Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
File: ERRf3gGvgQdg7mG881TPlirEYNk.mft (raw, json)
Hash identifier: Me5xo7z95d02Pv4cPrRJYhJSvKrT7GMM36bX27MNVdY=
Subject key identifier: B9:17:8D:57:BD:D3:C4:08:7C:3E:C5:CE:E0:09:FB:D2:B3:10:4C:11
Authority key identifier: 11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9
Certificate issuer: /CN=11145fde01af810760ee61bcf354cf962ac460d9
Certificate serial: 019D28F2321CFC738386FC6C3E8CEAA8C7A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
Manifest number: 10EF
Signing time: Thu 26 Mar 2026 07:00:54 +0000
Manifest this update: Thu 26 Mar 2026 07:00:54 +0000
Manifest next update: Fri 27 Mar 2026 07:00:54 +0000
Files and hashes: 1: ERRf3gGvgQdg7mG881TPlirEYNk.crl (hash: 7O0Rp1Nnq38f3FhsKWaA1ynBNvfomKBMWe3hPaJlAjw=)
2: Hyuuk77aXVuDiZApqxvQdHAqv1c.roa (hash: kj5MrWTwW/9CXEtRL1jC4+VD3V1e9sFAl7gGS1hXkNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:32:1c:fc:73:83:86:fc:6c:3e:8c:ea:a8:c7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11145fde01af810760ee61bcf354cf962ac460d9
Validity
Not Before: Mar 26 07:00:54 2026 GMT
Not After : Mar 27 07:00:54 2026 GMT
Subject: CN=b9178d57bdd3c4087c3ec5cee009fbd2b3104c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9e:95:5f:7b:bc:c1:32:46:46:91:54:c4:a4:
33:12:f3:19:65:c5:e9:20:0d:69:53:da:65:41:9d:
75:a6:5a:e5:90:b8:6d:74:4a:1e:06:b9:6d:41:ca:
95:91:9a:ea:d7:df:03:f0:16:33:a4:0b:f1:c5:6a:
da:81:89:19:5f:79:65:c7:cc:72:c1:50:ef:37:86:
9b:66:37:e0:15:88:93:26:bb:77:74:62:cd:62:e3:
15:6f:5b:cc:b2:37:22:05:23:ab:03:cf:80:12:02:
0c:51:6d:a7:65:10:24:d6:45:1f:24:81:50:cf:c7:
77:92:8c:06:bc:50:b5:e6:5c:d6:bd:25:d7:c1:31:
22:67:77:51:a3:a4:3c:98:71:9e:c1:f7:ae:50:ed:
fa:d4:1d:7e:50:a7:a0:ba:53:48:ee:a4:f0:7b:ff:
f2:25:dd:a2:9d:d2:c3:b0:5b:85:90:44:58:77:d7:
5e:0a:3f:9b:c0:7b:f7:d0:c6:48:12:e8:27:d2:42:
4b:e6:0e:e2:5e:84:43:c1:ca:99:3d:fa:d0:98:e2:
fc:b9:d5:4c:a8:7b:9b:d9:be:82:68:16:08:37:21:
01:33:86:3d:c4:80:d8:97:a1:c7:ec:1a:dc:e8:ca:
14:cd:17:6b:93:d0:17:92:20:ac:18:32:0c:5b:5b:
2f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:17:8D:57:BD:D3:C4:08:7C:3E:C5:CE:E0:09:FB:D2:B3:10:4C:11
X509v3 Authority Key Identifier:
keyid:11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:27:3f:6a:c4:c5:08:c6:c4:c2:96:90:fb:b3:f6:d9:24:ab:
62:51:c8:be:43:5f:d0:ab:73:44:e2:2d:be:ca:29:c7:dd:b0:
35:82:d0:0d:5d:d9:a2:e5:8a:03:f3:25:06:3d:a9:08:61:b7:
84:d2:4d:01:31:a6:9e:8d:ec:be:d8:70:1e:57:3e:6b:dc:16:
12:87:ea:36:ff:a2:96:a2:88:4f:47:5d:c7:db:03:b5:6f:5f:
c6:42:e5:66:4b:c5:51:9a:c0:05:7f:79:6b:a2:27:52:c2:02:
58:97:b4:ff:9b:8d:5a:f9:d1:78:f3:1a:2d:f0:22:82:6c:c8:
2d:43:b3:7e:83:51:13:43:19:04:3c:af:f1:1f:06:9b:e8:a6:
ec:9f:a8:0a:09:33:2e:ff:47:8d:01:9f:e7:8e:a7:32:19:64:
56:29:55:88:81:d1:41:e4:b6:71:e4:e7:26:29:a7:f0:02:f1:
0c:8f:b2:b6:9e:4c:fc:37:50:84:4c:27:90:eb:c2:21:08:cf:
cf:05:44:df:cd:a4:b4:e1:7c:fa:28:0c:3c:82:1d:01:6d:3e:
f8:5a:69:9a:66:bd:a7:f7:e0:76:7e:97:9e:41:cf:41:d9:3f:
c2:ff:0a:70:22:0c:86:7d:3d:25:6a:60:65:cb:6c:71:86:eb:
0e:5e:44:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:07:59 2026 by rpki-client