Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
File: ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft (raw, json)
Hash identifier: chs+hzXydFxARPqDtpynGpbyUDc4n0nU8yZsc77sK/Q=
Subject key identifier: 64:31:22:7E:E2:0C:0A:38:85:A3:53:D8:8C:92:B8:BA:48:56:3B:2E
Authority key identifier: 11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
Certificate issuer: /CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
Certificate serial: 01A0E098E82A9E25CA38B0F51D32864202D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
Manifest number: 0913
Signing time: Sun 27 Sep 2026 02:01:52 +0000
Manifest this update: Sun 27 Sep 2026 02:01:52 +0000
Manifest next update: Mon 28 Sep 2026 02:01:52 +0000
Files and hashes: 1: ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl (hash: 5EWcb5Eu12B3S4u3h9+y1m6y01V+HStl+STg6PhMXo4=)
2: KaboQiocR929GCG29p5Fn_-ZE5o.roa (hash: fkHknMnvtPeBcLwuEn6gGYmWMMqGXg1zBzQziCqwcvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:e8:2a:9e:25:ca:38:b0:f5:1d:32:86:42:02:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
Validity
Not Before: Sep 27 02:01:52 2026 GMT
Not After : Sep 28 02:01:52 2026 GMT
Subject: CN=6431227ee20c0a3885a353d88c92b8ba48563b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:1e:e4:e6:c9:46:13:dd:f0:a9:44:c6:93:
91:1a:6d:c2:e2:ec:1e:19:89:5d:c6:bc:64:04:04:
08:bc:36:1f:92:65:2e:9a:73:38:e9:ab:f4:04:cf:
b6:3f:56:cd:8d:13:6c:17:27:0f:43:ff:99:a2:c8:
53:98:e2:0e:92:f2:c5:9e:44:13:06:7e:8e:de:b7:
50:07:81:d1:aa:2d:81:57:14:c8:cc:37:54:be:51:
7a:88:53:1e:2c:bf:0a:2b:fc:c4:c3:6b:c1:d1:26:
58:e2:bd:9e:6a:da:fe:a4:bc:c5:77:74:14:35:08:
44:c5:5f:d7:36:32:d6:8b:b7:e1:9f:6e:ec:34:56:
15:cd:3c:b7:cc:54:8a:7f:39:08:81:1d:d2:27:12:
97:24:86:ae:8a:00:3f:b1:0c:0e:7d:f7:c0:58:fc:
48:a6:a3:50:d2:77:9b:2c:16:cc:c2:85:a4:3d:7c:
43:65:1a:bc:43:91:47:cc:6c:40:64:c9:84:19:53:
db:60:0f:d6:1a:e6:45:60:cc:6c:fd:4f:89:e8:9e:
87:e6:bc:35:9e:2c:c5:ab:fa:a9:24:04:df:19:0e:
25:51:b8:f8:4f:5a:b9:14:a7:d5:e6:46:6b:a3:67:
ea:dc:18:54:f7:4f:41:f0:1e:11:fe:a4:c5:f3:c1:
db:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:31:22:7E:E2:0C:0A:38:85:A3:53:D8:8C:92:B8:BA:48:56:3B:2E
X509v3 Authority Key Identifier:
keyid:11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b7:67:de:d2:d1:ca:fd:b5:41:3e:6d:32:c1:27:68:85:36:
be:bd:00:50:3d:aa:5c:2f:ca:24:20:c8:21:80:a6:70:fd:f7:
b8:09:3d:63:e1:5b:2e:69:4c:04:b7:59:9d:4d:de:4f:22:aa:
21:e5:88:9d:3f:71:5a:6e:42:ee:ea:c1:0a:8c:7a:9f:a6:3d:
6c:e7:0b:0e:69:e8:7d:42:e3:6a:2c:0e:f1:91:f8:43:c4:a3:
d2:33:b3:6f:ae:63:b6:f5:c3:25:ec:cd:01:4a:ab:b1:a3:02:
58:6a:75:bf:59:98:53:20:1f:a4:b0:d9:bf:44:d6:af:24:e6:
21:56:e4:fd:2f:72:2e:fa:f3:20:d7:86:02:c4:7f:e1:4e:f2:
4a:08:0c:be:4a:bf:ad:ef:39:f2:e7:fb:2f:8f:e2:07:ea:43:
79:8b:2d:5b:c1:5d:61:75:ea:f1:5f:b8:cf:d9:87:b2:b4:a0:
78:20:a9:cf:34:7e:8e:c0:f1:47:05:f9:10:db:2d:8b:2d:59:
3d:2a:fc:bb:c8:16:6d:1b:b9:9a:3d:d2:a9:17:f6:55:25:12:
a1:4a:fd:a6:eb:a7:cc:ba:b3:6d:71:ac:1c:4f:0d:d7:24:d8:
e0:b4:28:20:db:e2:65:23:ee:49:44:5e:cb:17:73:fb:88:c1:
f1:3f:7d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:17:24 2026 by rpki-client