Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
File: ERxtryd8JzXN7koMheNshcJdPD0.mft (raw, json)
Hash identifier: jnmpMqIYeKAKAIlT4tLWWyIJ3CSGlgyJ206Ocj3iOTA=
Subject key identifier: 4C:06:2B:F3:00:1D:73:08:25:7B:F0:CD:FA:29:0A:FA:F1:47:0D:2E
Authority key identifier: 11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
Certificate issuer: /CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Certificate serial: 019D3789415970071B73A90011AD674E73F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
Manifest number: 0446
Signing time: Sun 29 Mar 2026 03:00:35 +0000
Manifest this update: Sun 29 Mar 2026 03:00:35 +0000
Manifest next update: Mon 30 Mar 2026 03:00:35 +0000
Files and hashes: 1: ERxtryd8JzXN7koMheNshcJdPD0.crl (hash: P8v3MMdEvRyliXXqu7vX+poL+iyjj/o8GRQ5K9DK+E4=)
2: _4M4oq0S8mIZa0V69_lse01j-Sk.roa (hash: NZU7UkxZ6lsoZXHjmmCZKMcfUdhd7kq2mJZpnareMGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:41:59:70:07:1b:73:a9:00:11:ad:67:4e:73:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Validity
Not Before: Mar 29 03:00:35 2026 GMT
Not After : Mar 30 03:00:35 2026 GMT
Subject: CN=4c062bf3001d7308257bf0cdfa290afaf1470d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b3:9f:b5:e2:55:98:93:71:ef:60:b9:31:da:
54:7c:39:3c:a2:5f:86:96:97:60:10:0a:db:7f:4e:
bd:11:7a:6e:7c:15:8c:38:36:07:79:f3:3c:e0:3f:
f3:32:b9:87:67:df:63:21:f8:88:1e:09:1f:8c:a1:
1e:c2:d3:ff:f4:67:68:af:a2:45:b6:c1:a0:44:7c:
08:cb:d3:72:ee:18:db:73:42:f5:40:db:66:85:ca:
4f:3c:4a:ee:d4:c6:a8:dd:bf:ed:bb:a7:f8:d8:00:
b0:33:e0:ad:81:33:9a:5d:47:25:7e:8f:dc:bf:89:
af:9f:14:34:7d:17:98:02:b3:99:02:c8:38:8d:44:
36:9a:be:32:63:c9:fd:df:bd:17:bc:f1:95:c8:0d:
22:54:05:ee:03:c0:88:92:47:98:3e:01:b3:6b:23:
48:0b:83:ea:23:9d:12:41:d9:07:c8:71:5b:05:95:
04:d7:81:74:23:0a:8d:af:71:62:2a:e9:33:4b:54:
75:b4:58:57:e1:0d:5a:3d:17:02:d4:72:19:b0:d8:
0d:62:fa:52:d3:8b:f7:b5:16:04:10:5c:cb:31:88:
65:76:dd:35:6f:99:a4:e0:8f:20:c1:dd:41:05:3f:
d3:ec:00:e9:bf:f1:85:75:1e:dc:99:6c:73:b9:0f:
d0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:06:2B:F3:00:1D:73:08:25:7B:F0:CD:FA:29:0A:FA:F1:47:0D:2E
X509v3 Authority Key Identifier:
keyid:11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:23:f5:24:e4:07:d8:b7:f8:7a:57:53:2d:6d:ad:9e:0b:62:
0d:90:90:88:f5:7f:9e:96:b7:e8:0f:20:f7:32:b4:7f:e1:cb:
7b:c9:94:fa:49:90:cc:23:30:49:8b:18:f9:0c:31:e4:b1:2a:
6c:bf:58:ae:8b:47:0c:c9:94:1f:8b:52:f9:f3:97:e1:97:e1:
83:37:e9:6a:ce:95:b4:e4:70:c6:a0:22:05:e7:17:00:33:70:
a6:fa:4d:43:07:02:c5:d8:a9:0d:25:e1:6f:0e:d1:79:a4:f4:
c9:a4:8f:f8:ab:54:b4:3e:e0:e7:f9:4e:50:00:dd:7b:d8:78:
51:f4:5f:81:5c:c0:76:06:dc:4a:85:6f:0e:66:2a:56:70:3e:
3f:6d:21:48:c5:12:92:35:78:7b:54:f7:4e:db:2d:4d:61:08:
dd:5b:17:55:0b:53:ea:d8:d6:0e:c1:95:0a:02:b7:72:d4:c1:
a8:97:ec:05:97:7e:9b:ec:66:81:24:28:e0:62:7b:25:c6:f5:
50:9f:e6:3e:86:01:5e:de:f3:45:25:a5:7f:ba:ac:d9:b4:27:
6f:46:7a:45:57:b0:bf:e1:9e:bc:71:32:2e:cd:ee:07:78:6c:
fb:1f:43:5d:f9:a0:0b:08:49:b5:3a:86:42:1b:d7:bf:a5:72:
5a:6f:67:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:17 2026 by rpki-client