Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
File: kERLB53wCKfHy-KPy6Xb4GIOjhc.mft (raw, json)
Hash identifier: SKej7AEhjpeZ41Eifk0tQlb44K4r1brCWGZXOSj64hE=
Subject key identifier: 41:19:ED:C0:44:9D:22:89:EE:09:BA:BE:5C:04:02:20:20:1A:42:AC
Authority key identifier: 90:44:4B:07:9D:F0:08:A7:C7:CB:E2:8F:CB:A5:DB:E0:62:0E:8E:17
Certificate issuer: /CN=90444b079df008a7c7cbe28fcba5dbe0620e8e17
Certificate serial: 019F864480C8090A667417B2F46D2C1B24BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
Manifest number: 1834
Signing time: Tue 21 Jul 2026 20:01:04 +0000
Manifest this update: Tue 21 Jul 2026 20:01:04 +0000
Manifest next update: Wed 22 Jul 2026 20:01:04 +0000
Files and hashes: 1: kERLB53wCKfHy-KPy6Xb4GIOjhc.crl (hash: Y5xfV8OTb3llXllCCfaKao+I97q9TEA7HYVRbgw58ag=)
2: qh7XZDst8WsBCGjKLPzTSR00_9w.roa (hash: 91hvylgfnm1S7Q889lgwTcLMuKxZDx/xX3dO/XE0rko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 20:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:44:80:c8:09:0a:66:74:17:b2:f4:6d:2c:1b:24:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90444b079df008a7c7cbe28fcba5dbe0620e8e17
Validity
Not Before: Jul 21 20:01:04 2026 GMT
Not After : Jul 22 20:01:04 2026 GMT
Subject: CN=4119edc0449d2289ee09babe5c040220201a42ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b1:5f:df:38:8c:37:51:0b:e5:c6:1f:f7:9d:
a5:91:f5:b0:0b:6e:49:79:c6:71:49:b3:26:ab:72:
5a:45:46:74:c2:e0:f3:11:d5:4a:50:11:84:6a:7e:
1b:8b:e3:8c:1a:61:8c:22:2e:5d:ab:9c:28:b3:ef:
6d:65:42:d4:f2:35:33:70:b8:34:80:62:12:2e:71:
4a:a0:9b:4a:9c:78:05:8c:9e:4a:57:6d:65:9c:5f:
0a:43:b8:34:eb:5d:16:10:fb:dd:c3:af:d4:70:b6:
f5:40:9c:53:17:a0:e1:ab:60:30:5f:fb:45:8d:fc:
b4:7e:60:e6:61:d0:b3:be:49:a3:ac:3e:01:71:e7:
e6:4b:44:c3:59:87:05:1d:0b:13:08:48:a1:8d:93:
f5:71:fa:67:9c:d4:f5:26:36:d2:a3:43:ca:4f:e5:
a5:b9:cf:62:02:5b:f0:be:2a:31:5c:ef:d3:a8:ed:
af:1d:1b:eb:76:32:71:7f:0f:d5:77:0b:b9:dc:81:
ae:51:8d:52:6b:4e:1f:2c:06:c6:1e:d5:8f:79:3c:
74:70:aa:23:ed:b0:c5:4e:ad:eb:64:ce:f3:bf:9b:
a9:e9:e4:9c:27:23:2a:f5:a6:12:fb:ec:0d:c6:f3:
0c:6e:8f:cc:88:f2:a2:dd:fc:e7:fe:24:af:e0:68:
92:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:19:ED:C0:44:9D:22:89:EE:09:BA:BE:5C:04:02:20:20:1A:42:AC
X509v3 Authority Key Identifier:
keyid:90:44:4B:07:9D:F0:08:A7:C7:CB:E2:8F:CB:A5:DB:E0:62:0E:8E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:77:68:9f:4e:5c:ba:6e:d9:de:f5:89:ef:d9:69:9b:74:30:
04:9e:64:c5:57:0a:ca:73:8e:13:68:3d:26:b5:86:15:7d:c8:
c2:b8:07:32:a8:e5:b5:f6:b4:62:1d:cb:99:cf:0f:c1:18:07:
2c:93:b7:a8:59:72:92:57:8f:e6:4b:ea:b3:dc:57:5a:d1:3a:
07:26:15:71:85:cd:76:77:f9:d7:79:86:76:e0:c3:c8:26:6c:
10:8d:70:73:c6:4e:ff:a7:c2:b0:ab:80:22:3a:53:6d:58:20:
d3:0d:90:bc:3c:a4:2a:3f:43:25:42:d8:94:cf:57:58:8c:2b:
40:90:4b:a0:44:97:69:b6:ea:b8:28:d8:f6:91:4b:bf:bc:0c:
d9:58:1f:00:5e:ff:8f:99:96:0c:e8:8b:62:e6:b0:ff:57:60:
55:7a:af:5d:ad:cd:4e:6a:71:49:2a:f3:62:40:27:79:5c:15:
86:cc:22:a1:7d:f2:00:c2:d0:0f:ec:c7:15:5b:52:55:e0:b3:
5d:8b:14:90:87:90:8f:05:a3:b9:98:49:36:d3:0e:c4:1c:7e:
22:dd:e7:cd:b3:3c:80:20:99:a3:c2:4e:96:48:54:3b:73:5b:
08:35:88:03:59:3b:87:d2:a4:9d:65:19:8d:d6:c9:7c:d3:db:
87:35:e7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:40:49 2026 by rpki-client