Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
File: ERAUzorTjRU1AJbVSe4cWAXQncg.mft (raw, json)
Hash identifier: F6/+hNy8cMWNtanDTN8MZhZdgKMvzqRr9NHj4W1EDZ4=
Subject key identifier: 57:9D:43:28:DD:98:C0:4C:D5:6C:80:4E:B4:5A:E3:2A:72:94:DA:78
Authority key identifier: 11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8
Certificate issuer: /CN=111014ce8ad38d15350096d549ee1c5805d09dc8
Certificate serial: 019D26280131E0F9E5C9298C8F2AA323A1CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 18:00:49 +0000
Manifest this update: Wed 25 Mar 2026 18:00:49 +0000
Manifest next update: Thu 26 Mar 2026 18:00:49 +0000
Files and hashes: 1: ERAUzorTjRU1AJbVSe4cWAXQncg.crl (hash: cypWJ4EA082og1Ta4hU7js2Kbpt7TO3vqC9SGdPS/rY=)
2: ZPA0yTEgbeGTPx3uVMlT6oTLbXM.roa (hash: 1cNaYSmAVMmYxCmd/+BHA+BklNBA0EPt0mpd9OexoGk=)
3: eZKM8TJMYeLWEyu920Ld75NcinM.roa (hash: tmv3AASNUdy6CqfMaQz0xtQC6GhRK7nXqdtlIL9UhUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:01:31:e0:f9:e5:c9:29:8c:8f:2a:a3:23:a1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111014ce8ad38d15350096d549ee1c5805d09dc8
Validity
Not Before: Mar 25 18:00:49 2026 GMT
Not After : Mar 26 18:00:49 2026 GMT
Subject: CN=579d4328dd98c04cd56c804eb45ae32a7294da78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:31:e7:5a:97:e2:a7:b0:ab:de:67:b7:73:a0:
f4:e0:7d:a9:e8:49:d8:34:00:ec:d8:cb:17:4a:a4:
3f:00:6d:8b:a9:35:c2:34:18:7b:48:8d:62:e8:35:
04:eb:31:30:70:94:12:3b:57:83:73:76:92:65:ca:
b7:0c:70:a6:1e:13:af:ee:7c:fb:e3:18:03:36:14:
3b:c5:d8:7a:85:ca:4b:2f:72:8d:11:f1:ef:59:a8:
b6:a8:70:d2:ad:3b:bf:ab:7d:a4:dd:c8:ac:bb:03:
5e:fd:ed:d1:e8:e5:a3:3f:9c:13:21:27:bd:00:2e:
24:50:98:59:54:40:a2:34:db:d7:3c:aa:0b:10:78:
4c:9a:af:0d:9b:61:ea:f3:1e:b2:46:66:d2:b3:4d:
12:15:8e:94:8c:a6:dc:53:1e:94:b2:c7:23:0a:8c:
da:3a:a5:85:6d:cf:03:99:bc:21:7d:1b:ca:d1:bf:
a6:16:99:2d:e9:d0:a2:f1:93:22:78:1b:58:25:a9:
1d:c6:f7:dd:29:24:a6:09:93:1a:62:fc:68:1b:25:
cf:55:4c:de:a8:26:65:30:4b:63:8f:86:ec:94:a3:
aa:fd:f0:c0:ff:f6:e6:58:d2:0c:9d:3e:ea:3d:f6:
1a:bf:66:10:50:d5:66:15:eb:90:d8:15:05:05:12:
dc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9D:43:28:DD:98:C0:4C:D5:6C:80:4E:B4:5A:E3:2A:72:94:DA:78
X509v3 Authority Key Identifier:
keyid:11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:db:87:e7:d3:91:90:11:36:da:3e:6a:95:31:a2:a0:4b:32:
67:7b:50:39:cf:38:25:82:44:cc:89:1b:87:c4:c3:b7:4f:75:
82:5a:71:81:3f:9c:6c:8b:43:61:2f:b9:e7:ba:49:07:0b:0b:
67:24:e0:68:35:15:94:a1:5a:30:b9:b1:56:f3:f7:ea:2f:42:
0e:00:4f:ef:af:d2:ca:5e:76:cc:14:41:65:9b:f0:8d:54:35:
d2:f5:e9:7a:a7:0f:72:55:a7:bc:27:9f:af:20:2d:01:34:cb:
65:aa:7f:3e:22:9d:b2:aa:ef:f5:a4:15:88:3e:fb:0e:1f:b6:
e4:15:2d:85:d4:75:f2:d0:0b:d4:36:f3:6b:4a:85:e8:b0:64:
43:47:94:69:d8:dd:83:2f:54:1b:a8:48:6f:2d:b3:3e:9e:f8:
9a:58:56:8a:d2:a3:85:69:2a:fc:1a:40:55:cd:d8:9b:c4:08:
b7:fd:07:c0:0f:b1:96:0f:bc:19:ec:b6:c1:a0:9f:f3:8a:1d:
09:1b:c8:14:2c:6a:83:b2:a3:ed:43:26:9e:b2:36:a4:3f:37:
e8:47:e7:4c:73:2d:8a:f4:b8:48:6c:a2:1d:18:97:be:d4:3d:
b8:15:a4:4e:cc:32:69:12:c8:3c:4c:27:a4:1c:71:43:81:df:
86:6c:b9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:43 2026 by rpki-client