Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
File: ErethYfzKycmXpxnphMr-bPwIPw.mft (raw, json)
Hash identifier: 91KYZh/cGaRTxWYyuqlXYQ7+4bHv64Da37Pf3Se+C1k=
Subject key identifier: A2:15:D2:05:4C:DC:E8:5A:54:2E:0C:1C:01:33:8F:0F:F7:DC:59:B1
Authority key identifier: 12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
Certificate issuer: /CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Certificate serial: 019EE5FB2DA17E33FD0D081B9AA1A250E8DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
Manifest number: 058F
Signing time: Sat 20 Jun 2026 17:01:44 +0000
Manifest this update: Sat 20 Jun 2026 17:01:44 +0000
Manifest next update: Sun 21 Jun 2026 17:01:44 +0000
Files and hashes: 1: ErethYfzKycmXpxnphMr-bPwIPw.crl (hash: H6t3wubLZUUvWG2guFJ32owuM8ns3QmWl45IqrUFF90=)
2: RLh9s9zTeKJ9bogTETA60TFw6lo.roa (hash: 0m+pngGOwDg6Ap17PIVB2FP6vUl0HDw150aVd4LORg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e5:fb:2d:a1:7e:33:fd:0d:08:1b:9a:a1:a2:50:e8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Validity
Not Before: Jun 20 17:01:44 2026 GMT
Not After : Jun 21 17:01:44 2026 GMT
Subject: CN=a215d2054cdce85a542e0c1c01338f0ff7dc59b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:72:ae:ca:af:d9:08:d1:2f:76:31:d5:f2:bd:
c5:4f:d5:af:ac:ca:40:ef:db:4a:3e:bb:dc:cc:43:
80:d3:55:80:2b:31:8f:ad:7e:27:3e:00:18:bb:9e:
6a:1d:72:fe:c9:09:6e:7f:3b:92:dc:0d:b8:5c:b8:
27:6c:5f:27:93:99:29:03:2f:bc:06:dc:32:9e:c3:
08:90:fa:4b:e6:33:30:89:63:65:c6:af:9c:1c:f4:
40:77:cc:23:c0:4c:d0:1e:e6:5c:47:99:70:3c:7d:
96:d4:23:2b:c5:4d:45:4d:56:72:e9:bf:ef:ba:74:
93:8c:4e:da:8e:ad:1b:11:a1:f7:fc:9a:42:85:21:
71:2d:59:7a:fa:87:d5:35:ed:3d:97:53:30:7a:83:
38:e4:6c:1d:71:09:a3:e2:b6:99:a0:0d:8c:e0:fb:
98:88:e3:b6:7f:bc:5e:36:03:62:ec:cf:96:73:96:
b6:3a:71:d4:1e:95:bc:b5:71:ac:76:fa:fd:3d:2e:
d3:e8:d7:ad:98:7d:61:1c:ad:e9:3d:0e:83:a8:0f:
2b:0f:88:0f:68:f8:25:35:44:ab:9a:ab:19:9d:a9:
10:c6:c7:3e:13:b2:5b:e1:b6:63:bc:64:31:3d:3f:
46:a8:27:79:80:64:a3:9a:be:74:ae:a2:3f:1f:bc:
0f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:15:D2:05:4C:DC:E8:5A:54:2E:0C:1C:01:33:8F:0F:F7:DC:59:B1
X509v3 Authority Key Identifier:
keyid:12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:74:dc:d0:7f:d5:f5:07:83:48:d6:b0:75:e4:25:ed:66:83:
45:2b:98:ca:b2:ee:98:c8:b6:16:99:86:09:df:c0:c0:b2:3a:
5e:5e:a6:90:23:16:36:e3:4a:95:3d:78:a3:3e:1e:8a:13:92:
6a:48:2b:af:4c:ef:e9:cd:67:c2:86:ba:f1:95:2a:55:76:fa:
f0:4a:0f:ac:80:e8:5c:54:11:e2:b7:76:ec:a5:69:de:bd:1a:
49:ef:af:b1:49:7f:ab:1c:c2:a3:c1:80:99:dd:4b:12:82:c6:
6b:2c:7b:af:ca:70:5d:6d:72:c1:74:9a:3a:c0:62:4d:d9:75:
41:3d:7b:cc:cd:d4:5c:75:ec:73:d3:1b:4f:a3:e7:a4:6d:62:
82:e5:58:dd:a7:71:79:3f:b1:98:d4:15:a8:6d:e0:ed:93:ac:
8c:5e:d0:79:97:a5:8e:50:3d:65:06:49:df:99:38:1e:a9:7e:
dc:aa:58:6d:b9:40:e2:90:d6:ac:05:00:47:c5:81:f3:53:3d:
0c:93:50:b7:82:9e:1d:c1:e3:0e:3e:f1:e7:88:8b:4a:2d:d1:
0a:d9:6d:35:81:d7:c8:15:56:6a:5d:83:f8:82:26:96:66:90:
94:36:01:ee:6a:51:3b:bf:df:77:e5:45:8e:5a:83:6a:5d:3f:
42:47:3c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 00:46:53 2026 by rpki-client