Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
File: ERhPtlA6dgZX-QJw4naj_LULjo8.mft (raw, json)
Hash identifier: teOzLqzO4X/n4Z4Q5O2I/kcP13RNzm4ukfvlbeYyKtk=
Subject key identifier: 7E:56:4B:B1:45:2A:BD:51:B5:1F:3A:83:B5:47:FC:22:E8:59:06:BC
Authority key identifier: 11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
Certificate issuer: /CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Certificate serial: 019DB0FC946B87162E5076D6134D659D4ED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
Manifest number: 18D0
Signing time: Tue 21 Apr 2026 17:00:36 +0000
Manifest this update: Tue 21 Apr 2026 17:00:36 +0000
Manifest next update: Wed 22 Apr 2026 17:00:36 +0000
Files and hashes: 1: ERhPtlA6dgZX-QJw4naj_LULjo8.crl (hash: CO3eug3280MhAEYIsoZxg81otKAefl82rdRx1/FkkyM=)
2: I9hNFsiUppOM9VZIcAfH4qbXw_k.roa (hash: W4bc2pkEjBkLLPhivhIIPW+Vl4uMQLKBx8OjNwjL98A=)
3: lypKNyumbp3Rx5Ca8OfilFGC6co.roa (hash: 1pqIQQrSkAL4LQAupUembuigh5NslsCnzhntmGy1wNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:fc:94:6b:87:16:2e:50:76:d6:13:4d:65:9d:4e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Validity
Not Before: Apr 21 17:00:36 2026 GMT
Not After : Apr 22 17:00:36 2026 GMT
Subject: CN=7e564bb1452abd51b51f3a83b547fc22e85906bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6e:c8:fe:89:98:1a:ec:99:90:b2:35:13:2f:
9a:8a:27:c3:b2:52:12:da:f3:d2:4b:cd:79:51:0f:
4c:19:92:91:b2:af:3e:0f:5a:b9:c3:69:fc:4b:60:
f2:47:cf:54:aa:17:cf:89:b2:7f:1b:56:84:47:aa:
c1:eb:63:f1:12:cc:59:0c:df:28:b3:7d:45:79:01:
f5:c3:14:dc:cb:05:5a:94:62:1e:60:aa:a4:72:98:
c3:7b:5f:6d:e9:39:b6:58:b9:1e:32:46:fe:ec:18:
5f:4e:09:0f:c7:66:42:8b:78:9b:1c:75:13:72:c5:
d2:df:f6:de:06:17:f1:95:8f:e3:58:22:09:d4:cf:
c9:e5:48:0b:68:76:f8:98:ff:e6:9d:7c:c1:5b:39:
93:a0:88:9a:0c:52:82:b9:63:18:55:c8:e5:1d:ad:
9d:37:b2:d8:f6:be:a8:49:20:48:76:20:17:5f:a4:
d1:f4:d6:d6:81:fa:85:2e:7a:88:79:d9:8a:32:96:
d6:6b:d7:06:12:d9:0c:8a:7a:3c:cc:10:cb:f4:92:
86:0e:af:aa:f8:12:9f:8f:3c:2e:9e:93:88:79:28:
1c:2d:1a:78:a7:12:a9:9b:89:a5:31:ab:ae:45:cd:
9b:af:68:45:e8:54:42:91:45:10:c7:da:ef:24:c6:
2a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:56:4B:B1:45:2A:BD:51:B5:1F:3A:83:B5:47:FC:22:E8:59:06:BC
X509v3 Authority Key Identifier:
keyid:11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e8:f4:69:70:05:f9:14:73:38:0e:9b:36:6c:de:08:a9:d4:
41:96:32:b0:de:2c:96:f0:8a:26:bf:93:91:5c:b6:56:17:c8:
0f:f6:a0:4a:ed:9b:dc:8c:7f:3b:ba:77:df:2d:f1:db:69:d8:
e1:28:c7:7d:a8:02:84:7f:a7:c3:03:64:99:a7:3e:af:63:70:
d9:ea:76:00:df:88:02:f0:50:e8:e9:76:78:50:d0:5d:6b:6d:
2c:a4:6d:d0:fe:b0:11:15:17:b0:e8:f6:0c:fc:96:51:fb:29:
ba:9a:9a:1c:ee:8c:48:df:39:c7:e0:59:a1:8a:1e:52:c5:fa:
19:e9:8b:40:29:6e:ce:6a:aa:27:b8:0c:5a:ee:6d:ca:96:1a:
db:1e:c9:5d:58:57:fe:26:c2:2b:02:50:e1:d1:ff:4b:9a:17:
e5:33:ef:1e:cc:2e:6e:5b:86:9a:3e:f6:8e:c5:77:16:2b:a7:
6f:8d:66:d9:9b:10:c2:c3:78:a2:54:6b:e5:58:60:38:09:6f:
a5:4e:38:56:9d:e0:b0:36:87:31:87:18:f5:c5:b6:a5:a7:38:
41:6b:3c:cd:b7:86:63:32:2e:5c:c2:45:00:d2:69:36:ce:b8:
56:1b:a4:41:c3:40:3a:7a:2c:9b:9b:49:61:23:3b:88:ee:14:
4c:ad:91:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 00:08:31 2026 by rpki-client