Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
File: ERhPtlA6dgZX-QJw4naj_LULjo8.mft (raw, json)
Hash identifier: 3xCW+jqfnkDUBGYe4it04Ri45Qk5BdlIn7apzKgbRmI=
Subject key identifier: CE:7D:49:2F:6E:8B:6A:EC:A8:9D:DF:C5:00:E0:6A:D1:D7:2C:EE:1C
Authority key identifier: 11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
Certificate issuer: /CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Certificate serial: 01A16AFEE6214D09323221EEAF1A037B17E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
Manifest number: 1ABE
Signing time: Fri 23 Oct 2026 23:00:52 +0000
Manifest this update: Fri 23 Oct 2026 23:00:52 +0000
Manifest next update: Sat 24 Oct 2026 23:00:52 +0000
Files and hashes: 1: ERhPtlA6dgZX-QJw4naj_LULjo8.crl (hash: kHlakadtlwwyaPRpB30HqXfJz3nQ9GZTe70S0FUMHJg=)
2: I9hNFsiUppOM9VZIcAfH4qbXw_k.roa (hash: W4bc2pkEjBkLLPhivhIIPW+Vl4uMQLKBx8OjNwjL98A=)
3: lypKNyumbp3Rx5Ca8OfilFGC6co.roa (hash: 1pqIQQrSkAL4LQAupUembuigh5NslsCnzhntmGy1wNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 23:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:fe:e6:21:4d:09:32:32:21:ee:af:1a:03:7b:17:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Validity
Not Before: Oct 23 23:00:52 2026 GMT
Not After : Oct 24 23:00:52 2026 GMT
Subject: CN=ce7d492f6e8b6aeca89ddfc500e06ad1d72cee1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:54:f2:64:69:cb:4d:e8:54:4a:c3:45:f8:22:
3b:ce:8f:9b:5a:cf:df:6a:fc:45:ec:ab:df:aa:0e:
68:2b:ee:a5:45:c6:c2:4c:04:81:db:1f:cf:64:9d:
bc:74:d8:26:63:25:4b:90:5c:0f:3d:41:9b:51:3b:
9a:b6:46:8a:ed:23:80:93:cd:f8:ca:cb:75:2b:6c:
52:96:34:f9:86:e2:75:47:c1:8b:bc:35:89:63:95:
cc:43:0b:ab:98:8f:c7:47:17:20:f8:6f:b8:be:31:
ab:71:c1:0f:dd:46:02:87:1c:f0:9e:38:3f:02:1c:
d1:14:bc:60:f3:ad:f9:fc:26:6d:83:d9:2c:92:0a:
c3:ba:f7:cd:c5:46:4b:ce:24:09:4c:f4:ea:32:a3:
71:3c:4b:91:b9:c2:19:15:cd:bd:0e:90:a6:a8:2e:
3d:d2:ac:2c:40:43:a0:ca:96:1b:6c:df:c1:68:6c:
21:88:93:a7:99:cb:7a:ea:85:73:4c:bd:6d:60:83:
56:11:42:61:03:f7:d1:0e:06:2a:5f:51:d9:94:e8:
c8:b4:36:aa:e5:b1:c4:62:7f:60:73:af:4c:61:62:
ca:cc:e4:f3:5e:4e:77:26:52:38:a7:94:1a:9e:34:
1d:b9:c4:43:c5:e0:38:66:d7:8d:1c:2c:55:36:85:
07:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7D:49:2F:6E:8B:6A:EC:A8:9D:DF:C5:00:E0:6A:D1:D7:2C:EE:1C
X509v3 Authority Key Identifier:
keyid:11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:95:8c:a5:76:b7:82:88:f9:95:c7:0c:c0:73:a0:06:31:27:
97:cd:d3:70:a8:d4:91:eb:b5:9d:f8:6c:98:80:0a:9b:29:65:
8d:42:6e:08:89:fe:c5:36:71:5f:d4:7d:b6:f4:3a:9f:08:45:
8d:1d:7d:8e:a1:0e:14:1e:d2:f0:c0:52:b2:4c:08:8e:5d:9d:
f3:c7:3d:d7:fa:5f:9d:da:92:dc:cc:13:33:17:9a:60:48:03:
64:1b:b9:2b:0e:e4:2f:3e:be:f2:2e:6f:dd:f3:ff:cd:c7:6a:
5a:86:f8:dd:fd:72:95:29:24:58:91:0f:4f:53:67:9f:96:23:
43:80:71:7c:a8:01:ca:1d:94:c2:84:d4:d4:3f:11:fa:e9:77:
94:41:96:17:0e:cb:bc:cf:2d:17:7a:ea:1b:62:25:73:06:cf:
2d:6b:7a:52:c9:d3:6a:c1:d9:4e:8a:2f:46:80:4e:08:47:39:
4e:73:b7:9b:a7:c6:4b:5e:1f:80:83:8f:0f:59:3f:39:7f:8e:
7c:e9:b6:d6:52:59:86:52:f3:bb:ba:eb:43:a3:ea:7e:b6:7d:
a2:5e:14:4a:5a:24:b1:02:2f:1f:a2:19:41:a5:fd:99:93:7c:
ce:fa:f6:5d:3d:83:67:c5:28:59:6e:7b:b1:0d:09:a4:2e:e4:
11:29:2f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:14:48 2026 by rpki-client