Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
File: ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft (raw, json)
Hash identifier: yTLlCwYRKFG0r+RRbjclpMe2ceDB1FyPjSedYC45kaA=
Subject key identifier: 24:67:68:22:79:7C:B4:45:43:CB:E6:6A:6C:74:E3:4F:8A:17:3E:0B
Authority key identifier: 11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
Certificate issuer: /CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
Certificate serial: 019DDE0CE7F010384BC7EFEF8473EC976E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
Manifest number: 0784
Signing time: Thu 30 Apr 2026 11:01:20 +0000
Manifest this update: Thu 30 Apr 2026 11:01:20 +0000
Manifest next update: Fri 01 May 2026 11:01:20 +0000
Files and hashes: 1: ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl (hash: Lv56BwhWuevOV2SNBsknku+QJyrZJ2xFEAqq+gb4cpU=)
2: KaboQiocR929GCG29p5Fn_-ZE5o.roa (hash: fkHknMnvtPeBcLwuEn6gGYmWMMqGXg1zBzQziCqwcvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:0c:e7:f0:10:38:4b:c7:ef:ef:84:73:ec:97:6e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
Validity
Not Before: Apr 30 11:01:20 2026 GMT
Not After : May 1 11:01:20 2026 GMT
Subject: CN=24676822797cb44543cbe66a6c74e34f8a173e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:95:ad:f3:e4:a9:d5:a4:a4:35:3f:ed:d7:b0:
a9:23:2d:89:d4:b1:8e:92:11:3f:31:74:f4:45:24:
16:01:fb:30:f6:78:9d:50:1b:46:28:6e:8c:34:d9:
a7:ad:bb:55:86:82:20:25:66:a6:0e:dd:2c:43:4b:
a9:b3:9f:b8:7a:bb:ed:a9:e4:ac:a8:de:ec:f0:c7:
25:6e:e0:fb:39:16:69:0d:9e:12:07:ec:61:a9:4d:
59:b0:8c:59:43:04:5b:f9:f2:92:10:4e:47:bb:e5:
f5:53:bb:c0:fb:10:09:0a:a8:63:f3:07:07:ed:f0:
6d:e3:23:a3:c3:c4:e4:c6:71:d5:d6:24:9d:5e:c9:
ec:24:68:12:91:b0:d4:86:a6:41:68:45:c4:85:d6:
cd:e3:4b:74:17:66:6e:4d:6f:c1:97:66:5f:51:b8:
0b:0b:14:4f:25:5e:19:cf:b9:81:a0:f7:65:6f:07:
c3:19:ac:6e:d3:5e:61:59:17:16:cd:b3:f5:04:be:
3d:48:1e:41:71:0a:6c:18:a6:46:5e:5b:a2:c5:55:
9d:90:2e:57:87:7f:57:5b:bf:fd:b1:7e:5c:49:9c:
6c:0a:96:88:68:b5:35:77:35:c0:b7:72:8d:a8:92:
23:1d:0b:1f:2a:13:f3:3c:92:f5:96:e4:e7:00:80:
7e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:67:68:22:79:7C:B4:45:43:CB:E6:6A:6C:74:E3:4F:8A:17:3E:0B
X509v3 Authority Key Identifier:
keyid:11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:40:a9:a4:03:ca:49:aa:72:52:5d:3a:f6:6b:50:51:99:30:
8e:ca:ce:85:da:44:17:ec:a5:65:eb:5a:c8:b2:df:23:16:9c:
95:76:2e:f8:87:8d:3e:7f:7d:51:58:2d:98:0e:e5:bd:4e:62:
78:ac:bf:a1:92:73:e7:54:19:b7:d0:e4:d3:c0:da:6d:9e:e1:
52:67:13:df:39:6f:ac:4a:d7:f9:ff:00:ca:36:25:3d:16:c9:
b5:db:f8:8a:c3:34:e1:84:66:bd:a5:6c:8c:e8:a7:4a:5c:6d:
94:93:2e:d1:e3:ee:bd:33:7a:bc:46:39:50:f2:9d:1b:1c:fb:
4b:c9:5d:88:af:7a:46:18:66:b6:64:eb:c8:30:c4:26:a9:07:
73:82:b6:17:71:2f:94:9a:90:9c:3e:eb:4c:ad:da:c4:5f:00:
dc:f2:f0:5f:69:85:13:5a:b3:28:f6:9c:e7:88:91:bc:e8:5e:
0e:d5:34:2d:bb:d8:e1:10:21:c3:70:2e:50:1f:08:12:a8:b4:
3e:30:ff:b8:fd:af:8c:9a:f8:85:58:e0:f4:04:09:12:81:c8:
1e:85:83:c9:67:a8:dd:b4:77:5d:5e:f7:76:23:76:c0:25:fc:
93:be:50:e7:ad:28:d8:77:a2:8c:1a:73:b7:86:b6:6b:ce:65:
c3:b1:8f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 21:06:40 2026 by rpki-client