Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
File: kERLB53wCKfHy-KPy6Xb4GIOjhc.mft (raw, json)
Hash identifier: fU0mdouxQgFzLpYj0xNHhBveLO0DkKt77nem8jaCbw8=
Subject key identifier: E8:DB:F2:EB:78:3B:C1:51:C0:8B:78:D4:CB:5A:3E:25:93:81:0B:23
Authority key identifier: 90:44:4B:07:9D:F0:08:A7:C7:CB:E2:8F:CB:A5:DB:E0:62:0E:8E:17
Certificate issuer: /CN=90444b079df008a7c7cbe28fcba5dbe0620e8e17
Certificate serial: 01A104A4F0373A5B707D78D0B933AB282C05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
Manifest number: 18FA
Signing time: Sun 04 Oct 2026 02:01:20 +0000
Manifest this update: Sun 04 Oct 2026 02:01:20 +0000
Manifest next update: Mon 05 Oct 2026 02:01:20 +0000
Files and hashes: 1: kERLB53wCKfHy-KPy6Xb4GIOjhc.crl (hash: /JjBNYiS4IvF2NIYZ8YuJ01xRPhzMRSmRmNMeKRjSqU=)
2: qh7XZDst8WsBCGjKLPzTSR00_9w.roa (hash: 91hvylgfnm1S7Q889lgwTcLMuKxZDx/xX3dO/XE0rko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:a4:f0:37:3a:5b:70:7d:78:d0:b9:33:ab:28:2c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90444b079df008a7c7cbe28fcba5dbe0620e8e17
Validity
Not Before: Oct 4 02:01:20 2026 GMT
Not After : Oct 5 02:01:20 2026 GMT
Subject: CN=e8dbf2eb783bc151c08b78d4cb5a3e2593810b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:90:51:d2:b5:b5:3b:0b:f1:50:40:0c:fe:
a4:21:10:b6:94:a2:17:21:0e:9b:c6:0b:26:c1:78:
a4:be:ff:90:25:55:d9:5d:a5:ac:62:b3:3f:bc:fa:
34:33:b1:52:be:dc:4f:54:74:de:8d:1c:4e:cd:f5:
71:03:b7:83:3f:d5:bb:9f:41:88:1f:34:83:68:87:
76:68:0c:33:27:70:3e:3e:09:db:a5:d1:51:20:58:
e6:ec:59:d6:f1:a1:87:37:09:db:61:55:df:8a:6c:
7f:72:14:07:b4:0f:45:45:62:4f:25:fb:34:d7:d8:
70:5a:dc:6d:f1:0b:3c:e6:13:aa:ed:22:8d:21:0d:
e1:69:ab:6f:9d:d3:2a:e9:27:8d:47:3f:7a:2b:d5:
eb:e0:12:1e:3e:7f:7b:60:b4:5b:5b:68:f8:58:98:
38:0b:9c:81:59:3c:1c:db:23:b1:73:93:99:db:2e:
b3:1e:1b:fb:31:96:5e:41:ec:8f:e4:07:01:7c:66:
d3:f6:92:ae:9a:be:88:b6:9b:0f:2a:8e:a1:e3:3e:
44:7e:cb:d0:d8:3c:68:06:ed:af:64:b8:ae:30:e5:
4f:e4:a1:30:74:23:50:bb:13:7f:b9:c3:00:48:2a:
86:c5:f5:b3:a6:62:9b:4b:32:e1:00:a9:e9:5e:a4:
18:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DB:F2:EB:78:3B:C1:51:C0:8B:78:D4:CB:5A:3E:25:93:81:0B:23
X509v3 Authority Key Identifier:
keyid:90:44:4B:07:9D:F0:08:A7:C7:CB:E2:8F:CB:A5:DB:E0:62:0E:8E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:c3:8a:28:31:22:ba:97:8d:8d:8e:b1:06:21:7f:99:fd:b6:
cf:99:3c:f7:fa:e6:50:c3:33:be:ca:d9:bd:39:82:f1:c5:d2:
86:a9:23:32:f3:00:a5:3c:04:17:36:d9:9a:99:73:ba:9a:18:
a8:de:49:31:68:d9:c7:9e:4b:79:13:91:a2:8b:a4:67:06:d6:
b1:af:27:e7:f1:c4:fb:cb:cd:2b:ab:20:f6:c6:4e:08:b1:dc:
05:c6:c1:c0:2b:73:17:8f:95:b6:34:b9:34:d9:69:08:8f:c7:
55:4e:b0:56:d9:fc:21:04:a4:40:3d:75:10:70:a0:ec:e8:a7:
a2:51:bf:dc:2d:d9:3e:03:e6:ae:c8:cf:5e:bd:66:8b:1a:5c:
c7:71:0f:b5:1e:c8:88:69:01:5b:55:6a:24:3b:3d:c0:7e:d3:
6b:d0:0d:97:29:4e:41:3c:4d:6d:9d:6b:3a:ae:91:e4:47:9f:
f0:9a:74:33:20:0f:df:29:7c:3b:40:8f:ce:df:24:cd:5c:92:
2d:6b:39:77:9b:8a:6f:b6:6e:82:e7:b1:b0:0d:31:fe:33:15:
13:08:52:2b:53:6b:24:fa:a2:ec:41:07:48:84:87:c4:a3:f4:
db:64:7f:f3:58:2b:00:53:14:7a:09:3c:7d:df:84:d9:17:4d:
38:ba:91:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 09:37:58 2026 by rpki-client