Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
File: er4RhD2-gDQLJGD8Fg7GubiPIio.mft (raw, json)
Hash identifier: tjG+id8qF/rbyMY8QUsSmBK9BRUxdaFDVN8B+tJZZbk=
Subject key identifier: 5F:6C:61:79:73:56:89:9F:17:04:8F:02:B8:D1:82:EF:B2:88:A3:57
Authority key identifier: 7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
Certificate issuer: /CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Certificate serial: 019D284D842518C6BB3B2DAA1419B9239114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
Manifest number: 0C17
Signing time: Thu 26 Mar 2026 04:01:01 +0000
Manifest this update: Thu 26 Mar 2026 04:01:01 +0000
Manifest next update: Fri 27 Mar 2026 04:01:01 +0000
Files and hashes: 1: er4RhD2-gDQLJGD8Fg7GubiPIio.crl (hash: QK2sy+b/A7/UM5Q8RsDny+8SubP2rMulWHQf3xdtTGc=)
2: o7A96UnzoRTZUSuVj7u0eveSlFA.roa (hash: FF0zn80ZmtefbQSduZMh5HE52BLjPHqOv0VeweTxfaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:84:25:18:c6:bb:3b:2d:aa:14:19:b9:23:91:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Validity
Not Before: Mar 26 04:01:01 2026 GMT
Not After : Mar 27 04:01:01 2026 GMT
Subject: CN=5f6c61797356899f17048f02b8d182efb288a357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:36:c7:7d:85:6d:0f:5f:75:e4:a1:16:50:1a:
b1:df:2e:49:dd:74:53:5d:96:71:0d:fa:5f:57:f1:
75:e3:35:be:33:8d:7e:fd:fa:06:9f:a8:c8:ff:19:
33:8f:ab:70:9d:4a:3c:89:63:67:b3:ce:21:e9:7c:
23:e8:f8:66:e9:65:fc:64:d8:9b:8e:1b:a9:bd:a8:
94:27:63:ea:8c:07:ed:cc:e0:61:3c:a5:76:58:a9:
9d:35:39:b1:73:e9:88:99:6d:17:6f:ce:5d:96:0a:
97:4c:84:ea:ff:23:5f:d4:44:8e:a6:9d:d3:04:d1:
5e:4f:0e:e7:cd:95:d9:81:fa:12:8e:ee:ff:a2:e3:
ff:74:9e:44:68:1a:37:e0:b4:80:0d:84:14:f7:62:
41:87:5a:d4:4d:4f:94:07:bb:87:e8:e7:03:62:d9:
f9:ce:2a:85:99:0c:bf:01:cb:57:7d:d9:05:d7:33:
17:73:c5:cc:85:76:c4:7b:c9:c3:8b:11:1e:58:1c:
36:ca:b5:3f:c6:26:f8:86:13:64:c3:ee:7a:43:04:
95:94:89:82:fe:b0:49:6e:9b:2f:b5:d7:40:2d:2d:
c4:d8:70:eb:1d:df:7a:c3:85:eb:65:36:6d:8b:5f:
fc:7a:9e:09:af:06:61:0f:d2:99:99:f5:b7:18:6a:
ed:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6C:61:79:73:56:89:9F:17:04:8F:02:B8:D1:82:EF:B2:88:A3:57
X509v3 Authority Key Identifier:
keyid:7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:71:10:f5:61:7f:10:08:bb:4f:8b:68:df:cd:5b:f1:20:c8:
a5:21:3a:14:70:c2:1f:1e:01:da:58:84:b6:b5:66:f4:d5:e1:
5e:e4:22:33:43:89:57:f2:48:40:a5:96:27:0a:f8:9b:7f:72:
57:3e:56:b4:3a:6a:7f:f8:9f:86:9b:7a:1a:42:b0:61:5a:2b:
23:c6:82:29:fd:39:01:67:e7:51:48:df:10:8a:f1:4f:48:6d:
3e:5f:ab:ab:6b:10:45:9c:b9:28:0a:9f:4b:39:22:db:85:fe:
ba:34:c2:86:8a:0c:6e:24:c2:30:31:17:22:28:46:e5:cd:10:
b2:ee:f0:52:ab:bb:00:14:0f:63:14:3b:8e:83:9d:8f:59:d0:
64:9f:f2:20:dc:b2:94:01:01:60:7d:86:fd:0f:ed:60:d6:5d:
76:ac:1f:64:45:ef:8f:9b:f2:22:5e:da:12:8d:f1:7c:04:2a:
96:b2:3f:b1:dd:9b:7e:d3:d8:b2:f7:a7:62:6a:58:e5:04:41:
60:9f:8a:7b:66:32:19:23:90:83:18:04:80:ea:c7:4a:3a:9a:
1c:ef:c2:44:88:fc:0f:82:5e:6c:1f:c7:39:47:a7:e7:f4:97:
92:71:35:4d:25:c1:88:50:75:a2:dd:6c:4f:e3:fb:71:46:e8:
b7:7b:1f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:32:46 2026 by rpki-client