Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
File: ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft (raw, json)
Hash identifier: cJI1grl0ExYb2hwvsrbUnDlyAgWw4+6sK3Y5DM5C4xU=
Subject key identifier: A7:BD:CD:05:3A:06:1B:34:A4:60:DF:5B:6E:0E:D8:94:AA:EC:BD:FF
Authority key identifier: 11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
Certificate issuer: /CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
Certificate serial: 019D26962DECE05021DAACB44BC430A86451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
Manifest number: 0725
Signing time: Wed 25 Mar 2026 20:01:09 +0000
Manifest this update: Wed 25 Mar 2026 20:01:09 +0000
Manifest next update: Thu 26 Mar 2026 20:01:09 +0000
Files and hashes: 1: ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl (hash: yfxp2QSDRxOblsJmTZzbD8V0R7kDGtOMgA9xPKgyh+8=)
2: KaboQiocR929GCG29p5Fn_-ZE5o.roa (hash: fkHknMnvtPeBcLwuEn6gGYmWMMqGXg1zBzQziCqwcvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:2d:ec:e0:50:21:da:ac:b4:4b:c4:30:a8:64:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
Validity
Not Before: Mar 25 20:01:09 2026 GMT
Not After : Mar 26 20:01:09 2026 GMT
Subject: CN=a7bdcd053a061b34a460df5b6e0ed894aaecbdff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9d:8c:16:29:40:9f:7a:92:45:3d:8d:83:e5:
02:8f:91:18:58:14:ec:d3:9f:46:b3:3b:8f:43:8e:
9c:da:da:13:a4:6b:fd:e7:b2:44:c4:a5:eb:d4:23:
27:8b:df:ca:82:32:ad:5a:71:87:86:c3:d6:cb:d4:
29:89:6c:02:01:74:6b:1d:6d:74:35:40:ed:f1:3b:
81:5d:b2:23:0d:eb:d6:6a:f7:2e:e4:ec:d6:a9:17:
73:70:d4:cd:33:f1:37:b5:d2:fb:95:d6:f2:69:58:
ce:5e:f4:c9:ba:c0:e8:35:eb:ff:9a:f7:8e:84:ed:
f5:77:a0:5a:9d:6a:67:2b:4a:39:b1:5e:47:13:ef:
24:41:df:b8:96:6a:d5:13:b2:55:5c:3d:79:e6:0a:
53:ee:d5:66:c9:19:77:61:e7:b9:65:41:9d:f1:87:
df:75:40:92:88:83:0a:39:39:07:57:98:40:f2:99:
18:df:c8:ac:1f:d1:43:1c:63:fb:15:21:b8:a0:bd:
2b:05:a7:6c:96:f5:f1:62:01:09:1a:65:2c:b2:21:
a9:5b:c0:56:01:30:df:e8:04:71:8e:21:ab:fb:34:
4b:7b:61:34:ae:f5:97:28:04:e1:c7:39:39:61:b8:
c4:d9:aa:34:b9:73:8a:f2:16:4c:b9:b7:4e:60:3f:
04:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BD:CD:05:3A:06:1B:34:A4:60:DF:5B:6E:0E:D8:94:AA:EC:BD:FF
X509v3 Authority Key Identifier:
keyid:11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:fb:48:52:ad:a4:61:23:e4:0a:96:8f:7d:4c:1e:da:16:59:
15:39:a3:c2:19:ea:77:5b:6b:23:a1:6b:b0:b5:eb:5f:ee:30:
89:85:88:17:c3:97:31:b0:6b:ab:c8:dd:e4:10:fb:b6:6c:e7:
c6:b3:af:f8:5b:09:15:e9:0a:43:4d:4a:8d:3e:4d:eb:72:da:
96:d4:44:45:7a:08:e6:9d:d2:19:7b:10:61:6f:5c:c9:fa:6d:
2d:b1:f5:63:77:ac:2f:d1:4e:98:81:00:e9:ab:fc:1e:bc:6a:
98:e9:c8:13:fd:ed:ae:a7:80:26:93:3c:1c:b2:a7:b5:0c:1e:
7e:c8:47:5d:dd:71:8f:2a:6c:9f:4a:e0:fe:e5:ee:f1:64:27:
80:e9:b6:ce:4b:2d:95:c8:53:73:f3:ad:0e:0f:d2:ea:11:a4:
23:30:7f:96:62:f8:a2:ff:f6:bb:2a:f5:09:c7:8c:e1:10:c3:
23:b9:f4:de:2c:0b:56:b1:77:79:19:ec:08:d2:f6:08:d0:e4:
7a:c9:cf:a2:63:42:b6:28:85:5b:d0:4d:eb:f3:a6:5a:98:11:
e9:ec:12:e5:a9:1d:e2:2c:31:30:4e:9d:1d:1e:70:d4:b8:de:
f2:47:9e:4a:c5:00:d5:b9:bc:05:42:11:44:7f:e9:4b:24:f5:
11:d3:f5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:34:54 2026 by rpki-client