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:8a:d7:65:41:6e:24:54:40:f7:18:f4:0e:f0:3c:a3:c1:f7:
74:81:3e:d1:e5:10:96:a3:d4:f6:c6:70:5d:c8:42:59:4b:d7:
9d:81:ce:0b:3f:ea:d4:f0:f7:43:67:1e:98:70:65:13:e3:ee:
0d:20:57:50:3f:21:8a:40:c7:79:ba:32:19:78:97:8c:43:2e:
9c:b3:44:57:0d:87:47:c8:ca:88:2f:b6:b2:7d:b6:4a:1d:c8:
ff:bc:27:43:fe:e2:9c:41:5a:9b:3f:38:d4:3d:52:89:f6:8d:
7f:49:aa:bf:18:55:96:f1:2b:b1:f3:25:bd:d5:5f:b1:e9:86:
fb:18:aa:e5:29:7e:a7:3e:d5:7b:4c:10:89:10:fd:74:cd:c1:
53:1a:e6:09:18:a7:78:5b:c6:a4:4b:66:0d:82:42:78:d9:ef:
dd:85:0d:eb:a5:54:c1:c2:7b:1d:6d:a6:e6:d5:6e:2d:7b:0c:
2b:85:f7:fe:52:37:4d:a9:6f:fc:d7:fe:99:6a:51:82:d1:3a:
c8:18:27:fe:b7:be:72:29:af:79:b0:89:41:a0:72:bc:b0:72:
55:5b:01:63:d7:80:ad:59:47:0d:44:2b:3e:bc:c8:ae:81:70:
1b:cd:41:83:08:da:56:97:aa:33:49:f1:0a:a3:af:8f:7b:43:
cb:cc:36:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:36:54 2026 by rpki-client