
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
File: Erh8bK-B3jYl_hzgVZ854wUFoFE.mft (raw, json)
Hash identifier: miN6/ZzM4SIKNX4s2qJjQ2NmxdOpL7J+bEB5bHhPtGw=
Subject key identifier: 19:92:3A:85:70:3F:B8:13:F2:0C:66:40:B5:EB:65:05:18:97:CE:4D
Authority key identifier: 12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
Certificate issuer: /CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Certificate serial: 01A1660FC7800E345E0165BD5E17F84B57AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
Manifest number: 17AC
Signing time: Fri 23 Oct 2026 00:01:12 +0000
Manifest this update: Fri 23 Oct 2026 00:01:12 +0000
Manifest next update: Sat 24 Oct 2026 00:01:12 +0000
Files and hashes: 1: DpLGpJWCWWRSbC1EKqnqaUuVxNo.asa (hash: 3kBSifpFOSow5eo0cw8YplNkAqPjEkB8rA0dF47REoo=)
2: Erh8bK-B3jYl_hzgVZ854wUFoFE.crl (hash: YjDQwDquVifnKJeGKL7dtu0FpsHUpmoVBmLwNH08eGA=)
3: K3mAv4ENjdFvUb1ySwEcIqWxG_8.roa (hash: TrWxwfXOHY5NB4elTvUPByLYubX+YUC3/aQn4/n7h2A=)
4: jHQC9ewMgHDq31w-y2B2QE0UeQ0.roa (hash: lbUdkuZKAp7sLgTfOG04La55MW6JLwB4IkggCwLUq1g=)
5: vv3CReJV7LkCDD7lq-2ePD1bHSw.roa (hash: vcOUmLLDOnBolotJp01JH8ANPyx16KLiqHkliISm6TA=)
6: xOFyqAK0wn6F8YQS81vCKex4biY.roa (hash: acG2LAqOo9EfVrfS6J8PiwZRQt4oRpGi0BsoPKrUMDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:66:0f:c7:80:0e:34:5e:01:65:bd:5e:17:f8:4b:57:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Validity
Not Before: Oct 23 00:01:12 2026 GMT
Not After : Oct 24 00:01:12 2026 GMT
Subject: CN=19923a85703fb813f20c6640b5eb65051897ce4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:31:58:66:b9:d2:c2:75:4a:81:b4:63:23:a2:
15:c5:12:3e:66:5d:0c:39:32:24:39:c2:d3:90:e2:
bb:96:9c:55:80:3b:86:b4:70:a5:6f:7f:b3:1c:e2:
61:1a:0e:de:22:77:d4:54:8e:d4:44:9f:3c:db:53:
dc:1f:32:9f:15:d2:56:cb:58:ae:6c:f6:01:e7:b7:
ef:73:a4:2e:f0:f9:b0:a1:aa:e8:c3:eb:a0:6c:bf:
f7:5a:58:e3:45:84:08:ad:0b:35:9b:cd:cb:66:54:
d5:e5:07:79:94:07:86:4a:71:5a:f2:e0:7a:f4:7a:
65:55:4c:57:44:22:58:e2:36:50:b4:66:eb:38:59:
cf:27:4d:91:de:f9:21:1b:da:30:b9:da:c1:4f:93:
11:46:9f:0c:6b:9a:41:21:60:7c:68:97:eb:95:6c:
80:07:5b:f2:2c:3a:a5:3e:13:dc:e3:4e:a8:c5:8a:
45:47:82:66:0b:ec:29:96:26:61:a8:59:df:cb:5e:
3a:12:fc:5e:20:50:76:16:e7:78:ae:7d:62:14:5b:
82:43:34:89:e1:e1:a8:94:f5:28:63:cd:b2:61:29:
aa:ef:74:36:e6:54:d0:66:ec:67:f5:c6:c5:dc:52:
04:bb:7d:4a:6a:4d:b6:bd:f4:2e:ea:11:05:0b:b6:
d7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:92:3A:85:70:3F:B8:13:F2:0C:66:40:B5:EB:65:05:18:97:CE:4D
X509v3 Authority Key Identifier:
keyid:12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f0:a8:d2:1d:9d:55:a7:08:ae:37:37:38:1c:61:fa:a6:4c:
58:60:6b:01:92:41:3e:7a:d9:a0:b5:c2:98:8b:d5:15:e0:18:
b7:1d:ba:27:8f:6c:e7:21:2b:b7:a5:98:bf:fd:06:12:f5:16:
00:17:67:e4:8f:da:17:ac:0d:39:e2:95:ba:0e:29:f1:f0:38:
ab:52:b6:64:c7:eb:1d:c9:37:a1:6e:a9:d0:79:d8:d4:2b:25:
38:37:c1:20:c6:f1:d9:ad:73:cd:f0:23:9e:68:41:65:77:fe:
be:c3:eb:3e:57:36:66:d9:95:f9:48:5f:14:88:b0:d4:76:7b:
43:ae:28:a4:a3:62:a7:92:ae:6c:ae:77:20:0b:11:a4:cd:1e:
d1:35:b4:4f:2f:ef:9d:9a:32:22:d3:b0:0b:90:72:c3:5c:bb:
86:75:c7:ac:84:ef:31:cc:52:34:13:54:dc:54:be:9e:7a:36:
ff:88:ce:89:f0:8e:22:d8:17:58:5d:3c:0c:d0:3e:93:f7:f4:
16:66:ae:81:c0:74:8b:bd:5d:93:25:df:96:50:32:87:34:9f:
12:83:da:4d:c3:e6:41:ad:10:0c:84:20:53:21:5d:16:94:15:
ee:cb:d8:9f:0b:80:56:9f:4f:82:97:ec:98:c3:3b:58:69:48:
25:ab:25:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 11:28:34 2026 by rpki-client