Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft
File: erqgtAKPBzwFZKZYtPuIhsvI0-s.mft (raw, json)
Hash identifier: yQBfGzU81De1+DA/N6Och2Xg6GdX1nYAJ9+Gd0kRiK8=
Subject key identifier: 6C:25:ED:65:0B:3B:31:66:A0:F1:F0:18:C5:28:A1:D7:4F:1A:4E:DD
Authority key identifier: 7A:BA:A0:B4:02:8F:07:3C:05:64:A6:58:B4:FB:88:86:CB:C8:D3:EB
Certificate issuer: /CN=7abaa0b4028f073c0564a658b4fb8886cbc8d3eb
Certificate serial: 019D27DFEBE76A20DD49A6BDB5FC33F673FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft
Manifest number: 0465
Signing time: Thu 26 Mar 2026 02:01:19 +0000
Manifest this update: Thu 26 Mar 2026 02:01:19 +0000
Manifest next update: Fri 27 Mar 2026 02:01:19 +0000
Files and hashes: 1: 5kkE3XtE9ZnSspR1OcwpVp0TyV8.roa (hash: n0us7CHhoP1rKb4vN6/gR6gcwVv7Il8CmXn18T2tiXo=)
2: erqgtAKPBzwFZKZYtPuIhsvI0-s.crl (hash: je42aWS4nO+EIVAmkA0/YkM0Jgq6B2A5K7mfmfZPWyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:eb:e7:6a:20:dd:49:a6:bd:b5:fc:33:f6:73:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abaa0b4028f073c0564a658b4fb8886cbc8d3eb
Validity
Not Before: Mar 26 02:01:19 2026 GMT
Not After : Mar 27 02:01:19 2026 GMT
Subject: CN=6c25ed650b3b3166a0f1f018c528a1d74f1a4edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e1:e9:2a:22:85:9f:08:2a:71:cf:99:95:c5:
cd:18:9a:40:a7:1f:a4:88:c8:b1:47:58:ab:de:24:
f3:23:39:64:89:af:68:58:66:1f:a3:58:87:ba:93:
8a:21:b5:2a:55:f8:96:22:69:83:61:19:e1:bd:d3:
01:a3:36:8f:17:2e:e5:bf:03:82:c6:4f:ee:c1:8e:
13:18:37:2b:e6:16:94:f1:58:af:b6:bc:b3:01:f0:
0e:16:24:85:a3:c7:f4:62:9f:4b:87:5c:52:54:74:
4b:08:5e:c2:66:0d:67:f4:47:6e:04:b3:2a:3f:f6:
54:c1:45:b3:e8:77:5e:80:2a:c7:70:87:23:ee:0b:
87:9b:c0:a3:d1:38:8b:f5:04:7f:ae:ed:c1:e8:e5:
aa:f3:e9:c8:f9:d0:8c:05:fd:13:a6:2c:64:3b:12:
bd:39:04:a7:38:c9:93:41:a2:3d:9a:4e:87:e5:66:
fa:d9:ec:36:40:e6:d7:0c:9f:08:67:b0:6a:32:bf:
f6:a1:45:f7:01:cd:ca:f6:50:6d:8c:33:dc:d9:73:
ba:6f:f2:3e:92:da:41:18:92:7d:f9:56:c6:43:84:
40:19:e1:de:8c:7f:30:1a:f1:53:1d:ee:81:42:33:
8b:18:02:44:a4:0b:8a:36:06:31:25:cb:d2:a3:27:
fa:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:25:ED:65:0B:3B:31:66:A0:F1:F0:18:C5:28:A1:D7:4F:1A:4E:DD
X509v3 Authority Key Identifier:
keyid:7A:BA:A0:B4:02:8F:07:3C:05:64:A6:58:B4:FB:88:86:CB:C8:D3:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f8:ed:e6:70:54:2e:58:dd:9a:28:4d:ce:c2:f7:49:bb:cc:
19:2c:98:be:cb:08:14:64:14:39:45:71:9c:f7:48:ec:ce:bb:
c8:8d:5e:ef:7f:14:d0:9a:f0:14:85:ad:6a:db:31:38:c2:b2:
1f:9f:f4:6e:84:17:aa:ae:f5:37:e5:0b:92:33:86:3f:21:2d:
7d:4b:4e:07:43:9c:1a:bf:df:6a:ae:4f:8f:c3:83:de:78:e2:
55:73:2f:27:da:31:b6:7b:a1:c6:25:68:ac:62:d9:41:85:76:
5a:6f:b3:c3:8a:9f:1a:a5:39:91:a8:1a:0a:46:7a:c8:b8:17:
bd:e2:96:16:b8:86:56:e2:83:1d:38:5a:14:97:c6:ef:51:c9:
dd:7e:57:77:48:d4:3f:ea:d5:58:54:ce:f9:61:c3:63:1d:94:
5f:93:53:a0:b5:98:9e:37:aa:9b:7b:ae:3e:18:4a:c6:4a:10:
63:99:a4:b3:f4:db:b8:37:4c:c3:ac:1c:bb:a6:19:3b:c3:66:
b9:72:e5:a3:08:4f:9f:3c:16:60:7e:0b:3c:e7:86:9d:08:ba:
f0:3f:9b:c5:af:33:83:31:6e:8e:07:d6:98:59:57:56:f2:d0:
61:0f:9c:4e:f2:15:e5:f2:fd:9e:39:53:dd:b5:a5:47:fd:c7:
fb:e3:28:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:16 2026 by rpki-client