Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
File: EImgJR4yvzxID1qUq7X7TrkGpbM.mft (raw, json)
Hash identifier: jp0AS/yRmqQIMWvsjiBJBI6aIOiiUrxgF3TD8wIU38g=
Subject key identifier: 41:E8:AE:0D:D8:91:C1:DD:1F:70:7D:20:AA:2F:B9:E1:66:72:36:85
Authority key identifier: 10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
Certificate issuer: /CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Certificate serial: 019FAAF6276466D4C93F7A70BCE3CAB791B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
Manifest number: 192B
Signing time: Tue 28 Jul 2026 23:01:26 +0000
Manifest this update: Tue 28 Jul 2026 23:01:26 +0000
Manifest next update: Wed 29 Jul 2026 23:01:26 +0000
Files and hashes: 1: EImgJR4yvzxID1qUq7X7TrkGpbM.crl (hash: EiQ3/paHr38QWuhDPNc+kCAt2q8Kh4sRhI8WRSsXWK0=)
2: lJ6MK4EWxS2iDNPG8gtC0QXW6QY.roa (hash: gfFr5x9q2uzGjatgMbItLXzkpsrcI9SLgHSTPYcd2mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:27:64:66:d4:c9:3f:7a:70:bc:e3:ca:b7:91:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Validity
Not Before: Jul 28 23:01:26 2026 GMT
Not After : Jul 29 23:01:26 2026 GMT
Subject: CN=41e8ae0dd891c1dd1f707d20aa2fb9e166723685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c3:21:18:65:50:23:ed:c9:e4:2c:a1:8d:3d:
f3:bc:de:7f:81:c4:5e:ed:82:70:23:64:47:58:4d:
18:19:85:57:50:bd:b4:b7:d4:9d:70:95:4c:20:23:
a9:0e:e2:aa:89:c7:1f:81:8b:b2:64:db:de:90:fc:
08:14:7d:f6:37:47:08:9d:0c:16:55:97:b7:0e:b3:
b2:df:57:87:1f:df:9a:2b:96:10:fb:09:95:43:f9:
79:52:91:a5:38:10:48:18:23:4e:e2:28:03:b4:49:
2b:a5:3e:c6:9d:46:c2:e0:de:b7:f3:f5:67:d3:a3:
ef:3e:e9:66:25:60:0c:08:74:63:01:3b:12:3c:b6:
75:c0:4c:bc:51:0a:c9:0c:4e:a5:22:2d:75:48:1f:
71:03:c9:80:a8:a4:5a:f2:3c:62:07:6c:46:b3:fe:
fb:04:08:0d:e4:50:c3:69:ac:b8:39:da:53:f4:7f:
6a:4e:29:d9:90:da:e0:ae:3c:c2:cb:d8:11:24:8a:
bd:b9:3d:0c:93:46:71:1c:95:f9:84:3a:77:79:83:
b8:68:a6:8d:5d:8f:ca:13:6e:11:67:27:3c:be:f2:
1a:c1:e1:23:6d:d8:07:3c:28:b4:0d:41:77:e4:89:
91:1e:f2:59:d6:d6:eb:ea:de:84:26:92:1b:c7:80:
60:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E8:AE:0D:D8:91:C1:DD:1F:70:7D:20:AA:2F:B9:E1:66:72:36:85
X509v3 Authority Key Identifier:
keyid:10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:91:ed:9b:e3:8c:e0:e6:10:2d:6a:ad:72:a2:41:ea:08:1d:
71:3b:08:7d:9e:b5:e0:61:eb:1f:88:0b:11:e2:01:56:47:30:
08:5b:f2:52:7b:57:b1:3d:9e:af:c1:64:4f:49:a4:17:30:5c:
74:13:ae:97:99:af:c0:8a:00:ce:eb:a6:b7:9d:ba:b9:02:66:
cd:47:7f:ae:d0:6b:80:5a:a1:d5:3f:16:d8:d4:5c:29:92:b2:
89:33:ff:95:c0:c2:d4:d6:9a:b4:da:b4:44:90:ba:ae:7e:21:
4b:45:b5:e9:89:45:db:63:ac:28:10:21:c2:98:28:61:5e:22:
c2:4b:05:79:b2:3a:3b:69:27:fe:54:00:8c:15:7a:f7:b6:24:
ec:ef:9a:5d:8d:cb:56:00:e0:63:00:52:08:24:8b:d3:10:16:
c5:51:c3:7c:34:50:c6:da:44:d0:62:8c:57:b2:ce:32:24:8a:
7d:24:28:46:cf:65:75:b2:cd:78:18:9f:8c:12:70:d9:26:86:
ef:c3:5a:82:cb:1a:a8:74:3c:0e:01:85:d7:84:2a:33:20:69:
22:16:06:78:ad:bf:44:c4:4e:63:a5:96:e0:e1:8d:92:8b:08:
e3:49:3f:75:5c:26:d9:14:89:1c:1b:2b:58:db:e0:73:61:53:
28:b8:57:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:58:23 2026 by rpki-client