Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
File: ERhPtlA6dgZX-QJw4naj_LULjo8.mft (raw, json)
Hash identifier: YEokCIhhUSIOjITUePfFQPBp2p79uAhRDSuDXQtznnM=
Subject key identifier: 1A:E6:9D:EA:17:9A:A7:01:E8:86:4A:6F:A6:41:50:5F:F7:D4:F8:6F
Authority key identifier: 11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
Certificate issuer: /CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Certificate serial: 01A0D45DAB2D5001CF1F400E52EFD0729645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 17:01:43 +0000
Manifest this update: Thu 24 Sep 2026 17:01:43 +0000
Manifest next update: Fri 25 Sep 2026 17:01:43 +0000
Files and hashes: 1: ERhPtlA6dgZX-QJw4naj_LULjo8.crl (hash: bCxmbePoGf9o8x5ZtwG4ifprZkqTm/fw1z3OywO41DM=)
2: I9hNFsiUppOM9VZIcAfH4qbXw_k.roa (hash: W4bc2pkEjBkLLPhivhIIPW+Vl4uMQLKBx8OjNwjL98A=)
3: lypKNyumbp3Rx5Ca8OfilFGC6co.roa (hash: 1pqIQQrSkAL4LQAupUembuigh5NslsCnzhntmGy1wNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:ab:2d:50:01:cf:1f:40:0e:52:ef:d0:72:96:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Validity
Not Before: Sep 24 17:01:43 2026 GMT
Not After : Sep 25 17:01:43 2026 GMT
Subject: CN=1ae69dea179aa701e8864a6fa641505ff7d4f86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0f:39:8e:13:53:23:d5:24:a4:48:0c:bd:8c:
bc:55:0a:b6:39:05:21:30:12:58:c1:0a:50:1f:b9:
7c:90:82:6f:78:2e:a8:b5:98:c8:5a:3e:31:1e:62:
ee:ef:42:1c:e2:c9:4e:03:ed:60:c1:c5:43:c0:84:
12:3b:dd:ea:1d:f8:7f:dc:5d:f9:2e:32:97:41:a4:
60:11:2d:bf:32:3e:12:55:9c:f8:77:30:35:53:f3:
fd:ba:87:c9:fb:81:ca:b5:fb:30:86:d9:96:59:8c:
1c:36:3c:d7:47:55:f0:87:ef:41:40:ae:22:a0:10:
45:9c:52:1f:5c:fc:bc:9d:3a:67:29:97:f0:5f:1c:
a1:d1:df:58:fd:44:9b:13:c6:4c:17:dc:41:ff:05:
e2:10:4b:e7:22:6e:80:6d:3a:42:36:64:36:9c:43:
5b:48:50:1a:18:02:86:e9:53:72:de:c2:3c:99:4c:
e0:37:89:9b:5f:10:7f:44:a7:50:33:08:92:12:47:
be:ca:13:dd:f9:a1:87:5a:39:df:43:82:a4:6f:70:
be:b8:be:5e:00:a5:ac:f5:2b:03:89:95:b6:9f:e6:
37:f3:b2:30:84:6f:66:ba:a7:63:4e:51:6f:56:d7:
bf:22:e2:f8:34:16:c0:46:a9:85:79:fa:8a:21:23:
28:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E6:9D:EA:17:9A:A7:01:E8:86:4A:6F:A6:41:50:5F:F7:D4:F8:6F
X509v3 Authority Key Identifier:
keyid:11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:80:c7:5f:d6:52:0f:10:01:9e:3c:74:0e:6d:3b:95:f2:0b:
87:b1:cc:0a:8c:2e:37:fb:4c:f5:61:8b:35:7a:4c:06:a4:47:
11:9a:39:95:c7:e7:bd:c3:5f:03:45:51:03:02:12:10:d5:15:
06:52:b9:93:f0:32:8f:c6:45:7a:f7:03:63:bc:e0:6e:fe:f1:
22:83:f4:6c:1e:72:99:3b:a1:31:37:6c:0c:65:4f:e6:ad:50:
64:50:0e:a2:58:78:89:6a:15:15:a2:6c:16:2b:78:0e:73:ef:
93:1a:b0:70:2d:14:19:a1:39:6a:e9:5c:2f:11:05:88:ac:06:
e6:42:70:81:4e:82:b0:1c:bc:c0:b0:63:64:96:5d:2b:92:3f:
22:22:ab:a9:1d:69:1d:18:2c:a6:66:dc:7b:69:d8:a2:3a:4f:
de:57:91:c8:bc:57:ed:d1:6e:fd:4d:8c:34:43:ed:59:0f:ef:
79:81:00:1d:01:4a:66:ca:52:48:d3:d9:fd:dc:b8:c1:8b:95:
52:20:34:28:c2:14:db:d9:3e:54:de:78:6d:4d:c6:55:c4:64:
2e:94:1f:16:b2:1b:9d:9b:8f:d7:32:ca:19:a2:72:89:e7:31:
ac:4e:d8:56:6a:56:38:8e:1e:14:31:eb:a7:09:e2:9d:44:e1:
f3:51:3f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:37:03 2026 by rpki-client