Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
File: kERLB53wCKfHy-KPy6Xb4GIOjhc.mft (raw, json)
Hash identifier: i05e13gC5BSKB6Ylj38mQChOvBbpjhLWog7NV8CSzAg=
Subject key identifier: B1:92:DA:BF:36:9F:7D:1F:2D:53:60:17:2A:68:D9:F8:92:AC:A7:AB
Authority key identifier: 90:44:4B:07:9D:F0:08:A7:C7:CB:E2:8F:CB:A5:DB:E0:62:0E:8E:17
Certificate issuer: /CN=90444b079df008a7c7cbe28fcba5dbe0620e8e17
Certificate serial: 019F91DA4B260EC66C63A35AD192FC1D6520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
Manifest number: 183A
Signing time: Fri 24 Jul 2026 02:00:29 +0000
Manifest this update: Fri 24 Jul 2026 02:00:29 +0000
Manifest next update: Sat 25 Jul 2026 02:00:29 +0000
Files and hashes: 1: kERLB53wCKfHy-KPy6Xb4GIOjhc.crl (hash: q3ayDcD3va7KLeL+3dhaUPvK5KTJ5o48KlT53jYO2FU=)
2: qh7XZDst8WsBCGjKLPzTSR00_9w.roa (hash: 91hvylgfnm1S7Q889lgwTcLMuKxZDx/xX3dO/XE0rko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:4b:26:0e:c6:6c:63:a3:5a:d1:92:fc:1d:65:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90444b079df008a7c7cbe28fcba5dbe0620e8e17
Validity
Not Before: Jul 24 02:00:29 2026 GMT
Not After : Jul 25 02:00:29 2026 GMT
Subject: CN=b192dabf369f7d1f2d5360172a68d9f892aca7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:53:bf:e8:da:af:c9:61:cf:b3:c7:c8:3e:
56:f0:d0:ed:47:ba:85:64:d2:a4:95:8b:e0:8d:73:
74:17:f3:a6:4c:7d:92:d8:ab:8a:cc:3b:ab:47:6e:
91:56:0e:8b:c8:d2:b4:5e:bc:1c:75:5e:4f:22:8d:
b8:75:19:e7:80:90:2b:06:0a:d9:1b:0f:cc:42:79:
27:b8:56:35:97:6c:5f:93:64:8b:86:a5:09:ed:c4:
8f:b7:ab:78:30:6b:09:bb:04:18:58:72:19:c0:89:
07:3e:56:d2:06:83:ec:a0:bf:46:56:67:a2:99:24:
a5:6e:56:04:c6:f4:63:bb:1b:6a:dc:bb:01:5c:7e:
31:bc:de:74:71:6e:a3:c1:2d:d9:01:cd:d9:a4:dd:
8b:4c:fe:75:87:c9:9e:d6:c1:65:04:e5:f6:c5:5b:
99:3d:c6:51:a9:e7:5a:e1:1a:dc:85:1d:16:2c:7b:
70:50:82:84:df:08:f7:c0:a2:e3:f3:d9:05:85:5c:
9f:07:d8:f6:c0:73:28:28:d5:41:01:85:6a:af:04:
91:c4:2b:3f:6e:42:5b:df:13:4b:dc:c9:76:e9:38:
3a:75:f1:36:ad:49:39:3a:28:ca:23:e1:d9:95:fc:
93:a6:55:85:9d:89:92:4a:29:6b:3b:e1:a3:5a:71:
86:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:92:DA:BF:36:9F:7D:1F:2D:53:60:17:2A:68:D9:F8:92:AC:A7:AB
X509v3 Authority Key Identifier:
keyid:90:44:4B:07:9D:F0:08:A7:C7:CB:E2:8F:CB:A5:DB:E0:62:0E:8E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:51:66:4c:a1:27:09:5e:74:b3:d1:47:81:aa:50:ea:29:c5:
d0:6e:43:74:eb:d9:4a:2f:f3:d3:4e:4f:ec:14:c6:63:71:01:
2e:ee:e4:dd:68:f1:d9:5d:6c:17:dd:e3:ac:12:66:ae:02:0f:
4a:af:c4:b5:a9:7e:a1:21:80:8e:62:d0:a0:d3:16:66:25:83:
2d:f7:d1:48:e2:7f:7f:17:19:82:d3:39:c4:dd:db:bd:13:1e:
4e:2d:05:0a:f0:13:72:a7:7e:a0:0f:7c:2a:71:72:72:fa:b5:
bb:b0:7b:9f:f2:21:66:2e:a0:06:d5:1a:8b:d0:20:47:1f:91:
dd:9b:24:f5:dd:9b:37:87:36:e3:c8:a6:5e:f6:ef:e6:3d:55:
14:89:69:2b:40:57:b7:de:6d:09:bf:98:c5:04:4c:84:ec:96:
f3:c4:a1:ec:1c:11:3e:44:b1:e0:88:c1:74:c0:f3:64:27:2b:
e3:8d:90:3a:0c:b0:2e:3b:20:45:35:63:f4:0d:aa:c8:63:be:
72:3a:70:d9:fb:93:49:23:89:18:97:2e:dc:7b:6b:e1:6b:68:
ff:0a:90:6d:a5:fe:66:c6:99:5d:e0:2b:85:5a:88:cb:3d:08:
5e:6b:a6:cc:94:71:7c:12:ee:98:7f:1d:62:7e:8a:ac:93:eb:
fe:b2:4a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:14:07 2026 by rpki-client