Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
File: kERLB53wCKfHy-KPy6Xb4GIOjhc.mft (raw, json)
Hash identifier: bTQ3f6zoykfyhftJCgFWyGNEGG6fsCOZLYi9qWSLRaM=
Subject key identifier: 90:80:EE:0C:80:C6:98:7A:04:22:D3:A1:57:71:1A:5C:05:09:F2:75
Authority key identifier: 90:44:4B:07:9D:F0:08:A7:C7:CB:E2:8F:CB:A5:DB:E0:62:0E:8E:17
Certificate issuer: /CN=90444b079df008a7c7cbe28fcba5dbe0620e8e17
Certificate serial: 01A06E02EF75865C2D5571B0C2343D89E4CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
Manifest number: 18AC
Signing time: Fri 04 Sep 2026 20:01:21 +0000
Manifest this update: Fri 04 Sep 2026 20:01:21 +0000
Manifest next update: Sat 05 Sep 2026 20:01:21 +0000
Files and hashes: 1: kERLB53wCKfHy-KPy6Xb4GIOjhc.crl (hash: 1RunKD2hRhvChVqiHGgp/m2s1O16KuSPUbIihEz4hKk=)
2: qh7XZDst8WsBCGjKLPzTSR00_9w.roa (hash: 91hvylgfnm1S7Q889lgwTcLMuKxZDx/xX3dO/XE0rko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:02:ef:75:86:5c:2d:55:71:b0:c2:34:3d:89:e4:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90444b079df008a7c7cbe28fcba5dbe0620e8e17
Validity
Not Before: Sep 4 20:01:21 2026 GMT
Not After : Sep 5 20:01:21 2026 GMT
Subject: CN=9080ee0c80c6987a0422d3a157711a5c0509f275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7e:22:b0:93:e6:33:70:f3:61:7a:e8:85:6a:
90:97:a9:7e:78:1d:0a:8c:c0:12:04:d5:84:4f:c2:
1f:fd:bb:a1:b5:3e:25:b0:15:bd:85:95:ac:fd:de:
ba:3b:ef:38:ee:6c:86:3c:2c:35:26:2b:84:72:08:
22:1a:4f:db:c5:3b:dd:22:b1:8f:dd:dd:94:c3:03:
66:48:db:71:45:bf:77:0f:02:a1:a5:92:1d:f7:fa:
b0:82:c3:c0:8e:54:50:0f:08:08:1e:65:a4:ad:6a:
84:2f:35:41:c8:ef:dc:d7:36:29:37:22:2f:a1:d3:
c6:62:05:82:f9:37:80:36:30:73:91:43:55:95:1f:
aa:4b:58:db:52:91:9d:54:5a:f4:f9:41:1a:c5:a6:
14:54:5f:88:d6:bf:3a:e3:bf:87:00:f0:10:e2:1a:
39:1f:60:af:ad:b6:e6:a3:7a:45:35:ef:39:11:f2:
e2:a4:58:cd:5c:61:52:e6:a5:d9:dd:f5:8c:02:a8:
62:83:45:9c:09:ef:0d:7e:5e:d0:2f:53:ef:f4:b5:
9b:ef:04:1e:de:74:99:dd:29:d0:80:71:e4:92:f7:
ae:0d:be:70:5a:ed:80:1b:6f:83:ea:21:4d:2a:48:
91:19:d6:7b:0c:59:53:33:ee:52:3f:43:49:dc:1b:
b6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:80:EE:0C:80:C6:98:7A:04:22:D3:A1:57:71:1A:5C:05:09:F2:75
X509v3 Authority Key Identifier:
keyid:90:44:4B:07:9D:F0:08:A7:C7:CB:E2:8F:CB:A5:DB:E0:62:0E:8E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:30:30:61:cf:75:c4:8e:b7:8f:ce:fb:1d:07:d3:81:9d:54:
30:74:9b:f5:b3:09:9d:38:40:55:c2:f3:19:46:9b:1f:d5:3d:
67:78:88:dc:84:6b:87:2b:7d:80:0f:8c:81:2b:6a:67:53:2b:
4e:9b:33:9a:ec:1d:b9:82:07:d7:2a:05:58:3a:7a:8b:47:08:
b9:d7:e6:57:76:0b:36:73:39:c4:5e:c4:e6:d6:8a:bd:07:09:
99:58:83:a8:73:e4:94:5c:93:d7:e8:bb:a9:62:95:b9:cd:ad:
f4:af:43:34:c8:0a:55:92:67:3f:07:a2:08:2b:52:75:93:db:
50:38:14:42:71:30:15:31:3b:77:38:ec:39:02:7a:71:8d:1e:
b1:2b:85:c0:c6:5d:3c:7d:24:69:ae:1b:82:e9:04:19:9b:6a:
5e:2e:ba:14:63:52:a9:bc:4e:63:16:ec:7c:9e:86:ef:43:e0:
c1:cb:99:59:6f:38:37:53:8e:7c:24:dc:c5:62:fd:26:7b:bb:
38:ab:55:f7:1e:0b:98:54:e8:72:0e:ef:c1:c5:4e:96:75:6b:
e3:26:0f:38:b6:eb:c6:f4:2a:98:ce:a1:f7:1c:0c:3e:a5:89:
7f:e5:f2:21:28:08:4c:4c:67:d9:a3:a6:6a:e7:ac:ba:00:fa:
6f:67:e1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:29:04 2026 by rpki-client