Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
File: ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft (raw, json)
Hash identifier: o3cRo8clVFUiCw/X3Lfv/8BABwpNWyPtKnPi+zFmuYY=
Subject key identifier: 90:45:FF:5D:F1:87:34:D6:D8:8C:66:E6:71:AE:88:D2:64:9F:6E:2B
Authority key identifier: 11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
Certificate issuer: /CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Certificate serial: 019D25839F256615CC4FAE5B59A5381F4E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 15:01:16 +0000
Manifest this update: Wed 25 Mar 2026 15:01:16 +0000
Manifest next update: Thu 26 Mar 2026 15:01:16 +0000
Files and hashes: 1: ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl (hash: hW07tr5qbR7iJkzQaltFfpbIJ/bs/jD/OgbPu3nvSaQ=)
2: h4hw0o1BGCO1IauXuWvv1pBVH-c.roa (hash: 5IBae8jcl3eOYKt23qLWVmfDo0rcP1nvWM8WUvRm6eI=)
3: lSj7G66n_Zbfp5QixdzpYlLB0i4.roa (hash: flGRTyUdnWXMFICIWjCtri2/GPHC/mh1hngklA/vSAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:9f:25:66:15:cc:4f:ae:5b:59:a5:38:1f:4e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Validity
Not Before: Mar 25 15:01:16 2026 GMT
Not After : Mar 26 15:01:16 2026 GMT
Subject: CN=9045ff5df18734d6d88c66e671ae88d2649f6e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ad:3a:42:2a:ca:37:05:c0:b9:66:09:ea:b4:
da:fa:8e:23:1e:8b:0b:86:46:66:a3:9d:60:14:d6:
6d:6c:b9:28:18:31:5a:c1:7d:62:0e:a2:6b:01:40:
54:49:3e:bf:cf:f0:08:27:7e:00:0f:3a:29:b6:15:
4f:2f:0a:33:ee:e9:4f:2a:c9:29:75:5c:e3:5f:a1:
fd:4a:b1:46:a8:e8:b0:06:5c:2b:e8:d0:8a:4b:43:
d5:f7:af:dc:01:e3:2e:5f:ae:f3:dd:26:cb:e6:39:
45:94:79:27:3a:5f:62:b3:37:2c:11:f6:90:9b:e6:
e1:c2:c0:4c:d3:f0:3d:8a:17:d9:c4:65:d7:5c:30:
2d:73:f2:5b:90:40:59:6f:2c:a4:c9:49:c7:2c:c6:
dc:21:c7:1d:02:12:a6:23:e3:b0:d5:3a:98:37:28:
81:75:fe:e9:fe:e6:db:d9:bf:5a:d0:dc:ac:fd:0f:
56:93:12:c5:5e:19:50:f2:a2:94:f6:4a:f8:1a:d3:
bd:de:99:85:9a:d8:3b:94:8e:93:63:3f:ae:ca:d5:
25:df:0b:25:00:b6:59:24:62:a3:25:2d:8d:41:21:
a2:64:cd:1a:55:a6:7e:f6:f7:c5:89:99:e8:82:13:
c0:30:ab:07:ab:03:fc:2f:b0:4b:bb:e6:40:e0:ed:
a5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:45:FF:5D:F1:87:34:D6:D8:8C:66:E6:71:AE:88:D2:64:9F:6E:2B
X509v3 Authority Key Identifier:
keyid:11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:bb:fb:85:02:04:c2:a1:f6:28:1c:47:9a:ea:80:62:65:76:
a2:95:00:a3:f9:fe:0a:8a:c3:f6:d7:7b:4f:f0:d6:9a:7b:d6:
8b:e9:f5:50:fd:9a:7d:c7:53:07:04:c2:ef:d6:77:40:cd:8b:
9e:18:6f:93:7a:75:fa:5b:d1:a7:23:7e:ee:89:33:e8:c0:96:
a2:30:b8:34:09:0a:aa:19:43:4a:7e:90:8e:f6:e8:8e:97:b8:
82:52:f6:4b:59:52:03:02:09:2e:9f:8b:a7:4c:81:f5:93:22:
cf:af:b2:fe:cf:ae:0e:74:b3:06:d5:28:ba:c1:56:2c:1c:ae:
20:e7:e1:c9:cd:7e:64:cd:4a:ce:ba:f1:05:0d:9c:4e:ea:fa:
2c:e5:2b:ec:9d:ef:e3:b5:8b:46:8f:23:60:15:da:92:93:37:
69:1f:d8:88:38:1b:2d:bc:e8:99:39:ad:57:37:1b:22:16:94:
65:0b:e6:97:ef:cd:b6:be:f9:79:42:2b:d3:2e:d9:c3:2e:d7:
d6:59:1a:2b:5d:9f:5c:22:41:e8:30:a7:17:9e:47:83:f5:d2:
30:ef:5a:ad:25:c8:e4:b4:61:a3:b7:a1:9c:ed:9b:27:e5:b9:
76:83:00:d2:5f:3e:7b:ef:e6:b1:92:a9:0c:8b:d9:4c:43:0d:
68:4a:36:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:50 2026 by rpki-client