Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
File: eruW1HY31HxxYVtg2h9pHEpvC3A.mft (raw, json)
Hash identifier: 9kMXv3ZWR2XGnUa4VNevjQB/XyArhUclJ5VW6A7/U0k=
Subject key identifier: A8:7A:F7:B5:BE:F6:C6:62:5F:EF:6C:AE:5E:B1:97:C8:E6:79:9D:AC
Authority key identifier: 7A:BB:96:D4:76:37:D4:7C:71:61:5B:60:DA:1F:69:1C:4A:6F:0B:70
Certificate issuer: /CN=7abb96d47637d47c71615b60da1f691c4a6f0b70
Certificate serial: 019D28F29E41FD602BCE03869DE9233D8D69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
Manifest number: 0CD7
Signing time: Thu 26 Mar 2026 07:01:21 +0000
Manifest this update: Thu 26 Mar 2026 07:01:21 +0000
Manifest next update: Fri 27 Mar 2026 07:01:21 +0000
Files and hashes: 1: eruW1HY31HxxYVtg2h9pHEpvC3A.crl (hash: pkpRI3zZfawQuj6Ij+UJ4ZGDcoiua81ChHN2+03zNEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:9e:41:fd:60:2b:ce:03:86:9d:e9:23:3d:8d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abb96d47637d47c71615b60da1f691c4a6f0b70
Validity
Not Before: Mar 26 07:01:21 2026 GMT
Not After : Mar 27 07:01:21 2026 GMT
Subject: CN=a87af7b5bef6c6625fef6cae5eb197c8e6799dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:05:83:a3:68:04:89:af:dd:16:0f:18:14:cc:
d0:d4:4c:c0:20:86:56:ea:8c:54:51:cb:03:ab:cb:
39:54:a4:ee:e6:e8:2d:31:17:36:c6:68:38:3a:bb:
6d:b2:53:b3:71:e1:1a:f5:27:c0:c4:e0:b5:c9:22:
a7:ef:77:dc:5a:54:ef:c2:a4:82:62:7b:2c:65:e2:
ee:e6:8a:50:c5:15:6b:04:3f:9b:00:94:ac:03:2c:
be:9e:22:f3:e1:2d:67:67:c0:ad:56:85:cd:14:ca:
ee:a0:d8:32:bf:4c:9e:f8:c6:3b:7b:0d:77:2d:48:
39:e0:9f:e6:c1:1e:fb:e8:c1:80:f6:b1:48:94:98:
b1:de:6c:4e:9d:31:42:3a:23:44:2c:b9:b7:90:35:
73:ed:12:5a:60:fc:81:c9:6c:79:0b:3c:df:1d:cc:
ce:9b:dd:6c:6f:96:06:c8:27:1b:bc:6b:e2:b0:ff:
ed:5e:4e:d4:64:ca:24:00:68:b0:6a:0d:e9:a5:58:
6a:0a:02:47:ad:16:21:a5:54:de:4c:01:c1:4a:16:
67:b4:47:a5:37:ee:fb:b2:61:65:5e:45:50:bf:38:
04:e1:36:21:17:df:b2:9d:01:49:69:e8:87:a2:e4:
cf:8c:96:29:d3:ec:04:29:c0:df:1b:e1:01:7b:4d:
33:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7A:F7:B5:BE:F6:C6:62:5F:EF:6C:AE:5E:B1:97:C8:E6:79:9D:AC
X509v3 Authority Key Identifier:
keyid:7A:BB:96:D4:76:37:D4:7C:71:61:5B:60:DA:1F:69:1C:4A:6F:0B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:69:f5:1d:92:09:99:16:5e:9e:cc:11:45:d2:50:2d:c8:f2:
94:3a:c6:ce:ea:e4:a8:e6:ce:33:9c:37:aa:64:b4:d2:63:24:
02:c4:ca:00:db:29:98:e6:64:6b:97:9b:35:54:be:2b:59:84:
89:e5:c1:65:0a:a3:72:f3:4f:8e:d6:7a:91:91:e5:92:c3:9e:
a0:6a:38:d2:5b:cc:8c:f3:15:d6:0f:9f:38:f2:b1:f6:6c:35:
f8:73:0d:59:94:6e:c8:a1:89:e0:05:d9:e4:6f:92:5f:97:54:
f9:1a:f0:b0:4f:cc:53:8a:32:b5:1c:54:a7:a2:27:ed:3b:3f:
a3:08:ff:68:da:b9:57:80:f6:ab:a9:82:5d:1d:d6:39:b3:c7:
4c:83:e2:ad:20:77:5f:ef:98:33:c8:8c:e7:ba:b1:75:33:54:
82:95:01:87:58:76:18:95:48:f2:79:11:01:7d:03:de:f4:02:
26:6d:f1:c2:e1:a2:c3:94:3a:3e:d6:63:ed:71:09:12:83:37:
78:f6:2a:b5:07:6d:72:cc:cc:2c:cb:c4:7f:21:ba:bf:bc:d9:
e6:fb:78:42:e5:f6:60:9e:7d:8c:97:28:30:39:d3:2f:73:00:
9d:49:53:e9:9f:6f:fc:0a:95:ce:28:3f:88:a1:58:08:07:9b:
fc:c3:97:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:00:02 2026 by rpki-client