Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
File: ERhPtlA6dgZX-QJw4naj_LULjo8.mft (raw, json)
Hash identifier: EcpAHnn9W4irb3nHlRWB2jExyCPcp++/TUfBWjnvdOo=
Subject key identifier: 19:1E:1E:4D:5B:9D:61:70:B1:06:D4:71:10:91:67:C8:4E:2F:87:03
Authority key identifier: 11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
Certificate issuer: /CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Certificate serial: 01A06E02D119022C93A0E305A6CB870B96EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
Manifest number: 1A3B
Signing time: Fri 04 Sep 2026 20:01:13 +0000
Manifest this update: Fri 04 Sep 2026 20:01:13 +0000
Manifest next update: Sat 05 Sep 2026 20:01:13 +0000
Files and hashes: 1: ERhPtlA6dgZX-QJw4naj_LULjo8.crl (hash: /fJ3ttCWhjBd+u0MzfLu3m2AnnnqLSpkGSuYyPmwxCc=)
2: I9hNFsiUppOM9VZIcAfH4qbXw_k.roa (hash: W4bc2pkEjBkLLPhivhIIPW+Vl4uMQLKBx8OjNwjL98A=)
3: lypKNyumbp3Rx5Ca8OfilFGC6co.roa (hash: 1pqIQQrSkAL4LQAupUembuigh5NslsCnzhntmGy1wNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:02:d1:19:02:2c:93:a0:e3:05:a6:cb:87:0b:96:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Validity
Not Before: Sep 4 20:01:13 2026 GMT
Not After : Sep 5 20:01:13 2026 GMT
Subject: CN=191e1e4d5b9d6170b106d471109167c84e2f8703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:66:0c:7a:fa:86:f2:fe:c4:de:ea:d0:5b:52:
c2:bf:91:8c:98:e5:a8:13:64:be:4a:4c:51:d7:16:
7f:66:07:96:15:98:d6:d8:d3:02:26:e9:29:20:ae:
60:7b:b4:9c:0d:98:b2:5c:b1:7e:97:33:62:e7:4f:
c1:f0:4a:aa:13:fc:a4:34:31:81:8d:92:ca:1b:37:
5d:36:e5:40:9a:86:2f:57:82:88:1e:4e:7b:1e:58:
38:2c:6e:5b:76:b4:33:03:a2:e4:68:83:59:f9:0e:
32:b9:6a:60:e3:61:97:ec:ec:9f:72:87:cb:fc:29:
ed:8e:d9:d8:83:59:19:19:11:a8:b7:9f:1f:e1:ff:
62:a6:c6:a8:e4:9a:af:be:6a:b2:c2:f4:93:28:57:
e1:40:b2:c6:98:c7:5d:18:b8:59:ac:fc:e9:bd:fe:
08:9d:76:1e:a7:4c:1d:d8:03:18:42:97:d2:de:13:
8a:ff:1b:74:c4:c7:fb:9d:a5:25:68:bb:24:08:1d:
9e:58:d0:9b:d1:39:23:43:ff:03:1e:ed:1f:c8:f7:
cd:9e:c5:3f:8d:e0:5b:96:21:bd:2b:ba:ef:0d:a5:
8a:7a:0b:4a:37:39:23:e0:86:5d:c9:81:f9:2b:17:
89:2b:d1:0a:82:e1:30:c7:c8:b1:c2:d6:f6:3c:7c:
ea:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1E:1E:4D:5B:9D:61:70:B1:06:D4:71:10:91:67:C8:4E:2F:87:03
X509v3 Authority Key Identifier:
keyid:11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:db:c5:82:39:ad:dc:82:b8:b8:2f:f9:5b:78:51:e9:2b:e4:
90:21:6b:e4:23:65:6c:9c:a3:48:6a:63:3f:54:47:26:0f:64:
b1:b6:8a:42:93:92:37:8b:dc:86:5b:a4:7d:64:28:01:13:34:
e1:85:a5:f5:10:64:f2:82:5d:f6:b7:21:c1:a0:f1:da:e3:0f:
a3:9f:8c:e8:23:97:1c:ee:36:ac:ef:c3:7b:45:f6:9f:06:cb:
b3:b7:b7:f6:c7:3b:7c:88:21:5d:6b:65:dc:dc:30:f3:8e:5a:
ba:53:a1:42:07:bf:82:84:23:2a:d4:5c:92:0b:c3:86:c1:e2:
1b:98:22:48:ee:b8:0c:75:a2:54:31:ae:7a:a6:9e:24:28:9c:
9f:34:e2:24:1d:c5:0d:f5:4b:f1:dd:6e:61:80:15:90:f5:d5:
9e:8d:f4:b7:74:b3:9e:a1:ca:1d:96:42:f3:5d:e0:2b:3a:b2:
fc:77:af:78:d7:46:7c:a2:1d:70:9a:73:8a:50:71:7b:e8:f0:
c9:ce:30:76:a2:31:5b:7b:27:f2:21:25:5f:aa:a9:c3:c2:76:
ce:c3:c8:80:e5:70:b6:13:b2:4a:26:d0:bc:00:7a:37:ca:8d:
fe:bf:c6:af:02:2b:00:30:f1:80:45:44:40:2c:70:4b:da:e7:
cf:f7:23:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:34:20 2026 by rpki-client