Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
File: eruW1HY31HxxYVtg2h9pHEpvC3A.mft (raw, json)
Hash identifier: AtRbI1dPU3clalZ8mSTgmg/hJUjRgBqyoh4w2ailg6k=
Subject key identifier: 67:41:1B:AF:C6:FA:3C:FB:9E:6E:0B:72:A4:43:7E:EA:45:87:91:A8
Authority key identifier: 7A:BB:96:D4:76:37:D4:7C:71:61:5B:60:DA:1F:69:1C:4A:6F:0B:70
Certificate issuer: /CN=7abb96d47637d47c71615b60da1f691c4a6f0b70
Certificate serial: 019D38666DE9AD5682EC3C348575C7242BFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
Manifest number: 0CDF
Signing time: Sun 29 Mar 2026 07:02:09 +0000
Manifest this update: Sun 29 Mar 2026 07:02:09 +0000
Manifest next update: Mon 30 Mar 2026 07:02:09 +0000
Files and hashes: 1: eruW1HY31HxxYVtg2h9pHEpvC3A.crl (hash: MId6lqP992EykZIRyVM0Zi4nKEVgPeyJoAa8aF/tk7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:6d:e9:ad:56:82:ec:3c:34:85:75:c7:24:2b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abb96d47637d47c71615b60da1f691c4a6f0b70
Validity
Not Before: Mar 29 07:02:09 2026 GMT
Not After : Mar 30 07:02:09 2026 GMT
Subject: CN=67411bafc6fa3cfb9e6e0b72a4437eea458791a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a9:74:67:c3:80:57:d0:7d:6e:be:b4:b2:cd:
ad:c5:0e:78:92:e7:df:bf:41:4f:54:f9:af:7e:4d:
1e:26:3a:5e:89:81:65:cc:de:76:ba:5c:9a:d0:0f:
c6:e3:8b:e0:bd:47:c4:6b:28:f0:a2:ec:c2:05:1c:
f6:0f:10:01:5b:9d:71:c6:61:b4:b9:52:94:71:db:
eb:e5:86:75:31:87:d3:da:48:3d:19:bb:4a:f1:09:
88:e6:bc:06:4f:9c:69:7d:6c:5b:19:78:aa:39:4e:
05:2f:04:53:26:ed:68:1f:3a:36:cd:0c:10:30:1a:
96:0c:65:3e:1a:46:b3:35:6f:f4:8b:96:9b:23:91:
f1:48:b5:d7:4a:11:8e:1b:57:54:c9:28:b2:47:09:
e9:c6:8f:fd:bb:4f:c1:c9:22:3b:3d:85:3b:38:2f:
80:3f:6e:d9:04:50:f9:4f:cc:3f:d9:32:61:9b:27:
81:be:be:6f:e6:db:9d:3a:19:0b:17:bc:f3:ce:aa:
44:e2:b0:8c:5e:a5:0a:01:aa:23:98:3e:9c:bf:51:
09:82:22:38:82:79:6f:ef:c7:7a:9b:d6:c5:2f:df:
e0:04:e2:58:47:c9:7c:e3:18:2a:66:92:71:69:18:
2a:23:d2:6d:4f:61:fc:7e:fa:28:6c:a7:27:ca:79:
f0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:41:1B:AF:C6:FA:3C:FB:9E:6E:0B:72:A4:43:7E:EA:45:87:91:A8
X509v3 Authority Key Identifier:
keyid:7A:BB:96:D4:76:37:D4:7C:71:61:5B:60:DA:1F:69:1C:4A:6F:0B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:34:27:d8:24:ee:0d:f2:a1:2c:09:f8:c4:56:f1:6a:cd:8b:
3e:39:fc:fb:e2:dd:92:35:75:d7:78:eb:39:eb:1f:a0:1f:aa:
48:8b:0b:b9:64:1e:44:55:cf:c3:7d:da:b6:1f:6d:53:2b:46:
c4:88:76:e0:c1:74:00:0c:96:73:c2:ca:11:c3:60:1e:ef:40:
fa:02:c3:98:eb:85:1a:2b:71:1e:95:fc:30:60:a4:7f:46:1e:
52:ad:2c:7b:6b:ca:19:49:3c:d7:e1:52:34:11:76:85:bf:ba:
2d:d0:85:8c:0a:54:95:cc:ae:d5:23:d3:d8:05:85:0e:51:f4:
71:7f:a5:9b:ae:14:ce:86:a8:dd:80:da:30:15:fc:12:59:5e:
3b:05:ee:f8:99:c9:63:b1:f2:6e:84:fb:b8:27:7a:84:e2:3c:
b1:cf:4f:a8:7b:47:ed:19:55:3b:f7:40:9f:d2:63:43:78:2e:
a0:0d:8b:20:e9:1e:70:45:d8:f6:72:e1:68:53:ec:c0:9f:a7:
5d:84:38:ca:85:f7:5c:6b:0c:60:1e:64:3b:4e:48:d7:63:af:
57:2c:b9:f9:39:b6:a4:fb:16:96:18:9c:7f:af:3f:7a:a5:f3:
8b:db:48:a4:43:6c:4d:49:d6:e6:1f:5a:3c:3a:89:a5:a3:04:
86:01:1d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:23 2026 by rpki-client