Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
File: Elriz9MVwTEZNIRmWsrafAExY-w.mft (raw, json)
Hash identifier: BIkDmMab0pRbn4o/sEinEI6lRnOGvK6Mli8sWvJ6grI=
Subject key identifier: 4E:9D:EC:A0:8E:06:59:EF:4E:F6:B9:0F:E2:57:E4:11:0D:4D:02:7E
Authority key identifier: 12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC
Certificate issuer: /CN=125ae2cfd315c131193484665acada7c013163ec
Certificate serial: 019D265F2F936D9A0C8C1F302EA7658AD43E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
Manifest number: 188F
Signing time: Wed 25 Mar 2026 19:01:05 +0000
Manifest this update: Wed 25 Mar 2026 19:01:05 +0000
Manifest next update: Thu 26 Mar 2026 19:01:05 +0000
Files and hashes: 1: Elriz9MVwTEZNIRmWsrafAExY-w.crl (hash: G+Duldz+BW8bNeKg7q9DmPm9aS23CSbeTlf6tzp7uTY=)
2: tzM4Lhas_5Err3uhIOugP7tZ2zA.roa (hash: O2meUFIJ8JO+/3JVTDSwDnZ6NU03UbjSV1N5GHCHgZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:2f:93:6d:9a:0c:8c:1f:30:2e:a7:65:8a:d4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=125ae2cfd315c131193484665acada7c013163ec
Validity
Not Before: Mar 25 19:01:05 2026 GMT
Not After : Mar 26 19:01:05 2026 GMT
Subject: CN=4e9deca08e0659ef4ef6b90fe257e4110d4d027e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:bb:20:53:dd:86:67:5a:41:d3:b8:d9:05:2b:
8e:4a:ae:c2:ac:c1:46:89:1a:60:b9:1b:0d:dd:89:
60:2d:d9:cd:27:18:b0:06:99:ca:01:18:74:eb:98:
30:bf:4f:e6:f9:76:02:1b:d7:34:1c:40:1e:e1:74:
8b:4e:32:e3:12:2f:2a:b5:cc:c8:c0:fc:22:4b:70:
17:9c:e5:5e:2c:f1:d0:8e:6c:f8:2c:98:da:e3:ec:
fd:db:06:8c:25:07:91:ab:1a:02:c0:34:75:a7:75:
21:aa:75:17:82:1b:3e:64:d3:03:66:cd:91:b9:4a:
41:51:ea:9a:b3:67:8b:a5:fd:4e:fa:24:da:eb:22:
e4:a8:76:22:c8:59:c8:a5:a2:4a:a0:a0:46:c5:ff:
74:44:0e:0f:51:2a:63:34:21:64:40:bb:5e:64:1f:
9c:b2:73:33:09:8b:58:2c:f6:6f:65:fe:b3:19:79:
c3:74:46:69:d8:94:25:f1:30:82:1c:ee:c3:10:35:
ec:67:8e:db:60:9e:a4:fd:d5:1a:c6:0c:e4:8a:e5:
78:ed:6d:2d:ce:e9:17:1b:86:c1:7f:88:f6:b4:5f:
62:c7:5d:cd:80:f5:00:bf:55:a9:e2:85:2d:f2:1d:
98:e8:be:1d:b6:ae:e3:72:f2:60:63:bd:d4:71:f0:
0a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9D:EC:A0:8E:06:59:EF:4E:F6:B9:0F:E2:57:E4:11:0D:4D:02:7E
X509v3 Authority Key Identifier:
keyid:12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c6:26:93:ad:47:2a:21:e3:f1:cf:b4:47:f2:8f:7a:14:db:
39:67:a4:43:39:d8:49:20:5b:33:2e:60:14:06:6e:29:06:5c:
4b:bf:10:c0:ac:bd:fd:b9:6f:d5:34:f8:2b:77:2d:fe:5f:28:
3b:24:1e:40:84:e9:ef:b1:70:14:7e:35:55:30:22:12:d7:e2:
9c:9b:9f:ae:f9:1b:8e:4c:f7:c4:bb:c4:ad:ec:71:70:b5:38:
32:48:25:be:76:bc:88:12:d1:c9:88:cb:6d:1a:bd:5b:1f:a0:
66:60:6d:35:02:66:2a:c1:af:41:29:5b:f9:6e:a5:df:3d:8d:
25:9a:be:2b:45:19:b0:e4:b6:91:c1:64:de:b1:a6:35:cc:a2:
73:7e:be:5d:56:a2:3a:30:ee:8a:35:1e:55:16:9b:b6:04:93:
75:db:8f:64:03:9a:41:c1:4c:0f:18:43:27:09:0b:37:d0:a7:
f1:df:77:9e:6d:bb:52:c0:25:44:fe:94:cc:a5:6f:38:11:3a:
1b:74:f2:d2:e1:81:0a:02:0b:88:c5:b8:f9:75:11:c3:eb:87:
0d:e3:11:94:8e:dc:3b:53:25:1e:ed:b4:b0:4a:33:1e:e6:77:
fa:1d:b0:6d:5c:03:a4:d5:1d:cd:74:71:fa:f1:e3:fa:e7:7f:
cb:9d:49:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:07 2026 by rpki-client