Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
File: ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft (raw, json)
Hash identifier: 5Fbi4TcSf3hziEeLw/QsCy1KrUycqhZS/SjV/Pj+tHY=
Subject key identifier: 00:F9:68:BF:A1:F2:04:B5:28:DB:6A:B3:6D:0A:3F:A8:80:CB:18:7C
Authority key identifier: 11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
Certificate issuer: /CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Certificate serial: 019F935BA7DFDF28DBE9F6A2F3A134743A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 09:01:25 +0000
Manifest this update: Fri 24 Jul 2026 09:01:25 +0000
Manifest next update: Sat 25 Jul 2026 09:01:25 +0000
Files and hashes: 1: ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl (hash: sTGfboxj4wiGM0obIrtqypoZULXtqQSfTPwJ1lbs9O0=)
2: h4hw0o1BGCO1IauXuWvv1pBVH-c.roa (hash: 5IBae8jcl3eOYKt23qLWVmfDo0rcP1nvWM8WUvRm6eI=)
3: lSj7G66n_Zbfp5QixdzpYlLB0i4.roa (hash: flGRTyUdnWXMFICIWjCtri2/GPHC/mh1hngklA/vSAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:a7:df:df:28:db:e9:f6:a2:f3:a1:34:74:3a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Validity
Not Before: Jul 24 09:01:25 2026 GMT
Not After : Jul 25 09:01:25 2026 GMT
Subject: CN=00f968bfa1f204b528db6ab36d0a3fa880cb187c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:36:2c:86:92:d9:4d:bc:3a:74:72:e2:87:
5d:71:66:f2:b2:3b:de:e2:c2:49:35:35:31:2f:51:
ad:24:5c:59:34:53:78:77:ea:d2:09:ae:9b:5a:88:
7d:a7:9d:9a:5a:c4:ea:2e:0b:92:ce:ae:b1:cc:62:
59:84:20:05:7a:41:dc:52:55:b2:e8:5a:78:47:9c:
dc:00:7b:85:e0:ec:f9:04:d8:87:b9:66:7e:ae:b1:
a3:cd:46:92:9a:8f:aa:d3:39:5d:34:93:6e:e6:d2:
61:0e:ab:a5:73:eb:d1:41:9d:bd:2f:bb:85:af:f8:
b5:b9:a3:9a:11:01:49:dc:be:bf:14:b0:dd:04:7c:
07:06:4b:50:ba:6f:6c:8c:ee:b2:7a:4b:b7:81:f5:
b4:58:d4:93:ba:4d:58:d7:ae:07:6f:89:d2:1e:e8:
59:f8:75:7a:c6:46:56:11:e3:1f:8b:2c:eb:b3:9b:
fc:43:ad:d7:25:0c:0f:fe:4a:40:5e:94:cd:ad:7c:
b1:5e:28:28:84:71:4f:68:25:61:12:00:27:58:d6:
85:bb:11:f5:ce:7c:82:dd:14:03:cb:a8:c6:87:9a:
75:56:a3:9b:e4:80:20:42:ad:d6:74:e9:1a:ed:08:
0e:cb:e3:3d:e1:a3:6c:b5:77:77:34:fb:9b:25:2c:
e0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F9:68:BF:A1:F2:04:B5:28:DB:6A:B3:6D:0A:3F:A8:80:CB:18:7C
X509v3 Authority Key Identifier:
keyid:11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d9:15:27:8a:7c:88:4c:57:95:fa:09:2e:d8:fd:5d:2e:fc:
75:fd:ea:c4:b0:44:79:17:f0:5d:41:04:56:6d:87:a2:e0:3d:
1b:00:6e:dd:e7:38:e8:b6:6d:70:bf:c3:30:80:99:ed:dd:d7:
74:0a:49:9d:0f:ef:33:1e:0a:ab:f4:c8:f4:96:39:6f:8d:30:
c1:57:4b:bb:dc:5b:a1:d4:52:4a:3a:11:d5:21:c3:8b:59:75:
e0:f3:fc:66:18:88:8b:55:b7:a6:f7:31:c4:b9:89:4c:ed:7b:
1d:99:a8:ba:b3:09:3c:eb:36:7c:f8:6e:5c:27:c0:46:47:ff:
17:ad:52:47:bf:09:7f:d6:24:73:03:c0:3a:81:fc:03:7e:82:
66:bd:fc:2f:0e:e9:e3:da:c8:7d:f1:3a:06:6d:9d:04:15:f1:
61:67:c7:45:6b:e6:79:1b:e3:b1:54:34:c5:cc:93:2c:98:de:
cb:22:8e:7f:f7:ca:75:b9:7c:9e:65:ee:71:9b:9c:df:f9:d6:
e6:f0:55:cf:7f:49:95:8e:06:05:9c:70:d2:f3:f6:1a:02:b4:
72:2f:33:bb:64:41:e1:27:6b:81:43:22:11:6d:81:50:41:11:
29:7f:cc:27:66:77:fe:74:3b:d8:be:a5:53:9b:3e:d0:10:67:
75:7c:39:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:09:09 2026 by rpki-client