Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
File: ErmEbY911kX_YwjOAwCHopfms1k.mft (raw, json)
Hash identifier: hZTVkrj8jxid/R5Hwjo7qOWgkU/0cmdEYGTtF7rffpI=
Subject key identifier: F0:92:9F:59:2A:F1:98:96:B9:E3:B6:4E:94:BD:11:3A:6F:3E:37:AE
Authority key identifier: 12:B9:84:6D:8F:75:D6:45:FF:63:08:CE:03:00:87:A2:97:E6:B3:59
Certificate issuer: /CN=12b9846d8f75d645ff6308ce030087a297e6b359
Certificate serial: 019D2B8553450F185DBC78FFF66CAA296F3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
Manifest number: 16AA
Signing time: Thu 26 Mar 2026 19:00:50 +0000
Manifest this update: Thu 26 Mar 2026 19:00:50 +0000
Manifest next update: Fri 27 Mar 2026 19:00:50 +0000
Files and hashes: 1: 0bgPaSS9Ae0rB9f1u5QtAJZ7vjQ.roa (hash: IFhoLkFpjChfV3wyKbItrjVFxiC4Oyb3ylSVZABFfD0=)
2: ErmEbY911kX_YwjOAwCHopfms1k.crl (hash: ynbgmlldlYxqn8Zb27/ke/NZcKjng+9/+HrPvHKO8No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:53:45:0f:18:5d:bc:78:ff:f6:6c:aa:29:6f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b9846d8f75d645ff6308ce030087a297e6b359
Validity
Not Before: Mar 26 19:00:50 2026 GMT
Not After : Mar 27 19:00:50 2026 GMT
Subject: CN=f0929f592af19896b9e3b64e94bd113a6f3e37ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:12:11:4d:5f:eb:be:6b:77:cf:dc:18:8e:30:
3d:9d:9e:f5:94:d4:90:cb:81:be:38:1d:77:27:7a:
0e:23:4e:45:e9:03:10:5d:c2:4f:7a:b6:81:a5:c6:
24:94:70:38:4e:ad:45:20:8a:cb:e8:27:2e:2b:89:
33:c0:ba:bb:da:ad:6a:13:72:30:1d:59:34:ee:73:
98:13:95:76:94:e4:cb:85:87:d0:ec:f8:2f:89:17:
24:a3:9c:8f:b1:6a:be:a0:80:ce:fd:45:4b:8b:6c:
a5:cb:a3:7a:a9:7b:6c:89:35:53:a5:6b:01:05:f2:
85:ad:11:ef:e7:11:31:ab:0e:7e:08:6e:be:e3:d2:
2d:7b:72:8b:23:c3:0e:a8:af:23:fb:cc:bd:87:14:
f2:e5:10:a9:3f:d2:27:78:36:05:27:6b:45:3f:4c:
80:01:4a:72:9e:80:83:33:41:c6:5d:96:da:6b:e4:
d1:a8:34:d8:25:31:5f:96:47:12:a9:fd:48:f0:ad:
1a:d7:ed:64:c7:a0:a8:a9:f0:3c:c9:df:25:98:2b:
00:f4:9f:03:16:6d:3d:e0:2b:ee:1f:17:e9:d2:14:
ea:c2:93:ae:84:e4:37:0a:19:a3:68:31:70:ff:fd:
2f:11:47:5f:37:6c:5f:1d:f9:c1:88:6f:5e:bb:8b:
6e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:92:9F:59:2A:F1:98:96:B9:E3:B6:4E:94:BD:11:3A:6F:3E:37:AE
X509v3 Authority Key Identifier:
keyid:12:B9:84:6D:8F:75:D6:45:FF:63:08:CE:03:00:87:A2:97:E6:B3:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c1:7e:b9:65:16:92:f1:90:87:2f:af:46:44:2f:86:be:0b:
0e:27:be:79:3f:bf:11:ad:d5:ed:ae:fb:0a:e1:09:ab:5c:4d:
bc:28:de:d8:23:96:cd:fe:ce:a2:b2:27:42:83:01:91:5e:ba:
78:3b:69:aa:07:c5:97:58:18:fd:a7:df:19:53:fb:60:08:47:
a4:8c:54:fa:19:f5:12:95:cc:99:52:30:76:6e:1c:43:e4:3b:
e1:fe:43:af:76:c3:0c:e1:f9:32:26:c7:61:4a:d2:00:6a:62:
97:73:5c:98:a1:f5:4f:52:75:74:ca:c0:69:f8:b4:6b:59:82:
a8:57:7b:86:9d:e3:aa:b7:e2:07:28:85:37:65:53:8c:3b:b4:
8c:85:3c:57:e9:c8:de:e2:e3:c2:e1:8c:51:cd:36:35:eb:43:
f9:a7:4d:ca:fe:2e:95:ec:ea:d2:d9:c4:f1:5b:c7:46:02:30:
9d:3a:a6:df:fa:57:59:9a:84:a9:26:65:58:10:06:60:fb:0b:
02:0f:f4:00:32:8f:18:77:2a:1c:01:93:7e:e7:a7:d6:98:5c:
ec:53:fb:d4:87:79:51:9e:cf:fc:e7:4f:45:09:d7:e0:f1:b7:
68:c9:7f:60:0f:cf:49:9b:63:88:5d:d9:b2:fb:fd:93:17:e8:
5f:ef:be:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:20:50 2026 by rpki-client