Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
File: ERhPtlA6dgZX-QJw4naj_LULjo8.mft (raw, json)
Hash identifier: fYg47e4G0TQ6fv1PyOOINyomJ/0Nx0uYi7fnOmG0ebo=
Subject key identifier: D9:28:26:C9:7C:0F:65:77:6A:8C:58:B0:EF:72:CC:C7:49:6F:09:4B
Authority key identifier: 11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
Certificate issuer: /CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Certificate serial: 019E1F10FCAA778D07C990F4F2BC6C71A519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 02:01:07 +0000
Manifest this update: Wed 13 May 2026 02:01:07 +0000
Manifest next update: Thu 14 May 2026 02:01:07 +0000
Files and hashes: 1: ERhPtlA6dgZX-QJw4naj_LULjo8.crl (hash: 72i3vmh3O2o50iD4a+pg8BLzaJD3ch019NGRfj1n5XQ=)
2: I9hNFsiUppOM9VZIcAfH4qbXw_k.roa (hash: W4bc2pkEjBkLLPhivhIIPW+Vl4uMQLKBx8OjNwjL98A=)
3: lypKNyumbp3Rx5Ca8OfilFGC6co.roa (hash: 1pqIQQrSkAL4LQAupUembuigh5NslsCnzhntmGy1wNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:fc:aa:77:8d:07:c9:90:f4:f2:bc:6c:71:a5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Validity
Not Before: May 13 02:01:07 2026 GMT
Not After : May 14 02:01:07 2026 GMT
Subject: CN=d92826c97c0f65776a8c58b0ef72ccc7496f094b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:71:97:8d:34:91:f0:19:d6:fb:78:8c:b5:b8:
86:ba:cc:b4:4d:6b:10:57:bb:5f:3f:46:13:cc:a5:
b9:48:54:68:29:35:94:d4:99:fd:bc:1e:b8:0f:83:
c3:b1:97:54:8a:37:e1:b9:0d:b0:e6:10:97:b3:0e:
71:5c:c0:a7:2b:94:b6:00:c9:70:77:ec:ab:e1:01:
f7:c7:91:96:0d:9d:c6:1b:1e:91:6b:09:3d:9f:46:
a9:fb:54:77:af:5a:20:70:85:44:73:1a:bf:28:fd:
02:42:71:d3:86:6e:6c:16:1e:64:30:27:96:f6:b1:
e2:ab:0f:c9:f6:11:3f:e5:9f:e4:11:04:3b:32:f2:
05:5a:80:4a:55:37:68:0e:a1:04:3b:ed:31:45:82:
1f:c8:85:d9:f0:69:a1:06:ae:f8:30:40:09:9b:5d:
c2:8c:f0:24:47:29:1d:5b:97:e2:5c:d9:36:05:09:
f4:b6:f5:48:1c:53:ac:69:4a:34:27:85:48:42:cc:
eb:75:72:8f:76:a7:ce:e0:5a:10:28:85:08:ef:e4:
83:b3:20:16:37:11:d3:29:01:9b:74:34:f1:a8:09:
a9:65:46:2d:00:9f:0a:76:ec:ee:28:bd:41:64:82:
0e:18:82:d6:37:0b:ae:59:dd:26:11:c5:f5:a6:06:
29:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:28:26:C9:7C:0F:65:77:6A:8C:58:B0:EF:72:CC:C7:49:6F:09:4B
X509v3 Authority Key Identifier:
keyid:11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a6:45:f3:45:a3:c4:d6:69:3e:e7:9b:51:83:05:b6:0d:4c:
dc:37:b3:3c:ce:76:42:b9:09:dc:ca:15:67:b7:a9:58:40:9d:
24:2a:cb:58:8b:d6:c2:85:eb:df:8a:e9:c3:b0:c7:7a:58:fc:
64:5b:bc:a8:37:45:0e:01:4e:30:51:3c:10:a1:fb:23:09:f7:
57:a3:e9:40:c2:2b:67:24:b1:c7:e1:f7:69:5c:1e:cf:e2:3e:
87:37:05:ca:14:ba:42:49:0d:e9:8f:3f:d0:ba:46:2c:61:f6:
38:5a:ef:cc:f3:7f:03:82:07:a9:71:97:59:4c:d7:15:0c:50:
e2:d5:8a:9c:07:c3:03:9c:31:e2:89:4b:33:c3:74:7c:2e:59:
36:b4:e6:96:fc:78:78:ee:44:66:10:62:ee:e8:a3:a0:0a:39:
a2:b3:28:bc:70:fd:22:a4:4a:7d:1e:8d:1d:4c:ca:19:59:1d:
18:00:e5:5c:83:71:67:28:ce:b3:a7:ef:ea:5b:bf:a5:b2:4a:
14:fc:dc:39:95:f6:fb:31:db:ef:6f:28:aa:35:12:f6:72:47:
fe:8e:76:a8:69:b4:35:31:e2:8b:43:2b:4c:21:af:e9:ca:e2:
a7:2e:ea:b7:c3:8e:ed:a2:9d:be:c8:4e:a7:ef:2e:ed:c4:b5:
cb:b0:0e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:06:48 2026 by rpki-client