Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
File: Erh8bK-B3jYl_hzgVZ854wUFoFE.mft (raw, json)
Hash identifier: U91MR+1i+TdxE2hiaAzRj/Sc+/HITSwtsFR2lf8V5vU=
Subject key identifier: A5:7E:BE:51:25:65:1D:C7:1F:57:4C:03:FD:8D:DF:31:B5:BA:7D:E0
Authority key identifier: 12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
Certificate issuer: /CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Certificate serial: 019E9CCE298EF574D08D88EC3B429BC14B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
Manifest number: 1639
Signing time: Sat 06 Jun 2026 12:00:17 +0000
Manifest this update: Sat 06 Jun 2026 12:00:17 +0000
Manifest next update: Sun 07 Jun 2026 12:00:17 +0000
Files and hashes: 1: Erh8bK-B3jYl_hzgVZ854wUFoFE.crl (hash: X3vOOoaMscVvQ4Jk4CNEmXUKrype+Y0vcFdAkiaPBgo=)
2: K3mAv4ENjdFvUb1ySwEcIqWxG_8.roa (hash: TrWxwfXOHY5NB4elTvUPByLYubX+YUC3/aQn4/n7h2A=)
3: UNr1JSsPVlDmc77n-IlJ4J8D-J0.roa (hash: cNdO2qWipe5XDjbIGYIIO5If+75z//dCQTdfnQ/FOsg=)
4: jHQC9ewMgHDq31w-y2B2QE0UeQ0.roa (hash: lbUdkuZKAp7sLgTfOG04La55MW6JLwB4IkggCwLUq1g=)
5: vv3CReJV7LkCDD7lq-2ePD1bHSw.roa (hash: vcOUmLLDOnBolotJp01JH8ANPyx16KLiqHkliISm6TA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:ce:29:8e:f5:74:d0:8d:88:ec:3b:42:9b:c1:4b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Validity
Not Before: Jun 6 12:00:17 2026 GMT
Not After : Jun 7 12:00:17 2026 GMT
Subject: CN=a57ebe5125651dc71f574c03fd8ddf31b5ba7de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1d:30:8c:10:e4:65:e8:5f:27:67:93:8c:89:
a4:fc:26:9e:9d:a9:79:c4:8b:ae:a4:c4:8b:fc:57:
91:5d:5c:d2:c1:05:1e:b2:bc:ab:77:27:65:e1:7e:
d5:a4:1b:a9:89:be:cf:19:b4:d1:6a:ea:f3:22:39:
8e:64:42:3d:73:cc:4a:bc:12:2e:7a:fb:bf:d3:8f:
ca:05:33:85:e7:40:2a:32:55:2f:c2:a0:bf:62:29:
54:81:ef:ef:80:5d:2d:6e:98:9f:f9:04:af:9b:21:
10:90:78:00:55:fc:cb:59:f1:2a:af:9f:df:5d:e8:
c3:9e:40:14:e1:68:e4:93:7b:ad:6b:54:97:bc:31:
35:69:df:48:ac:19:ce:87:8f:76:5f:4b:d1:12:4b:
69:07:35:3c:b6:a3:1e:3b:79:81:e0:c2:09:98:cf:
38:26:f2:fb:fd:fe:aa:7e:3a:3c:24:31:f4:15:ba:
98:da:d3:8d:ff:88:95:5a:68:d3:0c:10:19:ea:41:
eb:ff:ec:89:27:30:02:0d:b2:48:ba:a7:c7:e4:71:
c0:40:37:07:89:ca:a1:68:a7:73:10:db:25:f4:43:
f4:a8:eb:9d:2b:ee:a2:04:1d:f5:7b:44:61:f9:95:
68:1c:aa:62:f0:2b:97:37:3b:c8:7e:7d:c4:11:22:
98:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7E:BE:51:25:65:1D:C7:1F:57:4C:03:FD:8D:DF:31:B5:BA:7D:E0
X509v3 Authority Key Identifier:
keyid:12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:9e:b1:a6:82:98:0f:06:7d:a3:8e:71:39:d3:f0:63:98:01:
1e:c2:dc:02:f0:9f:92:36:1e:5f:3a:b3:54:86:8a:8b:c8:6a:
ee:d4:43:3c:c2:6b:67:12:79:14:b3:80:a1:91:05:38:cb:1b:
1d:97:e8:92:91:90:f4:d8:99:41:76:3c:47:b3:5f:fa:44:9d:
f9:d3:88:d3:4d:00:52:e2:d6:cb:2f:c4:fb:45:ce:3f:8a:cb:
6f:33:02:45:10:01:35:33:f9:c7:69:40:e0:9a:fc:7c:f9:bf:
53:22:06:f8:ed:bc:b3:aa:42:6b:66:ce:a6:f5:fd:33:c8:b8:
c5:df:be:a5:a8:0d:42:a1:6c:95:df:56:81:6d:f8:cd:0d:07:
b2:85:a7:d4:cc:70:a0:95:79:0d:e1:59:91:3b:5e:53:8b:d4:
67:ea:95:d3:00:97:27:0c:1a:21:4a:55:27:de:09:eb:18:69:
84:44:e3:0f:f5:b3:37:37:f1:4c:30:23:cd:49:fe:9e:85:c7:
0b:94:af:31:e8:6a:46:5f:f8:99:fc:6d:1f:92:8d:56:64:a9:
e5:81:29:0c:95:3a:ed:6b:89:a4:20:3e:bb:62:d0:d7:ee:3a:
82:8f:3c:66:06:5c:5e:74:18:18:f0:09:28:8a:4c:73:78:3b:
ad:f7:08:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 19:28:29 2026 by rpki-client