Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
File: ERhPtlA6dgZX-QJw4naj_LULjo8.mft (raw, json)
Hash identifier: b/0O9UE2H6HvDV6fGgJXNh7uSE61A8rBJevEF5ss2iY=
Subject key identifier: C5:0B:E6:A0:C9:E3:3D:73:26:8F:48:93:1D:EF:CD:62:0C:C5:F7:81
Authority key identifier: 11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
Certificate issuer: /CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Certificate serial: 01A1DEDE5093B3C676F0DF6F03E0F8FE147E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 11:01:13 +0000
Manifest this update: Sun 15 Nov 2026 11:01:13 +0000
Manifest next update: Mon 16 Nov 2026 11:01:13 +0000
Files and hashes: 1: ERhPtlA6dgZX-QJw4naj_LULjo8.crl (hash: v/SLtdYwMfV3JvhlMVS/P6IGCMUND1qIAe4t3GUypcQ=)
2: I9hNFsiUppOM9VZIcAfH4qbXw_k.roa (hash: W4bc2pkEjBkLLPhivhIIPW+Vl4uMQLKBx8OjNwjL98A=)
3: lypKNyumbp3Rx5Ca8OfilFGC6co.roa (hash: 1pqIQQrSkAL4LQAupUembuigh5NslsCnzhntmGy1wNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:50:93:b3:c6:76:f0:df:6f:03:e0:f8:fe:14:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Validity
Not Before: Nov 15 11:01:13 2026 GMT
Not After : Nov 16 11:01:13 2026 GMT
Subject: CN=c50be6a0c9e33d73268f48931defcd620cc5f781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:21:24:27:51:b9:17:9f:35:6b:16:37:44:00:
c7:28:24:85:42:90:3a:3c:59:0d:0c:0e:c7:47:7a:
ee:e0:04:19:72:30:35:4d:c0:c1:58:4e:a3:52:b4:
30:c2:aa:0c:56:bb:1b:0e:bc:8b:b2:4f:7b:00:ec:
1f:76:ac:90:41:50:c0:3a:87:10:73:07:6c:3b:07:
e2:68:83:1b:a0:af:47:8a:4a:8e:fe:6a:b0:a0:26:
e0:71:c3:b4:ca:38:c7:ab:f4:88:69:17:8e:45:41:
c2:ee:d5:9e:1d:1d:b2:47:b0:e2:9b:07:36:f0:bd:
08:06:17:71:9d:73:96:23:53:df:91:57:fb:7b:1d:
8c:83:58:86:e2:5a:a0:53:5e:2b:18:bd:c2:7b:ed:
10:f3:b9:14:6d:cb:db:ab:53:36:41:a0:9a:14:0f:
37:25:7f:40:60:5f:dc:58:17:b5:0a:3e:a1:e7:e2:
30:8e:bd:7e:70:e8:96:78:c2:3b:db:c4:01:3d:fd:
f7:23:2e:4f:1d:eb:db:a3:e1:d2:2f:3a:b0:63:7a:
65:07:fb:e3:2d:1e:b5:a3:e7:0d:de:97:55:be:53:
e2:71:51:fb:84:c3:42:ae:fa:ab:5d:2a:a1:bb:29:
a6:63:13:01:a6:52:92:32:8d:bf:85:75:85:af:6b:
b2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0B:E6:A0:C9:E3:3D:73:26:8F:48:93:1D:EF:CD:62:0C:C5:F7:81
X509v3 Authority Key Identifier:
keyid:11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:db:a2:68:73:24:be:4c:7f:47:79:62:b6:53:0c:19:b9:20:
28:99:f6:8a:df:98:04:b1:73:a7:e6:fd:aa:1f:3f:62:ae:a3:
19:4f:93:f5:9f:37:ec:e2:89:1f:64:23:59:e6:78:82:38:30:
fd:78:3e:64:75:cb:f1:3b:26:e5:39:a9:90:b2:02:06:b5:19:
fc:15:aa:a9:80:cf:73:ac:97:69:99:fa:e0:5d:5c:a1:97:63:
79:56:e2:45:de:b6:28:69:90:df:f5:4c:aa:5f:a7:fb:2b:fa:
d5:17:1e:cd:f9:23:62:32:e9:5e:5c:0d:37:d2:c6:ab:d1:a1:
ca:16:a7:e9:a1:4a:b8:3a:29:56:e3:1a:f5:c6:79:45:00:38:
29:5b:b9:db:34:b4:92:a3:03:a3:f4:a9:2f:87:64:67:53:b7:
9e:0b:18:81:56:d5:76:40:63:18:76:98:5e:d9:17:4b:46:b5:
2d:a2:00:73:02:85:00:d3:29:11:30:89:51:65:ae:e4:8f:1d:
23:ce:6e:ce:23:c4:64:03:02:d7:05:fd:76:40:b5:21:a5:e2:
8f:8a:ce:9b:c7:ec:59:1f:e8:fa:ae:13:ae:d4:fb:37:8f:30:
ce:0e:f0:58:5a:5b:56:68:78:6d:05:46:0c:59:5c:c4:29:0d:
e8:23:7d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:24:30 2026 by rpki-client