Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
File: ERk_jomOtvvRLFPffa0CFUPu_G4.mft (raw, json)
Hash identifier: zDqVA+irgppv/Zhy4nnCIQFiYE2TlYw2nzLZ0OeH9Ww=
Subject key identifier: EB:43:BA:47:E4:11:8D:21:A2:A1:C4:79:67:81:3D:6C:87:AF:0D:BC
Authority key identifier: 11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E
Certificate issuer: /CN=11193f8e898eb6fbd12c53df7dad021543eefc6e
Certificate serial: 019D2961104BBFE9822FEDE0CD0844F1D5E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
Manifest number: 0CEE
Signing time: Thu 26 Mar 2026 09:02:00 +0000
Manifest this update: Thu 26 Mar 2026 09:02:00 +0000
Manifest next update: Fri 27 Mar 2026 09:02:00 +0000
Files and hashes: 1: ERk_jomOtvvRLFPffa0CFUPu_G4.crl (hash: YJ86piBMaPDhbKGn2lSfGIIhYH6cWOtahEBramvClEk=)
2: R54X7zTNG912i2EvC7AKSQH7Vtc.roa (hash: t8SIcyAg5d0NiVmbOss6KTkA5q+y1vbgNzl8dJK1AX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:10:4b:bf:e9:82:2f:ed:e0:cd:08:44:f1:d5:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11193f8e898eb6fbd12c53df7dad021543eefc6e
Validity
Not Before: Mar 26 09:02:00 2026 GMT
Not After : Mar 27 09:02:00 2026 GMT
Subject: CN=eb43ba47e4118d21a2a1c47967813d6c87af0dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:75:1f:17:8f:e9:30:3a:4f:a1:a5:1e:0b:e0:
37:e5:8e:94:39:f3:3f:c8:40:56:e7:b0:6f:62:c7:
80:bf:03:e5:cb:e5:55:55:69:04:29:7b:ff:77:32:
66:5e:3e:e9:71:1e:94:9c:08:48:c7:6b:a3:e5:7a:
d1:b6:43:d7:48:c2:aa:f2:c3:93:f4:33:db:4d:53:
e3:bc:02:04:bb:9d:8b:e0:06:37:99:46:2a:11:cc:
e3:28:17:0e:73:93:b4:be:b3:61:a7:14:c9:ce:25:
c2:aa:7b:f0:da:1b:1b:e7:5f:ee:2e:3d:e9:f1:67:
17:7a:cc:6d:a0:e0:b0:6f:fd:32:c9:95:4f:ad:db:
c4:aa:bd:02:bd:07:1e:6e:90:3a:26:f2:c4:47:e6:
e3:50:93:fc:4d:25:74:3f:de:4b:20:12:75:09:2e:
ed:9b:ce:5b:8f:d7:ee:2d:f3:2e:e3:db:0a:88:a5:
97:82:4b:55:8c:18:80:7f:f0:e6:b1:79:91:29:73:
52:0c:26:57:53:76:bd:dd:07:1d:45:4f:36:87:5a:
c2:a7:cb:33:c7:bd:d7:96:cc:6c:7c:16:32:8f:48:
79:95:a9:60:99:be:ab:a7:d9:69:fb:46:6e:29:68:
9b:17:b7:24:cf:06:31:98:93:1d:aa:1d:b5:9a:bd:
2e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:43:BA:47:E4:11:8D:21:A2:A1:C4:79:67:81:3D:6C:87:AF:0D:BC
X509v3 Authority Key Identifier:
keyid:11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ce:9a:5b:e6:15:36:28:ab:bf:da:1f:03:c8:cf:f5:8b:55:
9f:ea:24:6f:7e:0e:d0:b6:52:00:44:b6:f1:2b:e3:5e:c0:a4:
