Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
File: eRmmrv08qPUPyPNKs9FHklbbnXg.mft (raw, json)
Hash identifier: b1HJIc8R7+Z+Oj1+J47ktL5DFNTEMZ3e79N0fDGYQbQ=
Subject key identifier: A4:15:4B:0E:EA:68:94:70:33:99:46:47:23:97:26:3E:51:6B:BF:80
Authority key identifier: 79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78
Certificate issuer: /CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
Certificate serial: 019D38661FC62BB5BE793F8940000B2C2817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
Manifest number: 181D
Signing time: Sun 29 Mar 2026 07:01:50 +0000
Manifest this update: Sun 29 Mar 2026 07:01:50 +0000
Manifest next update: Mon 30 Mar 2026 07:01:50 +0000
Files and hashes: 1: eRmmrv08qPUPyPNKs9FHklbbnXg.crl (hash: nO9Jlmp5GeKVLfXLkCLdn9km3DzXZNq0OLasl7j++PA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:1f:c6:2b:b5:be:79:3f:89:40:00:0b:2c:28:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
Validity
Not Before: Mar 29 07:01:50 2026 GMT
Not After : Mar 30 07:01:50 2026 GMT
Subject: CN=a4154b0eea689470339946472397263e516bbf80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5f:b0:a4:b0:25:f9:a8:7b:16:2c:08:ca:df:
ff:45:00:f6:e9:91:0e:e3:f4:75:dd:84:a9:89:38:
40:3e:41:91:df:45:f4:ca:e8:54:d6:90:e2:65:ad:
7b:af:1b:3c:c4:7d:38:25:11:c4:11:04:f2:9f:31:
13:92:ac:a5:2d:fc:8a:8c:57:5e:3f:7d:12:89:61:
39:93:3d:66:68:03:8b:44:2e:78:09:5f:a3:1e:2c:
30:21:dd:8f:62:f2:6d:62:0f:03:dc:e1:23:dd:6c:
3f:de:93:30:27:9d:28:74:8a:96:08:0d:fc:b0:be:
28:dc:31:f8:65:97:bc:2a:91:7e:40:e4:45:4a:7f:
b7:13:dc:8a:3a:e5:26:d6:67:9d:93:15:f5:66:48:
d7:9c:2e:66:e3:b7:81:7b:cb:19:5a:ca:97:3d:87:
7d:05:d7:dd:03:74:8f:f6:fd:ac:42:b8:83:bc:c2:
9b:26:37:28:dd:ba:57:31:f1:a1:ba:e4:53:bf:f9:
cd:d8:f9:2a:f0:ba:b1:cb:25:a1:ce:c9:70:79:af:
8b:cc:c2:83:00:ee:99:34:71:dd:1c:74:62:6b:2f:
54:17:ad:9d:8f:c1:4a:4d:6c:b7:ae:1e:f7:6a:7b:
25:2c:4e:eb:ad:a5:52:43:fc:17:cb:73:7f:09:4b:
16:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:15:4B:0E:EA:68:94:70:33:99:46:47:23:97:26:3E:51:6B:BF:80
X509v3 Authority Key Identifier:
keyid:79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a8:d2:9e:0d:dd:31:10:ff:38:12:fb:62:f2:9d:1d:69:14:
84:66:67:2c:00:66:e3:dd:b5:5c:f1:ff:20:be:5b:80:3d:75:
74:ee:c9:f5:88:89:60:f3:50:71:13:70:cf:bc:3b:2a:9d:39:
12:b6:f7:18:47:4e:9a:9e:3a:a2:1d:e6:56:7b:0b:78:8e:30:
88:13:9d:5f:f6:6c:87:fc:71:cf:1a:6b:c8:83:7c:ad:c1:ad:
15:71:2b:96:34:b9:b1:a7:0a:7f:b0:91:3b:3f:e3:62:8a:f7:
25:b4:b9:d7:fe:18:a9:e7:6a:9a:65:47:88:8d:ec:2f:86:bf:
68:08:86:c4:28:60:a8:62:84:14:bb:35:59:9e:cc:9a:11:ad:
ce:f9:7e:ab:be:c5:34:3a:40:64:59:2b:0c:5a:d6:aa:4b:ec:
2c:21:51:d2:55:5b:b1:0b:89:75:86:95:5e:af:b6:22:ea:7c:
3d:e4:45:2a:80:b0:4d:04:fe:7f:76:62:94:71:96:6a:05:a2:
0c:3b:bb:ea:df:00:7e:ab:de:2a:75:4d:06:7e:fc:5d:6e:fe:
cd:c0:2f:e3:84:0d:57:61:2f:ef:b1:88:6e:b3:02:b9:e0:25:
e4:ae:21:63:84:8c:10:2c:80:99:27:d4:1c:74:9d:23:0c:a5:
ca:8a:0c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:58 2026 by rpki-client