Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
File: ErethYfzKycmXpxnphMr-bPwIPw.mft (raw, json)
Hash identifier: SUdK0ciZft6MN62xtLqteZ7yHOnMwFQzs8HWomneaHc=
Subject key identifier: 24:F2:82:81:F5:E7:F9:F7:28:DF:AB:09:14:8D:3D:30:B8:A8:88:68
Authority key identifier: 12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
Certificate issuer: /CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Certificate serial: 019E20FF5B81A38C6A572016108B285CD49A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
Manifest number: 0529
Signing time: Wed 13 May 2026 11:01:06 +0000
Manifest this update: Wed 13 May 2026 11:01:06 +0000
Manifest next update: Thu 14 May 2026 11:01:06 +0000
Files and hashes: 1: ErethYfzKycmXpxnphMr-bPwIPw.crl (hash: eojizAP7G8J+PJXhowjmCph2u8qKUPKwdhKaojouxg4=)
2: RLh9s9zTeKJ9bogTETA60TFw6lo.roa (hash: 0m+pngGOwDg6Ap17PIVB2FP6vUl0HDw150aVd4LORg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:5b:81:a3:8c:6a:57:20:16:10:8b:28:5c:d4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Validity
Not Before: May 13 11:01:06 2026 GMT
Not After : May 14 11:01:06 2026 GMT
Subject: CN=24f28281f5e7f9f728dfab09148d3d30b8a88868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ff:f7:ce:db:a3:39:76:46:d3:80:8a:ad:b8:
cc:15:48:4b:1f:76:c7:fe:5f:8c:38:67:ac:eb:fd:
da:31:bb:64:4d:1a:08:10:14:12:c5:05:33:8e:7d:
20:a9:8b:ae:53:a6:bc:b0:4a:2e:fd:bb:19:6e:91:
9a:ef:c0:63:60:5e:e9:ea:94:fb:15:be:33:11:65:
1f:a6:b6:e4:65:e8:de:7e:74:d3:58:cc:06:a7:de:
5f:5c:92:7e:a9:2d:1a:df:27:5f:b4:b9:f8:51:8a:
46:0b:45:fd:41:3e:e0:2c:74:0f:36:fa:92:76:5c:
ed:7a:02:5d:79:5a:c6:8b:22:da:30:4a:4e:d9:77:
e9:fa:ea:40:86:9d:97:3b:6d:85:18:a6:28:de:19:
73:c6:0b:e0:85:c9:1a:a6:53:21:ea:97:a4:e1:40:
e4:38:f1:78:bc:d7:50:e7:3f:6b:c6:d6:a7:b2:a5:
76:9f:44:b3:e5:c8:89:ae:3b:bb:fe:d2:95:d6:03:
54:66:e6:18:be:20:e3:f6:42:ed:dc:4d:18:67:76:
b0:cb:a8:19:bb:bd:ba:da:63:83:57:ed:c5:7e:20:
8f:cc:1c:1e:66:87:74:42:0d:a3:24:73:d1:c8:3e:
6b:86:72:c1:09:a5:5e:93:b6:20:4b:8c:43:7d:88:
4a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F2:82:81:F5:E7:F9:F7:28:DF:AB:09:14:8D:3D:30:B8:A8:88:68
X509v3 Authority Key Identifier:
keyid:12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ce:b6:78:31:64:9b:6d:8d:66:c0:16:a8:92:43:3e:ee:ab:
ad:a5:b0:d9:ad:17:12:c4:1b:0c:c1:bb:0b:a4:66:89:48:61:
db:16:5f:69:a8:60:70:3a:68:e6:31:d1:84:fd:38:6a:5e:d1:
a7:5b:2b:81:8b:05:0b:24:1c:0f:f0:d7:2a:0c:4e:31:2d:c1:
2d:69:13:db:5c:91:0a:ad:b9:82:79:13:8b:8a:af:1b:b7:ab:
83:9a:dc:2b:ee:bc:80:33:7e:56:37:92:f3:ce:8e:ac:de:12:
5d:8f:b5:04:57:50:de:96:5a:91:f0:62:91:65:7e:5c:86:ba:
a8:7f:7d:32:0b:f6:0f:1d:19:fb:68:dc:42:ce:12:a2:33:85:
fe:07:8a:fc:64:b2:0e:dc:0f:7d:12:d0:c3:0c:7c:81:c5:87:
9e:ad:56:d4:c7:05:dd:56:9e:d3:4d:f5:c6:d6:9f:28:1d:ee:
b5:94:99:59:f6:d2:7f:ea:8b:95:c3:7d:e6:1a:26:64:03:85:
d9:d8:36:08:cf:07:73:38:9d:28:1e:fb:d5:3e:f5:82:bc:80:
96:fd:98:f3:86:a0:fb:42:41:25:12:6e:96:9f:2e:25:23:12:
c5:7f:11:ac:77:53:93:55:1b:d9:56:06:da:db:d8:a0:90:da:
db:11:dc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:06:33 2026 by rpki-client