Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
File: kERLB53wCKfHy-KPy6Xb4GIOjhc.mft (raw, json)
Hash identifier: TrYzERHCQbhpj8wVs2Ynpz+k929/cRoPu6WFQYF/4kY=
Subject key identifier: 83:CC:14:C5:ED:47:D3:F5:3E:FF:C7:F3:F7:7A:9A:43:F3:A7:43:09
Authority key identifier: 90:44:4B:07:9D:F0:08:A7:C7:CB:E2:8F:CB:A5:DB:E0:62:0E:8E:17
Certificate issuer: /CN=90444b079df008a7c7cbe28fcba5dbe0620e8e17
Certificate serial: 01A1803D19C56046CCB862B1414DA4811561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
Manifest number: 193A
Signing time: Wed 28 Oct 2026 02:00:50 +0000
Manifest this update: Wed 28 Oct 2026 02:00:50 +0000
Manifest next update: Thu 29 Oct 2026 02:00:50 +0000
Files and hashes: 1: kERLB53wCKfHy-KPy6Xb4GIOjhc.crl (hash: 7Eco/YA2AD48hpDsogf+scLPKlC2t0hFpmuY3JTsyy8=)
2: qh7XZDst8WsBCGjKLPzTSR00_9w.roa (hash: 91hvylgfnm1S7Q889lgwTcLMuKxZDx/xX3dO/XE0rko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:19:c5:60:46:cc:b8:62:b1:41:4d:a4:81:15:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90444b079df008a7c7cbe28fcba5dbe0620e8e17
Validity
Not Before: Oct 28 02:00:50 2026 GMT
Not After : Oct 29 02:00:50 2026 GMT
Subject: CN=83cc14c5ed47d3f53effc7f3f77a9a43f3a74309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3a:80:0c:a3:7b:66:d2:dc:7a:ef:7b:89:b1:
9c:27:52:fd:28:47:fb:a5:f6:60:b3:97:77:ab:ad:
be:f6:e6:de:6a:7a:36:34:fd:e2:37:13:1f:be:03:
8f:c4:f4:95:af:b8:ae:91:a1:33:d1:4e:24:b7:6c:
c6:49:65:4f:6d:87:d8:2c:39:6e:93:33:50:79:6a:
a3:63:25:58:7d:14:73:6f:72:4b:47:38:fd:a6:55:
a6:ff:65:34:0d:aa:eb:7f:73:6b:b0:47:6a:88:ff:
95:c1:07:55:e8:65:04:ac:30:c5:95:ca:0d:02:ad:
fe:a8:f8:2f:f4:71:e2:65:48:dc:d7:d4:d7:58:42:
37:93:34:24:e3:fa:c0:c5:dc:af:3c:55:7f:40:3c:
6d:51:3e:a6:7a:7d:d7:96:40:e9:66:af:30:19:7e:
58:84:f3:f3:e1:fd:7d:44:dd:c9:9d:91:ed:b1:34:
49:e9:5d:d8:f4:ca:08:6a:6f:02:17:a3:34:bf:5e:
b2:8b:69:49:1f:a9:f3:15:63:37:96:b5:11:31:4b:
37:05:dd:bb:1b:1d:9d:bb:08:c4:7d:e8:91:f4:7f:
34:15:80:6e:c6:ac:19:26:de:78:98:a7:28:e9:2b:
67:53:48:d5:43:11:7f:29:ac:d8:02:a6:0a:e9:3f:
75:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CC:14:C5:ED:47:D3:F5:3E:FF:C7:F3:F7:7A:9A:43:F3:A7:43:09
X509v3 Authority Key Identifier:
keyid:90:44:4B:07:9D:F0:08:A7:C7:CB:E2:8F:CB:A5:DB:E0:62:0E:8E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:8e:99:55:35:cd:72:e5:39:47:cd:dc:d1:35:07:ad:6c:36:
4b:e4:7c:a0:c2:04:47:20:bf:20:d5:8c:ba:0c:d4:85:b8:ea:
03:cc:22:39:4c:89:61:3b:50:ae:ce:37:1e:50:8f:a3:cb:2a:
7f:5e:9c:9a:88:94:82:a4:f6:27:7e:29:03:17:bb:b0:ac:04:
f6:41:9a:34:6d:29:9d:33:5b:71:24:88:0e:52:1d:b8:48:ee:
2e:b1:02:81:30:06:4a:ef:f9:13:18:54:11:7d:73:76:65:50:
d2:e3:e3:fc:c3:b3:e2:87:b0:49:01:d3:c4:d1:04:2e:6b:94:
dc:8a:f9:26:da:a0:5a:66:d5:5b:b1:bf:cf:83:04:7e:86:b5:
03:ec:e7:7b:da:56:05:6a:96:ba:3f:4b:8c:78:04:22:bb:a8:
ba:f1:4e:d3:8c:4c:87:d6:fa:6e:48:1b:d6:15:bc:21:d7:e9:
0c:54:fa:c5:08:46:97:df:1a:67:87:c0:10:77:b2:4f:06:fa:
c1:65:f2:ec:57:3a:75:9e:ed:36:6a:4b:44:87:a3:ca:d1:bc:
68:5f:44:32:83:3e:2b:ed:97:6b:ba:1d:6d:32:15:74:7b:6f:
bc:3e:1d:63:b8:a1:0f:1b:e2:cc:25:51:fb:1e:ff:10:be:0b:
ef:99:34:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 08:06:16 2026 by rpki-client