Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
File: ERhPtlA6dgZX-QJw4naj_LULjo8.mft (raw, json)
Hash identifier: DiJR93DfCyMBWFLDLXCFMnTFQT6mUE+iVu+6ON3OJm4=
Subject key identifier: 04:D2:BD:CA:2F:75:00:C1:B5:48:05:71:6D:E3:B9:D5:EC:68:B0:D7
Authority key identifier: 11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
Certificate issuer: /CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Certificate serial: 019E9C97DF28094E574909181AFA1DA2F8E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
Manifest number: 194A
Signing time: Sat 06 Jun 2026 11:00:59 +0000
Manifest this update: Sat 06 Jun 2026 11:00:59 +0000
Manifest next update: Sun 07 Jun 2026 11:00:59 +0000
Files and hashes: 1: ERhPtlA6dgZX-QJw4naj_LULjo8.crl (hash: FM4pqbhRoKPjtXxR6U4LzsK+0tLeHaTLpJcywP8bQjo=)
2: I9hNFsiUppOM9VZIcAfH4qbXw_k.roa (hash: W4bc2pkEjBkLLPhivhIIPW+Vl4uMQLKBx8OjNwjL98A=)
3: lypKNyumbp3Rx5Ca8OfilFGC6co.roa (hash: 1pqIQQrSkAL4LQAupUembuigh5NslsCnzhntmGy1wNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:97:df:28:09:4e:57:49:09:18:1a:fa:1d:a2:f8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Validity
Not Before: Jun 6 11:00:59 2026 GMT
Not After : Jun 7 11:00:59 2026 GMT
Subject: CN=04d2bdca2f7500c1b54805716de3b9d5ec68b0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5f:4f:68:cd:fc:55:66:0e:78:d1:48:81:ca:
9a:72:83:88:44:e1:e0:b5:12:72:79:93:98:be:ff:
fb:53:ef:4d:15:ba:91:ff:62:62:c7:a1:8c:e7:c5:
69:47:51:2f:01:17:b2:3d:e9:12:71:d5:12:93:33:
55:af:08:39:da:d8:92:46:2b:4c:0a:b5:51:58:5a:
26:86:40:64:f4:0c:8b:94:76:e5:2d:9e:90:b8:12:
65:4c:ce:6c:57:b8:1e:6c:c9:d5:0f:61:9e:54:4e:
0c:26:ff:46:c0:ee:38:57:5e:1a:4d:16:b6:8a:a0:
31:46:f2:ac:fe:23:84:7a:80:c0:dc:d5:65:0b:d5:
6c:f7:8e:f6:2f:0f:01:f3:4a:07:0f:05:09:5a:6e:
20:69:23:11:a0:70:b7:67:56:b3:23:a6:17:99:e6:
42:06:0c:2b:e2:f4:e6:85:c9:44:3b:bc:b2:4c:93:
bb:0a:e3:d0:38:7f:75:02:21:59:8e:d2:4f:e0:4c:
e4:fb:b0:8d:a4:d4:92:13:f4:b6:37:31:93:f8:eb:
22:dd:ad:99:98:8f:17:16:28:3c:5e:0f:b8:24:91:
ab:90:c6:76:3d:9d:f5:7d:63:68:69:c3:dd:41:ea:
7a:01:29:bb:08:9d:6e:48:f5:35:f9:3b:19:31:49:
54:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D2:BD:CA:2F:75:00:C1:B5:48:05:71:6D:E3:B9:D5:EC:68:B0:D7
X509v3 Authority Key Identifier:
keyid:11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c3:94:51:71:a1:7a:61:21:13:23:18:8e:59:3c:cf:9e:e8:
13:47:f9:cb:d5:aa:5a:68:86:a1:c6:cf:a5:a0:c5:31:6c:03:
5c:a2:f4:94:a1:ff:99:af:ce:1f:b7:02:56:97:bb:17:5b:8a:
0f:ce:48:f7:20:5e:50:ce:df:02:87:5b:d9:b2:79:bd:30:99:
b1:bc:78:9b:2b:8f:97:bf:7b:48:db:44:f4:d0:7d:01:42:e7:
a9:e7:56:e1:92:3b:9f:99:86:25:fa:b9:6e:6a:1d:a2:02:10:
09:11:69:b1:4a:23:cf:ba:d7:88:1c:f4:a1:99:cc:36:b9:0e:
99:60:db:22:7d:ff:6e:0f:a7:5e:a6:5f:1b:72:19:cf:97:64:
ea:61:1e:94:a1:04:22:0a:9b:ec:a9:77:05:88:83:ce:60:74:
12:1e:6d:e2:ea:dd:0d:31:a8:d5:4d:6c:a4:d5:20:d2:99:e8:
b3:8e:df:20:a6:fa:d8:cd:ff:52:9c:46:16:73:b5:6a:ea:8b:
12:2f:a9:0e:f2:c5:91:a5:58:ad:01:26:ce:32:b1:e1:62:67:
59:f9:7d:58:69:af:f7:70:3d:45:c1:78:85:1d:2a:3a:ac:ce:
38:a5:82:43:51:30:fd:c4:47:a9:cd:f4:0a:ec:58:07:9e:fe:
9b:d7:d9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:21:37 2026 by rpki-client