Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
File: Erh8bK-B3jYl_hzgVZ854wUFoFE.mft (raw, json)
Hash identifier: P3fWKHaC4LzZUWDoGGs6SIz9Qu60ygFRZux4oNCBMcY=
Subject key identifier: F6:84:35:F6:88:4C:D1:E2:47:15:EA:F8:DD:E0:D7:DB:1F:35:DC:08
Authority key identifier: 12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
Certificate issuer: /CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Certificate serial: 019F867B07E5ED9E75DDE1B0C3C147ED5693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
Manifest number: 16B2
Signing time: Tue 21 Jul 2026 21:00:37 +0000
Manifest this update: Tue 21 Jul 2026 21:00:37 +0000
Manifest next update: Wed 22 Jul 2026 21:00:37 +0000
Files and hashes: 1: Erh8bK-B3jYl_hzgVZ854wUFoFE.crl (hash: vzQhxYHfo8mAWOqVPxQym0KFzzvlj1N/uyMhVrWyHz0=)
2: K3mAv4ENjdFvUb1ySwEcIqWxG_8.roa (hash: TrWxwfXOHY5NB4elTvUPByLYubX+YUC3/aQn4/n7h2A=)
3: UNr1JSsPVlDmc77n-IlJ4J8D-J0.roa (hash: cNdO2qWipe5XDjbIGYIIO5If+75z//dCQTdfnQ/FOsg=)
4: jHQC9ewMgHDq31w-y2B2QE0UeQ0.roa (hash: lbUdkuZKAp7sLgTfOG04La55MW6JLwB4IkggCwLUq1g=)
5: vv3CReJV7LkCDD7lq-2ePD1bHSw.roa (hash: vcOUmLLDOnBolotJp01JH8ANPyx16KLiqHkliISm6TA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:7b:07:e5:ed:9e:75:dd:e1:b0:c3:c1:47:ed:56:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Validity
Not Before: Jul 21 21:00:37 2026 GMT
Not After : Jul 22 21:00:37 2026 GMT
Subject: CN=f68435f6884cd1e24715eaf8dde0d7db1f35dc08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:53:d2:35:0b:1e:de:e3:11:7f:34:80:50:18:
ea:0d:f4:66:48:14:05:e7:ed:3f:48:41:95:a8:04:
24:5b:77:40:73:3c:1f:cf:ce:b1:77:41:f0:b3:9f:
7b:97:da:59:a0:eb:0e:6e:df:02:6a:cc:98:c6:f5:
d0:8f:fd:70:b5:29:f8:e5:b9:e9:8d:95:3b:1e:c9:
ab:60:12:8b:c5:82:f0:bf:10:ac:f6:0a:60:0a:92:
3c:fa:f3:48:c5:ec:33:6b:d4:11:fa:2c:28:c3:b2:
13:f8:2f:65:47:dc:eb:50:db:3a:f2:73:82:8d:ea:
60:5c:e2:48:b7:93:a7:5e:d8:bc:f0:ff:b1:43:74:
d2:38:5d:14:b7:a0:a4:59:80:a4:ba:bc:1e:6d:19:
14:50:f6:a1:9c:93:a0:08:8f:c1:43:76:1b:1c:50:
e9:19:1c:20:8d:3d:a0:33:c6:6d:a5:65:93:e3:fe:
d0:8e:16:33:e6:e5:d2:92:f4:31:64:5b:1d:33:47:
48:4c:41:e4:70:cb:af:23:95:94:57:f6:bd:a7:4d:
ef:fa:43:68:ba:d4:fa:55:cc:54:ae:b6:72:95:83:
25:23:7d:93:f3:93:de:7c:84:8c:b3:aa:ad:64:70:
5d:a1:4b:88:0f:35:cb:83:b4:c8:e0:fa:fc:92:82:
ff:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:84:35:F6:88:4C:D1:E2:47:15:EA:F8:DD:E0:D7:DB:1F:35:DC:08
X509v3 Authority Key Identifier:
keyid:12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f8:f1:8c:a4:14:66:86:0d:09:66:4a:ee:42:f3:e1:93:d3:
e1:b5:3e:29:4b:7c:d2:04:1c:f8:6e:23:d9:0b:45:f5:23:42:
37:be:8f:61:db:59:36:5a:72:30:69:84:fd:d7:61:33:5b:6a:
df:ae:97:db:cf:83:f6:93:e2:ce:3d:b8:8a:1b:ed:a2:54:ee:
2c:d1:28:15:94:d8:a0:57:3e:5a:d9:5b:b7:66:9e:96:cb:2b:
c8:47:c1:b0:f1:7b:fd:20:43:0c:4c:62:3f:00:18:07:07:02:
a3:8a:6a:92:13:6b:59:c5:4d:fa:e6:31:0c:17:62:62:23:a6:
a8:31:84:92:bc:bb:64:8a:20:9a:59:c1:2e:4f:1d:90:61:23:
28:67:14:da:ba:06:d7:45:07:8c:1f:fe:d8:f7:a4:44:6a:9e:
cf:2e:85:06:fa:c5:3e:68:52:7a:f5:28:9e:44:df:38:d3:fb:
14:9a:05:b2:98:4f:3b:ec:9c:90:cf:16:ca:2d:76:86:4a:7a:
04:e0:04:83:6d:5d:5c:b8:97:5d:d1:ac:da:aa:f9:51:09:5d:
7c:05:50:8e:c0:2b:cc:ba:ca:c7:3d:35:80:9b:a6:13:e9:ef:
bf:21:d5:0c:18:11:eb:54:63:9e:ea:df:30:4f:ec:64:42:95:
eb:61:15:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:39:25 2026 by rpki-client