Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
File: ErethYfzKycmXpxnphMr-bPwIPw.mft (raw, json)
Hash identifier: MeQHa+tkbf8chhCJkwsPpL1ZD4cazxIztz6/5ugYaEY=
Subject key identifier: 1F:E7:FF:18:12:88:77:91:30:91:E7:37:F3:86:1D:F3:31:06:6A:4D
Authority key identifier: 12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
Certificate issuer: /CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Certificate serial: 019DFC4E3BF7209641EB9B054DA52CB2C724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
Manifest number: 0516
Signing time: Wed 06 May 2026 08:01:18 +0000
Manifest this update: Wed 06 May 2026 08:01:18 +0000
Manifest next update: Thu 07 May 2026 08:01:18 +0000
Files and hashes: 1: ErethYfzKycmXpxnphMr-bPwIPw.crl (hash: rcLJdrkTmLlE198V33EqpnJwUTTUIkpprjjGX3aacwE=)
2: RLh9s9zTeKJ9bogTETA60TFw6lo.roa (hash: 0m+pngGOwDg6Ap17PIVB2FP6vUl0HDw150aVd4LORg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:4e:3b:f7:20:96:41:eb:9b:05:4d:a5:2c:b2:c7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Validity
Not Before: May 6 08:01:18 2026 GMT
Not After : May 7 08:01:18 2026 GMT
Subject: CN=1fe7ff18128877913091e737f3861df331066a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:15:f9:d3:3e:13:d7:a0:2e:7a:a9:eb:87:45:
93:3a:b6:e9:8d:af:df:f2:e2:80:8d:c8:51:96:a8:
f7:8e:28:e1:be:87:36:9c:26:ae:d0:4f:ce:3b:3b:
19:de:fe:7a:7f:7e:65:84:88:91:91:3e:a1:16:dd:
a2:c9:9d:c2:0c:cf:55:c3:fd:85:d9:65:47:f8:75:
0b:21:da:42:fe:1d:85:82:e5:d6:22:97:8d:10:da:
15:3a:35:39:e7:0c:b8:70:14:c8:93:9a:9f:ce:fb:
db:71:3f:0c:1d:19:6f:50:67:e4:0d:bf:be:e3:87:
2b:6b:83:97:21:8f:4e:90:34:56:d1:c0:3c:3a:66:
f7:65:1b:ae:f9:9f:0d:da:17:c1:85:33:7d:6a:e6:
3a:34:40:8f:2d:81:db:10:f1:0c:e6:70:90:59:f3:
e6:61:6a:ad:fa:63:2e:bd:87:83:ec:0e:9b:6a:f1:
f4:3d:55:1a:f8:00:f7:78:c3:9b:44:40:f7:19:08:
3c:b5:2e:ef:68:8e:36:f1:12:e4:d9:38:55:0e:7d:
0a:72:1f:57:f6:28:00:e9:7a:f5:c1:a8:05:53:40:
4b:d5:1b:37:4a:32:9f:5e:ae:15:f5:3c:64:7f:13:
4f:54:87:f8:cf:41:e6:19:e8:d1:38:a8:7d:df:32:
57:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E7:FF:18:12:88:77:91:30:91:E7:37:F3:86:1D:F3:31:06:6A:4D
X509v3 Authority Key Identifier:
keyid:12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:49:d6:75:37:bb:b8:b8:05:e2:d2:03:8e:2f:5f:c4:e2:44:
de:30:58:c2:13:d7:72:89:be:40:d2:c6:8f:68:a3:d6:95:a0:
4c:b8:0d:08:44:a8:fb:66:af:26:b0:65:2c:34:bf:a2:3e:88:
ea:43:c8:e7:53:af:2a:81:d8:45:08:c7:13:ad:2a:0f:a1:b0:
4f:48:45:f0:11:87:82:3d:9f:d5:09:d9:b8:d8:8e:f8:93:8b:
bf:1e:d7:b7:93:1a:b4:d5:7d:60:a4:c6:68:7b:b3:bb:c3:f6:
ef:2a:f9:61:36:b9:ab:e2:10:28:dd:a3:d1:75:f0:28:3e:13:
09:06:75:e7:6a:92:b4:55:5b:6e:81:e6:20:5e:ff:df:8c:13:
d9:a1:ef:a3:33:f5:73:07:18:90:87:ac:6e:ab:c1:ca:48:43:
57:14:5e:24:d1:a5:41:74:72:45:6f:f1:be:12:63:64:a5:0c:
fe:a5:4a:52:77:49:69:bb:b8:2a:44:74:4f:cf:de:38:37:9b:
83:e4:5c:06:03:7f:f0:3d:fa:4a:6f:3b:fc:61:10:db:51:e2:
d5:74:54:96:05:0a:e8:d0:05:91:80:cc:0b:ce:d1:1c:26:c9:
38:a7:90:47:c1:5f:3c:97:c5:29:46:1e:65:36:cd:d2:ee:29:
ac:bc:4c:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ38Tjv3IJZB65sFTaUsssckMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYjdhZDg1ODdmMzJiMjcyNjVlOWM2N2E2MTMyYmY5YjNm
MDIwZmMwHhcNMjYwNTA2MDgwMTE4WhcNMjYwNTA3MDgwMTE4WjAzMTEwLwYDVQQD
EygxZmU3ZmYxODEyODg3NzkxMzA5MWU3MzdmMzg2MWRmMzMxMDY2YTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthX50z4T16Aueqnrh0WTOrbpja/f
8uKAjchRlqj3jijhvoc2nCau0E/OOzsZ3v56f35lhIiRkT6hFt2iyZ3CDM9Vw/2F
2WVH+HULIdpC/h2FguXWIpeNENoVOjU55wy4cBTIk5qfzvvbcT8MHRlvUGfkDb++
44cra4OXIY9OkDRW0cA8Omb3ZRuu+Z8N2hfBhTN9auY6NECPLYHbEPEM5nCQWfPm
YWqt+mMuvYeD7A6bavH0PVUa+AD3eMObRED3GQg8tS7vaI428RLk2ThVDn0Kch9X
9igA6Xr1wagFU0BL1Rs3SjKfXq4V9TxkfxNPVIf4z0HmGejROKh93zJXvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/n/xgSiHeRMJHnN/OGHfMxBmpNMB8GA1UdIwQY
MBaAFBK3rYWH8ysnJl6cZ6YTK/mz8CD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84OTIyMGYtOTFlYy00Y2UxLTk5YzUt
MTA5MTIyNzlhMTI1LzEvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84OTIyMGYtOTFlYy00Y2UxLTk5YzUtMTA5MTIyNzlhMTI1
LzEvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQEnWdTe7
uLgF4tIDji9fxOJE3jBYwhPXcom+QNLGj2ij1pWgTLgNCESo+2avJrBlLDS/oj6I
6kPI51OvKoHYRQjHE60qD6GwT0hF8BGHgj2f1QnZuNiO+JOLvx7Xt5MatNV9YKTG
aHuzu8P27yr5YTa5q+IQKN2j0XXwKD4TCQZ152qStFVbboHmIF7/34wT2aHvozP1
cwcYkIesbqvBykhDVxReJNGlQXRyRW/xvhJjZKUM/qVKUndJabu4KkR0T8/eODeb
g+RcBgN/8D36Sm87/GEQ21Hi1XRUlgUK6NAFkYDMC87RHCbJOKeQR8FfPJfFKUYe
ZTbN0u4prLxMKw==
-----END CERTIFICATE-----
Generated at Wed May 6 10:05:14 2026 by rpki-client