Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
File: ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft (raw, json)
Hash identifier: jkvJxqZ7QNLotsoZtM6avohoxTr9Kxc+X7loFn3qWmU=
Subject key identifier: AE:EC:EE:78:C2:F3:F8:FA:BD:23:D6:31:50:87:64:25:84:04:C6:DF
Authority key identifier: 11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
Certificate issuer: /CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
Certificate serial: 019F946D6A29AED1DA84B0DA396B4F6E26A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
Manifest number: 0867
Signing time: Fri 24 Jul 2026 14:00:26 +0000
Manifest this update: Fri 24 Jul 2026 14:00:26 +0000
Manifest next update: Sat 25 Jul 2026 14:00:26 +0000
Files and hashes: 1: ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl (hash: 8GVLzadxnCJMNWugs4/73FEiX9WAyFZ0Tt6nNytbFYY=)
2: KaboQiocR929GCG29p5Fn_-ZE5o.roa (hash: fkHknMnvtPeBcLwuEn6gGYmWMMqGXg1zBzQziCqwcvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:6a:29:ae:d1:da:84:b0:da:39:6b:4f:6e:26:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
Validity
Not Before: Jul 24 14:00:26 2026 GMT
Not After : Jul 25 14:00:26 2026 GMT
Subject: CN=aeecee78c2f3f8fabd23d631508764258404c6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6b:ff:2b:6b:b3:00:d5:a0:df:a9:e7:5f:df:
88:33:cd:e0:57:a7:56:a1:8e:a7:55:b9:8b:bc:8c:
47:53:e5:14:8b:73:d5:7f:36:61:12:44:ba:aa:39:
cb:89:cc:82:d8:99:30:76:a0:be:bc:9a:0d:58:d8:
67:eb:43:7a:37:6d:d7:72:ff:a0:b7:e7:15:bd:a7:
3a:64:c3:8b:b2:bd:f5:32:41:60:22:9c:17:51:ea:
0b:6b:16:7b:f1:8e:81:82:d7:fc:a1:db:fc:fa:1b:
4b:8c:e6:fa:0e:89:64:85:20:a4:49:9d:79:cc:dc:
d8:6b:7c:a2:ad:00:d9:e2:fc:a6:d2:fc:0f:40:bb:
c0:7d:df:d3:11:90:53:5a:37:9b:db:8c:4d:87:a3:
cc:99:3b:e1:4b:17:c3:94:cd:d9:80:61:92:6e:29:
df:8a:50:6f:e1:39:f1:ad:91:d3:05:da:c1:28:d0:
e7:94:22:52:03:75:36:4e:cc:e0:12:b4:c4:94:02:
d8:d0:4f:8e:63:b3:8b:83:d9:46:24:e5:74:d7:e2:
88:3b:97:49:1d:ae:e1:a5:a5:12:86:3d:7f:0b:aa:
a8:55:00:45:fc:d9:8c:60:8a:12:e8:d6:41:9e:aa:
4e:34:bf:15:42:9a:39:6c:8e:6d:f3:61:d4:c6:7c:
11:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EC:EE:78:C2:F3:F8:FA:BD:23:D6:31:50:87:64:25:84:04:C6:DF
X509v3 Authority Key Identifier:
keyid:11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d5:31:a0:92:31:72:53:ef:e6:cb:90:59:ed:bc:85:81:9a:
39:0d:a3:b4:0c:dd:81:d0:9f:ec:5c:b8:19:76:b0:50:c9:bb:
1c:3e:99:2f:78:f3:ae:41:ed:5e:33:db:57:41:ae:ef:e5:de:
c1:35:67:41:bb:1b:ac:d6:4c:50:cf:25:31:65:ff:d3:6a:a5:
8e:5d:50:b8:9b:e2:5e:32:93:14:ed:55:c5:91:b1:da:a4:40:
7b:af:1e:3b:93:15:e8:c1:0a:ec:2e:29:68:7d:73:ae:8b:e8:
c7:23:e9:65:48:6d:4e:d6:fe:11:9b:d1:78:04:2a:d2:af:48:
b4:f7:71:de:24:79:ed:52:c3:83:37:5d:83:ac:c7:6d:27:80:
62:3e:1c:db:35:4f:f3:34:12:49:4c:f2:c6:15:66:7d:9e:ce:
32:76:fb:d9:9a:11:2e:f8:1a:b6:ee:c8:a4:53:89:11:3b:8b:
53:be:cd:1b:f8:8d:77:34:cf:59:c6:26:7c:ed:fd:8f:36:87:
f7:cd:27:51:31:e6:af:98:25:fd:43:7e:d5:0d:37:07:87:02:
39:25:3b:6a:76:26:2d:4c:e6:6d:d0:02:f6:b9:67:53:5b:c9:
07:8c:01:16:42:06:f9:dc:e7:02:c9:a1:54:53:12:12:43:a9:
e6:20:6b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:39:31 2026 by rpki-client