Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
File: EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft (raw, json)
Hash identifier: QKiaMGj9108+0R1DowcVdQXqjuk227KYGNFRdAbq+kc=
Subject key identifier: EF:FA:B2:3A:FF:50:A7:F5:E4:A2:84:E0:6B:49:21:7A:9F:70:8F:7F
Authority key identifier: 10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D
Certificate issuer: /CN=10930d0049ba87004ccc9e5be526c350cc83fa8d
Certificate serial: 01A1DEA74415F2B9AE98BD7194A91D69CD3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
Manifest number: 1AF3
Signing time: Sun 15 Nov 2026 10:01:06 +0000
Manifest this update: Sun 15 Nov 2026 10:01:06 +0000
Manifest next update: Mon 16 Nov 2026 10:01:06 +0000
Files and hashes: 1: EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl (hash: XIreIeQGNP8KeKpL00H76RSvXUa9BM0JgcL7vvdDc28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:44:15:f2:b9:ae:98:bd:71:94:a9:1d:69:cd:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10930d0049ba87004ccc9e5be526c350cc83fa8d
Validity
Not Before: Nov 15 10:01:06 2026 GMT
Not After : Nov 16 10:01:06 2026 GMT
Subject: CN=effab23aff50a7f5e4a284e06b49217a9f708f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e1:0c:5b:ee:67:63:58:4f:21:af:71:70:ea:
b6:e0:b8:8d:54:82:70:7a:fe:48:48:ac:4d:61:64:
01:ba:96:35:c3:6e:fc:0c:31:27:68:95:f6:cc:5f:
3a:f1:74:b4:32:43:96:dc:3a:fa:93:96:a9:88:82:
5d:ae:a4:4c:85:90:f2:04:e5:7b:a8:b9:96:2e:67:
87:1f:03:34:5b:76:7e:06:a4:3d:86:b0:40:09:90:
66:88:aa:35:63:61:6f:19:38:76:7a:a0:9d:a5:81:
6e:7c:73:b3:00:e7:78:36:03:4b:54:4a:7f:92:69:
96:18:e2:77:1c:90:fc:dd:3c:60:92:c7:bd:20:08:
2d:e5:05:6b:72:4f:d9:68:39:27:f0:e1:22:46:df:
87:e5:9f:8d:cc:05:82:9b:f0:5a:72:3a:25:94:30:
2b:62:7f:ce:58:a5:c3:e2:99:88:6b:8f:d3:24:77:
36:3e:ca:cb:6d:2f:4d:ec:13:cc:07:bc:9a:c9:50:
61:a2:0c:59:c5:cf:45:8c:51:9a:7e:61:e9:58:48:
7a:80:a0:bc:9b:c9:06:fe:65:93:2f:1b:ec:72:17:
4a:b6:15:c9:3a:bc:ea:1c:80:f0:ab:03:6a:31:e3:
de:a1:8b:ea:00:fd:43:09:03:fd:38:a4:e6:51:52:
78:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FA:B2:3A:FF:50:A7:F5:E4:A2:84:E0:6B:49:21:7A:9F:70:8F:7F
X509v3 Authority Key Identifier:
keyid:10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:34:18:c3:ee:bd:15:d4:de:f7:c8:d3:0e:71:e0:93:cc:2c:
36:30:37:96:cc:68:1d:cd:04:29:4e:1c:7c:b5:ef:66:87:22:
b9:b9:65:92:35:8f:4a:af:22:72:80:d6:f8:aa:1d:6b:02:f2:
7e:01:02:c6:fb:9d:68:af:71:01:5c:39:66:6e:90:03:bc:d3:
e6:fa:68:72:af:90:d9:84:9a:03:3f:d6:24:4e:73:28:6b:fd:
b7:c9:da:54:a0:bd:37:7c:5c:9f:95:05:de:24:05:15:d8:70:
91:5c:5e:fd:32:c1:61:6e:9a:40:ed:77:b1:82:fa:d7:22:38:
0d:60:26:c1:55:f2:2c:fa:e7:09:2f:6b:e2:a9:b4:de:08:9b:
10:cf:57:ad:97:a2:4a:25:f1:fa:ad:0d:c2:bf:8f:85:93:bf:
3e:c9:7a:b0:69:f0:ab:91:fe:cc:13:75:75:f2:f8:a2:87:db:
69:de:88:a8:63:5d:0d:3a:65:b1:a0:e5:b6:26:36:51:42:05:
fd:e5:58:3f:bf:21:9d:39:f1:4f:e3:16:5c:fd:1b:16:0f:93:
90:c9:f4:1c:22:73:f2:be:ee:a6:25:4b:24:8d:00:2f:8b:78:
9e:80:c3:9d:0b:0b:f8:f1:c8:7a:21:e7:31:ec:d6:86:1e:18:
88:28:a2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:56:51 2026 by rpki-client