Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
File: kERLB53wCKfHy-KPy6Xb4GIOjhc.mft (raw, json)
Hash identifier: VdJqQXdfwT+JIVamC7caZ6zu6z57rUyjyuHmVDhlsF4=
Subject key identifier: 39:D5:2C:2F:BF:71:CB:62:10:58:8E:95:CC:61:77:3F:55:CE:19:89
Authority key identifier: 90:44:4B:07:9D:F0:08:A7:C7:CB:E2:8F:CB:A5:DB:E0:62:0E:8E:17
Certificate issuer: /CN=90444b079df008a7c7cbe28fcba5dbe0620e8e17
Certificate serial: 019E1F11240F1D1877C9E7557C9119B59C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
Manifest number: 177A
Signing time: Wed 13 May 2026 02:01:17 +0000
Manifest this update: Wed 13 May 2026 02:01:17 +0000
Manifest next update: Thu 14 May 2026 02:01:17 +0000
Files and hashes: 1: kERLB53wCKfHy-KPy6Xb4GIOjhc.crl (hash: xdcCNm5vTQo84SyYmkwZ3j4wQF5zaZp81GT4KjUUWF4=)
2: qh7XZDst8WsBCGjKLPzTSR00_9w.roa (hash: 91hvylgfnm1S7Q889lgwTcLMuKxZDx/xX3dO/XE0rko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:24:0f:1d:18:77:c9:e7:55:7c:91:19:b5:9c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90444b079df008a7c7cbe28fcba5dbe0620e8e17
Validity
Not Before: May 13 02:01:17 2026 GMT
Not After : May 14 02:01:17 2026 GMT
Subject: CN=39d52c2fbf71cb6210588e95cc61773f55ce1989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:98:8d:56:ed:a0:5d:a9:ff:8d:86:2b:05:7b:
a4:45:85:18:cf:52:a0:58:91:af:c1:4d:0b:36:c3:
1f:24:49:58:69:f4:67:99:3c:45:ad:db:b8:d7:ba:
c0:73:b2:31:db:42:36:e5:34:d3:8f:03:84:41:7f:
36:dc:59:ca:ba:4d:e6:2c:d1:a1:1c:fb:73:83:b6:
31:d0:ac:a6:3e:bc:27:68:1e:03:be:43:32:a4:fc:
39:35:d3:13:d8:d9:7f:30:2b:d5:42:ae:38:5b:12:
c4:b4:8a:8f:c8:12:86:e6:e4:a9:7b:92:e6:8a:32:
c0:87:b1:e8:c4:bc:53:04:8a:db:de:86:af:d9:dc:
ce:08:b6:b9:3d:23:72:41:8e:e6:90:eb:3f:31:37:
87:94:88:cb:fa:6d:7f:f2:a6:42:e1:90:a3:81:04:
74:4b:1b:59:80:1f:ca:b2:56:24:99:7a:ad:d6:14:
92:0d:f9:74:b9:c1:f0:f9:ad:c0:c1:6e:05:35:15:
4a:9b:ea:b2:94:11:18:66:e0:43:3b:ec:c2:9d:00:
18:fe:6d:c3:f6:09:e3:67:2c:ee:d4:c7:4d:c1:8b:
c6:7d:45:c7:4f:e8:8a:4c:ba:ad:8f:c3:fc:a4:88:
c7:e2:65:e6:b0:a1:05:94:d7:71:a1:95:b9:20:de:
35:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D5:2C:2F:BF:71:CB:62:10:58:8E:95:CC:61:77:3F:55:CE:19:89
X509v3 Authority Key Identifier:
keyid:90:44:4B:07:9D:F0:08:A7:C7:CB:E2:8F:CB:A5:DB:E0:62:0E:8E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:1a:e2:b0:3e:a3:67:f5:ec:40:2f:2b:f3:64:6b:b5:ed:db:
b0:55:eb:37:fd:ad:5a:20:76:41:c5:e3:7c:15:63:c4:b8:02:
fe:78:11:94:08:1a:09:d7:4d:b7:c7:f9:38:70:b5:74:50:cc:
8c:b2:6b:e8:54:77:6d:6a:e6:b6:40:0c:4a:96:22:0b:0c:23:
65:08:d8:f4:90:47:7b:05:29:ef:45:b4:8a:10:f3:91:6c:12:
27:75:60:e6:88:73:dc:66:17:75:f0:81:6c:71:05:02:2d:fd:
23:ae:d1:e4:e5:d9:81:01:27:07:47:5d:c5:20:b6:41:0d:ce:
94:e9:11:7b:13:ea:68:ad:1f:b8:70:35:9c:4a:f1:e4:1c:46:
fa:9f:84:2a:58:53:13:07:4c:48:36:ae:ee:3b:29:36:d8:b1:
20:7e:6b:0f:95:25:98:1a:bc:27:40:ba:06:88:98:67:14:f0:
93:15:d3:6a:e2:25:98:36:5f:29:c7:8e:30:d5:20:60:d4:fb:
de:80:ed:d8:36:20:80:5f:bf:e9:e7:87:f7:49:88:09:52:37:
7c:7c:20:00:bc:0c:58:56:83:0f:82:bf:64:64:b2:79:3d:ab:
d3:d9:d0:b3:cd:2f:ea:83:81:7f:4d:03:64:22:6f:25:3c:f4:
8d:98:99:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:17:14 2026 by rpki-client