Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
File: ERhPtlA6dgZX-QJw4naj_LULjo8.mft (raw, json)
Hash identifier: Yqs/2RbhOzZVe670PfNVDlt3zahjfWNpFt1zHw6zg7o=
Subject key identifier: D1:7E:98:A9:E2:CF:E1:50:85:9B:42:F5:E4:93:98:DD:D3:88:21:BC
Authority key identifier: 11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
Certificate issuer: /CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Certificate serial: 019D27DF7A34B2639B55CFD3BB6E767D6F23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 02:00:50 +0000
Manifest this update: Thu 26 Mar 2026 02:00:50 +0000
Manifest next update: Fri 27 Mar 2026 02:00:50 +0000
Files and hashes: 1: ERhPtlA6dgZX-QJw4naj_LULjo8.crl (hash: XI87B+qHX1b3Dub3BW6ijMHmNQyOesw11+uNpcCIvJc=)
2: I9hNFsiUppOM9VZIcAfH4qbXw_k.roa (hash: W4bc2pkEjBkLLPhivhIIPW+Vl4uMQLKBx8OjNwjL98A=)
3: lypKNyumbp3Rx5Ca8OfilFGC6co.roa (hash: 1pqIQQrSkAL4LQAupUembuigh5NslsCnzhntmGy1wNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:7a:34:b2:63:9b:55:cf:d3:bb:6e:76:7d:6f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Validity
Not Before: Mar 26 02:00:50 2026 GMT
Not After : Mar 27 02:00:50 2026 GMT
Subject: CN=d17e98a9e2cfe150859b42f5e49398ddd38821bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0c:8f:3c:0e:f6:96:d3:e9:7e:0d:98:73:59:
35:d0:db:34:19:33:98:f4:a4:e2:21:d1:0a:b6:37:
53:45:b7:4b:e1:10:17:96:8c:4f:1d:38:ae:65:2e:
4d:e2:bb:f1:20:65:6f:7c:a6:af:d7:ba:0d:2d:e0:
b3:e2:b1:79:0f:fa:b0:79:ee:ad:2e:4b:68:10:0e:
54:f2:47:80:8c:ce:d7:af:d6:00:e9:03:7a:00:ab:
58:d6:df:b6:8d:7a:0d:bb:f7:d5:0a:c9:cb:f7:54:
37:f7:aa:d7:fc:17:02:fc:8f:47:de:1f:47:90:ea:
f5:3f:62:b4:94:69:3f:92:3f:16:2f:65:71:b0:99:
22:fb:60:0b:52:9d:16:8a:1b:fd:71:16:85:5e:9b:
e2:f0:7d:bb:21:07:74:d4:d3:c5:22:bd:74:07:d2:
20:4a:b0:f8:00:79:87:85:6f:cb:47:cc:d0:39:a4:
33:dd:92:9b:33:9c:14:7f:05:dc:44:9c:5c:e3:8d:
95:27:91:76:35:af:03:ce:dd:c3:6b:f6:ae:e6:bb:
c6:7c:0b:55:19:98:0d:d0:24:45:5a:af:b9:be:03:
43:f3:5e:7c:95:a1:08:32:34:58:57:58:b3:a2:46:
81:f8:68:ab:a3:cf:8e:3c:a3:36:51:2e:d2:61:c3:
b0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7E:98:A9:E2:CF:E1:50:85:9B:42:F5:E4:93:98:DD:D3:88:21:BC
X509v3 Authority Key Identifier:
keyid:11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e9:de:b2:95:70:25:1d:69:75:a6:a8:95:c4:a2:34:62:52:
42:d9:06:7e:d7:dd:65:62:a2:0a:e7:09:8c:b6:c1:41:1a:4a:
3a:3d:e5:32:5e:46:e5:6e:09:04:c7:6c:92:31:07:e0:c2:f6:
cb:74:9a:6b:c2:f8:6c:a1:24:0d:5a:db:54:38:ba:b4:de:fc:
fd:2c:c7:b3:0f:d6:5a:6a:23:ee:c2:52:c0:29:ac:e9:29:c6:
33:1e:89:49:ba:00:d5:76:85:fe:8c:0e:3b:5d:89:60:b8:b1:
b3:77:bc:d8:e6:31:c8:fc:2c:6c:fd:61:36:79:02:cb:41:10:
13:8c:fd:9b:64:8b:37:f8:ba:31:98:c8:2b:52:2b:8b:ed:0f:
cd:8c:ac:aa:a6:b0:3c:bc:ba:30:c7:5a:36:32:ae:7d:18:a4:
71:95:62:91:e6:42:35:2d:2c:f4:36:07:e2:d1:67:6e:3f:54:
99:a8:d8:79:ac:f1:f5:8f:b8:a6:ea:a5:9b:8c:7c:85:31:8c:
a7:69:5b:d1:f8:b0:c1:1e:3a:b8:e4:73:48:32:ef:cd:e1:64:
8e:ea:7d:79:d3:6c:a0:25:0f:1b:b6:9a:4c:0e:8d:b9:21:30:
c8:7e:45:9e:12:e6:d3:51:8b:8a:5f:4d:cd:c9:4f:d4:56:52:
d9:1f:3d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:17:11 2026 by rpki-client