Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
File: ERJUBMbdRy8QAe2f_fcmdirHcB0.mft (raw, json)
Hash identifier: 86U5tMc4e+sEMh0Sl3JzvjlSrF/AtzwtWGBslAslr80=
Subject key identifier: 6A:94:9C:A9:1B:9E:06:BC:18:08:CC:D4:A4:8F:51:ED:82:36:1D:6D
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Certificate issuer: /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial: 019E1D592BA8400DE0619DFB8AAF206683E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
Manifest number: 0558
Signing time: Tue 12 May 2026 18:00:43 +0000
Manifest this update: Tue 12 May 2026 18:00:43 +0000
Manifest next update: Wed 13 May 2026 18:00:43 +0000
Files and hashes: 1: 3bDW1BkII3G0VO8m207jGTh4u9Q.roa (hash: fHQIh04Zp5EtKmZlsuAi0f2uI5OmoylBy1KAnWj5sEY=)
2: 4c4lZly6HHaIn3VNqVSoI3aAMWg.roa (hash: PBhbI3oOnr9sdruKclXaXP1waBkJYiKgXCoZi2kNPsg=)
3: B033U8I90D9nbSqVDxG_vYMVGDE.roa (hash: RVPeY+Z8B+B/KYBUq3T2NRT96vo4mWrRs3gtPw92Sfc=)
4: CK4irD3so3QYUELVooAZ5qcjPWg.roa (hash: XO2MFAMj7H2U8wEyePG6rE+1Iaq81kv4zxsZhG9FwWk=)
5: ERJUBMbdRy8QAe2f_fcmdirHcB0.crl (hash: lBIHY8Ja8K9bMLacLeVqnkdQcmFvABMF+yqg9Esz7lg=)
6: VxlMtp46aGtX4_VrPgDQ6HvQbdE.roa (hash: W9RNPArWYdSPLq6QU2Lw7aPUbOCgd4YoDKP5U/vqtdY=)
7: gIV-PtLXLT4xOhl2M8ZDrRWJN2c.roa (hash: ez0j8r5ZrGXHsarz1DHJ3c6wCD32BsWkJMkUor30YR4=)
8: skB-Hezp9u6dMSW47ypzkcQMALM.roa (hash: 7DCWoB2xt0+UZjjo6BwRXpvUHyGYHyqHkNc8BdIa858=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:2b:a8:40:0d:e0:61:9d:fb:8a:af:20:66:83:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Validity
Not Before: May 12 18:00:43 2026 GMT
Not After : May 13 18:00:43 2026 GMT
Subject: CN=6a949ca91b9e06bc1808ccd4a48f51ed82361d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9f:06:fe:5a:27:2a:3e:8f:8a:bc:09:2c:7c:
11:f7:b5:74:49:94:d2:fd:8b:3f:2b:f2:b3:6f:9b:
2b:ff:20:ae:d2:76:a2:8c:da:64:46:6c:9a:cc:8d:
46:7d:4d:e5:34:8a:29:3d:70:c8:a5:96:74:f8:9c:
4c:f0:48:b9:0c:8e:7c:53:9f:c8:59:8a:4a:b3:7f:
78:d8:ca:ee:c2:db:27:f7:3e:cb:82:33:95:a2:b9:
39:e2:61:f9:49:b2:55:53:81:7a:2a:ab:5d:64:a7:
7c:53:47:f2:75:07:42:f8:53:11:76:07:75:e4:9b:
79:ce:93:9f:e3:03:61:0d:cc:59:fb:67:6a:47:9f:
2c:e6:39:67:b7:2e:a4:9a:f6:ea:36:0d:ff:bb:53:
d8:9d:9f:cf:33:21:f9:ef:b7:3d:c7:a5:b4:68:c9:
a5:d5:68:b0:a4:3d:45:aa:21:01:8d:dc:ca:d0:df:
b6:fb:94:3a:95:2f:4c:c7:75:f0:06:3f:5a:6a:11:
b5:8e:7a:fe:1b:b1:4b:2c:e4:77:00:c3:a0:95:f8:
68:71:7a:31:f4:2e:d2:36:e8:76:36:83:62:55:4d:
90:2d:00:b6:68:60:91:94:b0:f1:80:be:2b:f2:dd:
f5:4f:df:21:41:72:e2:dc:26:ae:6d:9c:96:1e:79:
1a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:94:9C:A9:1B:9E:06:BC:18:08:CC:D4:A4:8F:51:ED:82:36:1D:6D
X509v3 Authority Key Identifier:
keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:99:09:59:63:f3:94:a8:5a:ac:a4:66:89:8a:cf:71:ca:2c:
ff:85:c7:e7:c9:69:95:d0:51:4f:db:73:e5:e9:8a:58:ba:cf:
f0:e9:5e:ca:27:47:0c:d4:9e:a7:32:2a:63:60:ac:bd:07:60:
6d:19:83:18:36:90:85:48:25:e3:b4:e8:45:ff:dd:d3:c6:b7:
71:41:0f:a8:de:dd:cb:66:ba:56:69:80:6a:d4:90:7d:b3:60:
42:48:5f:42:17:7a:20:48:8c:7a:10:fc:fd:79:f6:8d:6d:d9:
34:ba:49:7c:97:5e:8f:15:16:2d:9f:da:bb:50:2c:65:60:91:
1d:ac:9e:15:43:81:0f:e4:a5:3c:f0:5e:d7:fb:3c:eb:ee:1a:
90:cc:5a:05:a4:0b:e8:61:9a:32:dc:b8:d7:6c:92:e7:b0:95:
bf:e6:eb:fb:ac:cb:bf:44:22:5c:32:d8:0d:70:2e:e7:df:43:
75:6d:22:e0:10:4b:13:0c:de:2b:cb:fc:a1:18:7c:41:74:f4:
7a:1c:8b:18:e7:a4:db:d0:fd:ec:76:9b:5e:7c:95:f3:5f:96:
e6:e6:8c:bb:df:0e:e4:39:c1:71:8d:3b:de:f0:6d:02:46:b3:
ce:2d:8e:1a:85:fc:b5:1d:2c:b3:c3:29:32:22:5d:42:06:5d:
16:4f:ab:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:38:35 2026 by rpki-client