Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
File: ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft (raw, json)
Hash identifier: JSOc7ymz6I7CwyuepRIE9pfYH5eGdTOcFrS9oUjtgdY=
Subject key identifier: 88:09:76:34:0A:D6:74:CA:87:4C:83:F3:F4:97:64:18:AE:EA:3E:6A
Authority key identifier: 11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
Certificate issuer: /CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Certificate serial: 01A0D5DEB1CADD130C0B7D96EEFEC7A43E8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 00:02:16 +0000
Manifest this update: Fri 25 Sep 2026 00:02:16 +0000
Manifest next update: Sat 26 Sep 2026 00:02:16 +0000
Files and hashes: 1: ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl (hash: l59b3l1Q+cgjasWa9zMtkUYa1zaoq7RT2vlP3ZVh+RE=)
2: h4hw0o1BGCO1IauXuWvv1pBVH-c.roa (hash: 5IBae8jcl3eOYKt23qLWVmfDo0rcP1nvWM8WUvRm6eI=)
3: lSj7G66n_Zbfp5QixdzpYlLB0i4.roa (hash: flGRTyUdnWXMFICIWjCtri2/GPHC/mh1hngklA/vSAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:b1:ca:dd:13:0c:0b:7d:96:ee:fe:c7:a4:3e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Validity
Not Before: Sep 25 00:02:16 2026 GMT
Not After : Sep 26 00:02:16 2026 GMT
Subject: CN=880976340ad674ca874c83f3f4976418aeea3e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:89:25:d4:7c:a1:ae:cf:c5:e9:9a:39:ac:1e:
fc:38:1d:11:b4:a5:09:7e:3e:95:28:f8:04:05:8a:
4f:a5:b5:ca:53:c6:6d:b6:05:e9:aa:22:55:bc:08:
30:a5:50:c0:4e:8f:a4:60:b5:58:00:35:87:cb:f9:
8b:09:ac:57:5d:81:0f:07:a2:3f:26:78:69:7a:0f:
78:e0:73:b2:5b:3e:7e:ee:56:3b:4a:85:77:41:67:
ef:d7:8e:ce:63:13:be:61:8f:a7:7c:6e:59:0c:14:
31:3c:31:61:7b:a9:bc:16:cf:43:83:92:40:7c:a7:
8f:50:11:d4:d7:28:32:47:8b:ac:69:e7:0e:b1:ab:
fa:e5:9b:e3:e9:a4:c1:05:af:c3:e2:d2:fd:87:69:
17:af:02:d0:8b:6c:c2:4c:82:66:66:7e:39:3a:18:
aa:54:2e:78:a9:5f:19:10:bd:3a:b9:d5:6c:d8:ac:
97:e5:f7:5a:ed:e3:80:a0:65:9c:4a:2c:1c:f4:08:
66:cf:1c:7b:63:fd:28:a2:7f:25:41:d3:73:da:85:
15:08:f8:cc:a8:8c:05:5b:a5:fa:af:26:dc:cd:66:
5f:ce:e7:fc:b5:c5:50:73:17:3f:2f:58:93:7c:54:
7d:c8:5c:33:bc:5c:ac:8a:1f:0e:40:48:3e:54:75:
ab:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:09:76:34:0A:D6:74:CA:87:4C:83:F3:F4:97:64:18:AE:EA:3E:6A
X509v3 Authority Key Identifier:
keyid:11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:33:e8:d8:8e:5d:8e:a5:f2:b4:c1:57:7d:0a:0e:97:82:f1:
a3:b0:fe:7e:8d:9b:ac:f5:4b:dc:fa:0b:3b:1d:2d:45:4f:50:
4d:87:5b:28:32:66:60:7b:ca:78:e0:3e:55:b1:3b:a4:ad:c3:
4c:8f:25:1b:fc:7a:31:d0:30:ed:5b:5a:c3:71:6e:cc:9c:b6:
60:e8:28:30:37:8d:b0:ee:a0:65:72:b2:1d:2d:70:fa:29:d7:
89:66:9e:94:98:b1:12:03:0b:22:e6:20:96:89:07:c5:6e:f2:
af:87:75:ca:c9:6f:98:96:a9:4e:08:bb:62:fb:05:6d:57:e4:
72:53:da:da:68:f4:e1:10:50:87:f0:54:bf:57:fc:5a:02:f1:
e0:c7:24:f2:38:3a:d3:41:d7:f4:85:80:9f:34:ef:d0:70:0b:
9c:be:26:07:8f:ea:25:51:a5:17:13:5e:35:7b:9c:95:59:bb:
4c:b0:39:0d:b0:dc:a4:3d:b3:d4:2a:5f:b8:21:27:b7:01:13:
bb:fc:c0:9a:12:e2:af:6c:84:57:55:6e:75:05:ce:01:e7:fa:
23:e9:42:e7:65:df:0c:45:fe:19:b3:41:b7:65:2b:61:05:8a:
06:35:73:78:f9:f4:7a:86:f8:ca:fd:b0:f1:84:7c:19:ff:d2:
34:29:fc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:40:42 2026 by rpki-client