Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
File: EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft (raw, json)
Hash identifier: 4+R3ASdjTMXO7gsb0s+HiM5tPGL13XW++yFftTWWz9c=
Subject key identifier: 77:21:1D:98:DA:B1:39:C2:26:1C:34:45:FC:01:5E:1E:A4:17:B4:24
Authority key identifier: 10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D
Certificate issuer: /CN=10930d0049ba87004ccc9e5be526c350cc83fa8d
Certificate serial: 01A0C6A0AAA92ED6701B3A25F4CFDD2015F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
Manifest number: 1A62
Signing time: Tue 22 Sep 2026 01:00:13 +0000
Manifest this update: Tue 22 Sep 2026 01:00:13 +0000
Manifest next update: Wed 23 Sep 2026 01:00:13 +0000
Files and hashes: 1: EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl (hash: UyLP+O4vRblWQQsz7WCrEW+nNwzvf4dtbGeJ0rAzrTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 01:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a0:aa:a9:2e:d6:70:1b:3a:25:f4:cf:dd:20:15:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10930d0049ba87004ccc9e5be526c350cc83fa8d
Validity
Not Before: Sep 22 01:00:13 2026 GMT
Not After : Sep 23 01:00:13 2026 GMT
Subject: CN=77211d98dab139c2261c3445fc015e1ea417b424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f2:0f:70:68:4e:63:8b:a6:64:74:86:a2:5e:
6d:f2:89:ad:35:df:72:8b:69:23:02:bd:1a:3d:55:
3a:08:49:44:f0:07:48:82:6b:d7:15:6a:c8:85:99:
82:d4:20:02:a7:3f:3d:c0:f9:ab:73:24:a7:45:d0:
f8:67:88:a8:16:e1:82:1e:05:f2:a5:b2:af:9c:02:
2e:76:e1:2a:44:49:c2:53:4f:e0:43:e8:62:36:e6:
00:f2:e7:5c:d2:41:f0:d2:4c:eb:be:99:e0:8d:ec:
2e:06:82:0f:e5:7b:56:8e:a2:74:05:1e:2f:4e:65:
33:5d:ad:df:1d:8c:8d:cd:41:85:f5:18:2b:f0:1a:
a9:91:fb:ab:93:d8:8e:de:d5:04:6c:64:6c:89:91:
bb:b0:46:5b:15:62:a2:f2:15:5b:f8:eb:8a:3b:66:
fc:50:6f:1a:1b:0f:f8:e4:f0:86:ab:70:13:12:82:
a7:02:6b:2b:b3:75:c7:8c:bd:68:2a:c2:5a:28:b9:
15:e8:25:25:25:0f:58:df:19:e2:06:8a:5e:8b:a1:
4b:af:b6:16:a7:c7:b7:11:7d:c8:e0:16:c9:62:21:
ca:a4:a9:46:a1:d1:26:85:7c:ee:f5:f7:da:21:40:
c3:65:ee:50:a1:ab:68:13:68:94:2f:1d:6a:86:cd:
e1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:21:1D:98:DA:B1:39:C2:26:1C:34:45:FC:01:5E:1E:A4:17:B4:24
X509v3 Authority Key Identifier:
keyid:10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a2:82:2d:4e:8b:bf:b8:4f:22:7c:3d:7e:1e:ee:7f:e1:e8:
55:45:61:fa:ae:b7:8b:11:5c:ac:0e:61:c6:22:5a:1e:0d:cf:
c0:e1:63:d2:de:7f:48:cb:12:84:37:6e:d8:2c:fe:b2:b9:96:
56:5a:6e:1c:79:b1:9e:ed:c6:7e:c3:da:9e:47:9a:1a:75:81:
f9:cd:db:39:1a:67:72:0d:f4:fe:d0:f2:25:b3:d5:d1:58:b5:
ae:9f:ec:49:72:ce:70:f3:42:8a:54:f7:2d:b9:9f:24:8b:a1:
73:3e:f5:69:d2:c4:1e:08:03:c4:2a:fa:c6:bd:5e:e4:86:03:
5c:fa:61:25:ee:11:91:8d:aa:81:24:f6:af:c5:6f:eb:e2:22:
df:64:e0:6c:4d:e7:7f:79:bf:9e:ec:2a:46:1f:2e:df:17:2b:
8f:e6:44:2d:1b:7a:3e:05:1e:dc:b2:65:83:64:9e:ce:d2:3b:
63:15:db:15:48:40:49:90:f7:27:63:71:b6:9f:95:71:cc:12:
d6:21:65:0e:d7:d7:2a:01:dc:24:bc:52:70:4b:83:b7:2b:03:
d1:ef:ae:36:59:45:94:32:17:65:41:12:87:88:e1:d1:f5:28:
b9:a8:cf:b5:c1:3e:d4:e6:c9:6f:48:45:2d:7e:44:c6:d2:ba:
b0:6b:98:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:22:50 2026 by rpki-client