Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
File: ErethYfzKycmXpxnphMr-bPwIPw.mft (raw, json)
Hash identifier: qzLrffJJbece02zYcJHVwaBmQB2vJdDi1hzJ7lXcf3Y=
Subject key identifier: 26:DB:ED:67:DF:7C:DA:9A:27:50:BD:97:39:96:C9:0B:F0:95:7F:6E
Authority key identifier: 12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
Certificate issuer: /CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Certificate serial: 019D27DF53DEA0CB793779093A7085164DB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
Manifest number: 04A8
Signing time: Thu 26 Mar 2026 02:00:40 +0000
Manifest this update: Thu 26 Mar 2026 02:00:40 +0000
Manifest next update: Fri 27 Mar 2026 02:00:40 +0000
Files and hashes: 1: ErethYfzKycmXpxnphMr-bPwIPw.crl (hash: jeQKqU00sQjLvS4neopUdypQJ25BQ/a+S/C4Uxc8lk4=)
2: RLh9s9zTeKJ9bogTETA60TFw6lo.roa (hash: 0m+pngGOwDg6Ap17PIVB2FP6vUl0HDw150aVd4LORg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:53:de:a0:cb:79:37:79:09:3a:70:85:16:4d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Validity
Not Before: Mar 26 02:00:40 2026 GMT
Not After : Mar 27 02:00:40 2026 GMT
Subject: CN=26dbed67df7cda9a2750bd973996c90bf0957f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7a:9d:c3:8c:9b:a6:d6:01:16:00:c3:08:1d:
54:46:33:4e:f7:b0:df:5a:fb:36:73:22:9d:1c:c2:
6d:66:86:38:d0:eb:cc:72:e4:8e:b1:3c:13:09:a1:
2b:0a:1b:84:05:b3:b5:3d:b8:d0:fc:92:3d:b6:6c:
c3:9c:4a:92:57:86:2e:fc:4d:94:34:8d:9a:67:d7:
26:6d:18:44:f9:d3:b4:71:18:d9:46:3c:72:fe:ef:
4e:91:ca:f9:fe:48:63:ac:72:fd:eb:03:8c:b1:b0:
40:8b:d2:c5:8f:f5:00:44:a8:c7:4e:12:8c:19:73:
0e:ae:5f:9d:29:4e:d4:69:68:de:4c:db:e1:dc:ec:
1e:aa:7d:82:7e:55:e6:f5:8e:b8:07:7f:8a:05:75:
a2:7a:38:03:a6:3a:eb:cf:94:da:40:d2:62:2e:d0:
1c:51:1d:2d:13:f7:04:c4:9b:9e:71:13:69:73:c1:
f8:4b:1d:06:9f:1a:b3:62:00:cc:96:4e:d4:e6:47:
59:90:31:bc:e5:16:3d:64:e2:13:1d:14:5e:41:95:
0e:98:c6:26:ab:fb:75:03:d9:89:5c:d9:9c:2a:f6:
49:a9:33:e0:80:a3:bc:ec:2a:ea:92:b6:be:06:f3:
12:09:c2:a8:35:86:80:59:aa:49:08:81:45:ff:cb:
71:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DB:ED:67:DF:7C:DA:9A:27:50:BD:97:39:96:C9:0B:F0:95:7F:6E
X509v3 Authority Key Identifier:
keyid:12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a0:7f:6c:02:e2:00:d6:ee:7d:b8:e8:eb:c3:97:75:b9:99:
a9:a6:48:48:63:0d:18:16:a0:45:11:79:94:58:3d:3c:6e:39:
5f:02:9b:3c:88:5a:8e:e0:57:b7:6a:fc:1b:b1:73:75:c1:4a:
83:d5:4f:cf:73:84:10:68:f8:d1:f7:9a:4a:08:0d:41:76:f0:
c1:11:83:de:aa:00:2f:e5:fc:ca:4e:3d:9e:51:ab:a8:db:69:
4e:cb:8d:31:aa:20:9e:ba:c8:7c:57:d4:b7:53:59:11:ec:9e:
5a:4b:d7:95:21:30:70:e6:1d:be:d3:de:a0:07:6c:e9:3f:b4:
cb:5d:78:ec:df:cd:54:70:3a:7c:06:92:ec:66:3e:3d:b5:a9:
2d:52:6c:6c:5b:ef:dd:37:b2:f4:17:e2:62:f7:59:ff:b1:dc:
b9:42:46:77:55:65:40:b9:b9:ef:7a:57:d6:bf:30:ad:67:9f:
dd:f2:67:8e:ee:0f:e5:e7:38:cf:d4:21:49:ed:32:aa:f7:bb:
5b:06:d5:c7:1e:0a:a7:0d:f5:81:3f:52:0a:09:55:ea:04:29:
cb:39:a8:83:f5:90:14:60:58:7d:ce:a5:6d:5a:ae:a2:45:09:
12:ae:74:a9:42:95:96:68:dd:f5:cc:ef:cd:71:3e:a5:9b:e9:
97:ee:24:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:25:50 2026 by rpki-client