Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
File: EImgJR4yvzxID1qUq7X7TrkGpbM.mft (raw, json)
Hash identifier: y7KmwzFYHPSndzK/XFaTUju73bhgb+aQaOhRCSxFIN8=
Subject key identifier: 29:9D:38:39:38:D2:EA:A9:51:90:00:50:97:A3:BD:E7:8B:53:3A:27
Authority key identifier: 10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
Certificate issuer: /CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Certificate serial: 01A0DA2814C98ABF2DE4CD6D27D020EFF92E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
Manifest number: 19C8
Signing time: Fri 25 Sep 2026 20:00:54 +0000
Manifest this update: Fri 25 Sep 2026 20:00:54 +0000
Manifest next update: Sat 26 Sep 2026 20:00:54 +0000
Files and hashes: 1: EImgJR4yvzxID1qUq7X7TrkGpbM.crl (hash: zf9pxTkuv71bxcZQ7XrAkoQ05ZM5rfysWzJAIV6ETdE=)
2: lJ6MK4EWxS2iDNPG8gtC0QXW6QY.roa (hash: gfFr5x9q2uzGjatgMbItLXzkpsrcI9SLgHSTPYcd2mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:14:c9:8a:bf:2d:e4:cd:6d:27:d0:20:ef:f9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Validity
Not Before: Sep 25 20:00:54 2026 GMT
Not After : Sep 26 20:00:54 2026 GMT
Subject: CN=299d383938d2eaa95190005097a3bde78b533a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:31:64:80:98:0b:35:ac:8c:7c:d1:ec:8d:e6:
0d:95:e3:d6:29:f3:77:e3:46:93:94:1d:73:f5:1a:
8c:b1:c1:5a:9f:de:14:42:94:d6:a2:fd:4c:de:70:
80:c7:8a:88:cf:ff:fa:a4:56:f5:32:f6:fe:9a:ab:
fc:44:9b:ec:e4:f3:37:c5:2f:6f:d2:6d:94:b6:c6:
ed:77:67:ef:58:44:ef:de:1a:ab:a6:26:16:1a:fc:
73:7e:eb:04:11:d5:de:d0:73:21:56:f8:7c:d1:42:
18:cd:e8:fe:21:20:12:e9:e2:3c:63:e1:24:74:4f:
2b:bc:f3:aa:28:cb:4d:26:57:c6:b0:e8:a2:f2:40:
6f:1b:ae:5d:92:b2:2b:16:d1:73:26:2d:dc:79:fe:
20:64:8c:32:61:fd:ad:6a:ed:cd:dd:b5:30:e3:c1:
45:55:d7:a2:00:ac:73:a0:f5:3d:ce:50:e5:91:cf:
6d:a6:43:98:51:c4:e7:c6:be:61:85:e5:30:b0:2e:
81:6b:d6:98:5a:5a:7c:ab:0c:ae:cb:15:95:ca:db:
ab:35:06:65:7f:0c:67:68:75:2a:fe:ca:a9:a1:10:
42:0d:17:65:57:9c:6c:f6:84:4f:31:64:43:33:a5:
bf:64:43:87:68:b9:42:33:06:aa:28:6e:60:d0:ac:
a9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9D:38:39:38:D2:EA:A9:51:90:00:50:97:A3:BD:E7:8B:53:3A:27
X509v3 Authority Key Identifier:
keyid:10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:02:f8:60:2d:6f:c8:e6:40:6d:49:66:f1:32:80:68:dd:61:
21:96:f6:97:14:1d:4d:6b:03:ad:e9:91:c7:14:7d:36:81:04:
20:19:8c:ca:2e:82:ac:a6:5c:8d:0f:ea:99:e0:b9:cb:e1:44:
98:ff:9e:07:59:cc:dc:4a:2a:dc:ce:a8:71:ae:f5:61:0e:e7:
0e:1f:b5:4f:6c:96:f2:f9:b4:57:22:f5:c1:8d:74:fe:ce:88:
c2:d6:b0:8b:dd:1e:7e:3f:ac:80:8b:d3:16:1b:ba:e5:44:7e:
9c:45:4c:44:20:a9:b7:6b:31:35:3d:40:79:fa:11:3c:14:ef:
f9:d1:e3:2a:b6:8f:c3:64:be:19:bf:94:ab:80:94:48:8e:07:
96:c7:82:77:b1:c1:13:cb:12:1b:5e:da:14:15:aa:99:3a:01:
66:4a:93:15:34:1c:a2:36:74:9a:8f:e7:68:b0:71:62:5a:d4:
20:f2:9b:4a:b8:f7:21:0d:ef:8a:a1:5b:f7:52:8a:93:6c:df:
42:36:31:82:72:c0:0f:72:cb:97:ee:4e:3e:be:a5:e4:5f:11:
17:28:26:e2:42:6e:88:15:e2:8f:7d:bf:a7:69:f4:4c:78:fa:
97:97:f4:bf:01:bc:50:43:f3:00:2d:52:03:e2:db:04:30:ae:
66:fc:9b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:52:05 2026 by rpki-client