Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
File: ERRf3gGvgQdg7mG881TPlirEYNk.mft (raw, json)
Hash identifier: o48iPE/AwpImSrws6wxkoPh1uM5CMqcttG7oKgpoffw=
Subject key identifier: F2:1C:18:A5:8A:6F:6B:C0:6F:4F:FF:0F:CB:87:FB:31:AF:87:EE:8C
Authority key identifier: 11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9
Certificate issuer: /CN=11145fde01af810760ee61bcf354cf962ac460d9
Certificate serial: 01A173CB7BF6D6CE0B31DB3D0FC987B3D118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
Manifest number: 1328
Signing time: Sun 25 Oct 2026 16:01:17 +0000
Manifest this update: Sun 25 Oct 2026 16:01:17 +0000
Manifest next update: Mon 26 Oct 2026 16:01:17 +0000
Files and hashes: 1: ERRf3gGvgQdg7mG881TPlirEYNk.crl (hash: 0BlDbyD/UplzPSbH2mmYal7gONHjcqed7nt37zJSWIw=)
2: Hyuuk77aXVuDiZApqxvQdHAqv1c.roa (hash: kj5MrWTwW/9CXEtRL1jC4+VD3V1e9sFAl7gGS1hXkNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 16:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:cb:7b:f6:d6:ce:0b:31:db:3d:0f:c9:87:b3:d1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11145fde01af810760ee61bcf354cf962ac460d9
Validity
Not Before: Oct 25 16:01:17 2026 GMT
Not After : Oct 26 16:01:17 2026 GMT
Subject: CN=f21c18a58a6f6bc06f4fff0fcb87fb31af87ee8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a8:db:ed:07:6f:78:da:0c:5d:f4:94:65:a8:
9c:ad:ec:ed:9e:c3:85:fc:f4:28:21:9e:e7:bb:0c:
a3:00:5e:d2:f6:00:78:1a:0d:9c:f8:ac:6f:dd:45:
5d:ef:fd:97:a3:ed:ed:26:b2:f7:4d:96:de:c1:98:
c2:b9:96:d4:7b:18:23:f3:35:49:62:40:c7:80:95:
b6:58:e4:79:d4:57:93:a8:60:fd:25:87:76:b4:ee:
71:18:7e:22:97:5a:dd:a5:9f:1a:31:4a:76:f8:b3:
56:ee:23:12:07:e8:ff:12:ae:9d:da:c2:70:10:e2:
67:77:78:86:61:d4:75:55:d8:d1:13:c8:9d:50:56:
c6:1b:f3:b8:77:28:20:33:55:1a:29:a4:49:37:01:
4f:b4:44:a3:9e:39:57:6e:d8:6f:e1:ae:9e:5d:66:
56:fe:2f:a1:8f:71:17:80:27:b8:4c:62:91:a1:ca:
52:98:7f:2e:e0:22:60:b7:06:30:6d:04:f9:d9:24:
3f:ec:9a:2d:ed:26:45:d4:fb:5a:5d:64:bd:f9:05:
e8:47:b0:b7:21:8f:f8:2b:bc:49:46:b9:32:f7:2f:
2e:fa:2e:e8:c2:4b:62:7d:a5:af:c9:24:cd:28:01:
69:8d:11:b1:f9:7e:2f:73:93:cd:f3:c3:03:fe:4a:
89:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1C:18:A5:8A:6F:6B:C0:6F:4F:FF:0F:CB:87:FB:31:AF:87:EE:8C
X509v3 Authority Key Identifier:
keyid:11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ce:54:66:ae:f9:d1:96:5c:08:09:c6:49:84:5e:e4:21:03:
81:48:cf:a1:35:5c:89:6a:0d:ad:d3:c0:cd:d4:df:f5:bd:53:
42:b6:36:eb:94:1b:b9:32:06:d6:0f:5e:a1:7a:6d:f8:43:af:
86:f9:78:42:7d:b5:7f:6e:32:c7:6b:4a:2b:70:0b:63:00:99:
ff:53:93:dc:38:d0:47:af:0d:ba:df:61:a3:e6:5b:af:c1:00:
2a:fe:cc:d6:84:e4:ab:2d:c5:7f:01:d0:97:3b:11:db:d7:26:
59:39:f8:bf:c6:f8:ea:a1:a1:d5:32:54:5b:2d:c3:72:98:2e:
3d:cf:3f:4e:07:41:73:a3:54:ce:b7:5d:d5:9c:4c:5b:68:ca:
fa:bc:f8:cf:e0:5d:c2:ba:cc:8d:2b:32:76:21:ff:26:a7:fb:
76:8d:4f:af:b6:1c:13:d0:d8:cc:5f:61:2e:95:3c:24:e4:b1:
8d:d7:77:54:1e:f6:4e:d5:af:b8:3a:68:6d:65:64:7a:4f:d0:
19:8e:d3:d7:df:7d:f7:d9:dc:0f:51:28:16:bb:69:ac:e9:a1:
7b:d1:94:f0:ec:5a:46:38:c0:4d:da:28:62:cc:13:25:f4:f5:
0b:61:dd:ad:a0:87:0e:17:40:b6:fd:b0:90:bf:a6:3c:f7:e4:
05:01:e0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:36:28 2026 by rpki-client