Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
File: kERLB53wCKfHy-KPy6Xb4GIOjhc.mft (raw, json)
Hash identifier: En7Xs4mkwEQf+LHWgDibAmUUn8Di9UZkx4G5ZbkFfWs=
Subject key identifier: 23:46:50:1E:79:DE:AC:C9:9E:AA:25:BB:CB:A5:34:AE:9A:76:AF:E0
Authority key identifier: 90:44:4B:07:9D:F0:08:A7:C7:CB:E2:8F:CB:A5:DB:E0:62:0E:8E:17
Certificate issuer: /CN=90444b079df008a7c7cbe28fcba5dbe0620e8e17
Certificate serial: 019D29CECC354ED834D874EF0ADA5D077034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
Manifest number: 16FB
Signing time: Thu 26 Mar 2026 11:01:51 +0000
Manifest this update: Thu 26 Mar 2026 11:01:51 +0000
Manifest next update: Fri 27 Mar 2026 11:01:51 +0000
Files and hashes: 1: kERLB53wCKfHy-KPy6Xb4GIOjhc.crl (hash: KdVOIUTM8AAXF2gjpP1jXr/59ZiHIU7E/2nDaCuL2eo=)
2: qh7XZDst8WsBCGjKLPzTSR00_9w.roa (hash: 91hvylgfnm1S7Q889lgwTcLMuKxZDx/xX3dO/XE0rko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:cc:35:4e:d8:34:d8:74:ef:0a:da:5d:07:70:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90444b079df008a7c7cbe28fcba5dbe0620e8e17
Validity
Not Before: Mar 26 11:01:51 2026 GMT
Not After : Mar 27 11:01:51 2026 GMT
Subject: CN=2346501e79deacc99eaa25bbcba534ae9a76afe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:81:56:6a:65:ab:08:fc:67:ca:7a:08:e5:
2d:4a:e8:e8:d5:6a:da:db:70:e5:fa:cf:d3:bf:99:
a1:15:15:25:a9:3c:3c:a0:35:41:4c:f9:9c:4b:87:
4a:37:4c:98:c2:f0:d4:27:41:a0:97:c7:ae:6c:02:
20:54:c5:7b:61:9b:37:14:ab:ea:4a:15:63:b7:8c:
d3:51:01:d7:62:f7:b0:e4:5e:0c:fc:50:aa:40:ec:
a5:be:86:82:69:fa:93:2e:c5:47:f6:63:fd:fb:01:
57:f9:ce:41:8e:7a:e4:8d:cc:db:5e:3b:c3:84:12:
9c:79:6b:bb:9e:15:56:ba:b8:14:61:49:7d:48:38:
c3:e4:f2:22:f4:7b:12:94:74:8b:2f:b4:ad:7a:a2:
16:6d:be:62:32:7b:0b:11:25:14:a4:be:47:b3:2a:
72:00:3c:e7:e9:70:8e:f9:20:af:7b:b4:d3:8e:a6:
e8:b1:e3:24:9d:a3:87:d6:dd:25:35:b6:4c:ff:a2:
82:46:e9:58:5e:cb:46:0c:9b:2e:19:7d:c4:64:4f:
03:4f:5a:7b:e3:f4:9a:ed:0d:09:b0:a5:55:07:64:
91:82:56:52:94:b4:d6:65:1b:7a:f7:d2:41:99:e4:
17:98:bb:84:58:de:ad:80:d2:00:46:a4:d6:91:9f:
e5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:46:50:1E:79:DE:AC:C9:9E:AA:25:BB:CB:A5:34:AE:9A:76:AF:E0
X509v3 Authority Key Identifier:
keyid:90:44:4B:07:9D:F0:08:A7:C7:CB:E2:8F:CB:A5:DB:E0:62:0E:8E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:30:d0:d8:15:db:7f:2b:2c:ab:88:53:1a:e8:b4:c0:ad:7a:
32:e4:84:ff:95:2b:11:aa:e7:28:f2:dc:73:30:7f:25:b8:36:
70:c3:13:5b:ef:c6:79:6a:c5:b6:b2:b0:7f:6e:6f:01:32:42:
b9:10:46:63:fa:e9:3b:43:fe:89:93:8b:bf:d0:29:e8:7e:9e:
7b:55:32:91:f9:62:c7:09:47:13:ed:bf:ed:8f:b3:cf:53:5b:
23:04:7c:f9:7f:40:4d:e3:95:3e:4c:f4:a8:3c:b3:81:01:0b:
84:24:24:c2:ab:6d:26:aa:7e:8f:85:4d:bb:57:73:64:a5:23:
d3:eb:cc:76:c6:ce:49:23:2a:3a:59:e4:cb:61:1f:2c:f3:5e:
64:11:20:42:66:47:5d:b7:8e:1c:bb:c4:d9:ce:fa:ad:da:45:
66:c1:e8:9e:52:da:24:13:87:04:73:98:1f:29:1a:96:bd:c2:
dc:23:90:dd:78:1c:bd:39:83:bb:f6:5e:54:2a:1f:46:27:6c:
26:bc:01:63:92:27:69:da:af:2a:b3:17:f7:2a:10:6f:94:3b:
f4:e8:22:b9:e4:9e:03:e6:c6:fc:02:c4:d1:ce:2a:c5:33:8f:
a0:12:93:1b:0f:c0:b2:b0:21:12:39:4b:63:33:f2:c2:18:f1:
2f:62:7b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:15:22 2026 by rpki-client