56:8e:68:35:53:2f:d6:f4:b7:33:1b:81:b6:57:1a:1d:8a:7d:
62:ab:42:0d:ef:9f:0a:f7:6f:14:e1:a4:f2:8a:25:86:80:1d:
31:66:49:0a:bf:bb:56:a3:87:94:ba:00:ee:c3:6e:3a:01:7a:
e0:b3:c3:2e:3b:33:20:b4:06:e1:9a:c8:3e:23:08:d1:8c:ec:
29:b8:12:f1:7c:74:12:75:4a:bf:85:7b:f1:9b:19:81:45:49:
2c:ce:fb:81:d5:79:18:b3:5c:88:15:03:00:16:bb:0b:a4:cf:
d5:83:c4:75:60:1a:2e:6e:51:63:ac:74:18:a8:9c:d9:95:2c:
69:83:d1:95:65:4f:6c:22:e2:d0:e8:5c:10:f3:ec:07:00:27:
62:e9:03:df:42:03:fc:63:76:6a:ab:65:38:3f:fb:5d:d2:5e:
c3:c9:a2:03:be:b5:ae:3a:6e:fd:a6:e0:75:aa:dd:49:75:41:
8d:81:3d:2c:12:84:71:dc:d4:22:d7:51:53:e9:87:9b:e1:9d:
8e:8f:34:c1:1d:46:ce:33:9f:da:91:8a:51:3c:44:18:e4:38:
2a:35:c1:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYRBLv+mCL+3gzQhE8dXkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMTkzZjhlODk4ZWI2ZmJkMTJjNTNkZjdkYWQwMjE1NDNl
ZWZjNmUwHhcNMjYwMzI2MDkwMjAwWhcNMjYwMzI3MDkwMjAwWjAzMTEwLwYDVQQD
EyhlYjQzYmE0N2U0MTE4ZDIxYTJhMWM0Nzk2NzgxM2Q2Yzg3YWYwZGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnUfF4/pMDpPoaUeC+A35Y6UOfM/
yEBW57BvYseAvwPly+VVVWkEKXv/dzJmXj7pcR6UnAhIx2uj5XrRtkPXSMKq8sOT
9DPbTVPjvAIEu52L4AY3mUYqEczjKBcOc5O0vrNhpxTJziXCqnvw2hsb51/uLj3p
8WcXesxtoOCwb/0yyZVPrdvEqr0CvQcebpA6JvLER+bjUJP8TSV0P95LIBJ1CS7t
m85bj9fuLfMu49sKiKWXgktVjBiAf/DmsXmRKXNSDCZXU3a93QcdRU82h1rCp8sz
x73XlsxsfBYyj0h5lalgmb6rp9lp+0ZuKWibF7ckzwYxmJMdqh21mr0upwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtDukfkEY0hoqHEeWeBPWyHrw28MB8GA1UdIwQY
MBaAFBEZP46Jjrb70SxT332tAhVD7vxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJrX2pvbU90dnZSTEZQZmZhMENGVVB1X0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9iNGUzZTQtMTE4OS00MDM2LThmMWEt
MDQyZjdkYWMyNGQ1LzEvRVJrX2pvbU90dnZSTEZQZmZhMENGVVB1X0c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9iNGUzZTQtMTE4OS00MDM2LThmMWEtMDQyZjdkYWMyNGQ1
LzEvRVJrX2pvbU90dnZSTEZQZmZhMENGVVB1X0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIc6aW+YV
Niirv9ofA8jP9YtVn+okb34O0LZSAES28SvjXsCkVo5oNVMv1vS3MxuBtlcaHYp9
YqtCDe+fCvdvFOGk8oolhoAdMWZJCr+7VqOHlLoA7sNuOgF64LPDLjszILQG4ZrI
PiMI0YzsKbgS8Xx0EnVKv4V78ZsZgUVJLM77gdV5GLNciBUDABa7C6TP1YPEdWAa
Lm5RY6x0GKic2ZUsaYPRlWVPbCLi0OhcEPPsBwAnYukD30ID/GN2aqtlOD/7XdJe
w8miA761rjpu/abgdardSXVBjYE9LBKEcdzUItdRU+mHm+Gdjo80wR1GzjOf2pGK
UTxEGOQ4KjXBYA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:58:53 2026 by rpki-client