Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
File: ERhPtlA6dgZX-QJw4naj_LULjo8.mft (raw, json)
Hash identifier: YWdQ8+/V+d84KYCHEBfCKC1o95Mwy9B6971Qthm8QKk=
Subject key identifier: EA:D3:29:0E:9C:45:3A:C5:BD:25:C2:1A:2B:0D:86:DA:89:B2:0B:6E
Authority key identifier: 11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
Certificate issuer: /CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Certificate serial: 019CC93E54503AE16F74174903D3A2C6DAFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
Manifest number: 1858
Signing time: Sat 07 Mar 2026 17:00:31 +0000
Manifest this update: Sat 07 Mar 2026 17:00:31 +0000
Manifest next update: Sun 08 Mar 2026 17:00:31 +0000
Files and hashes: 1: ERhPtlA6dgZX-QJw4naj_LULjo8.crl (hash: PqXfsaq0O859y43wuqm6HnDj5hhRuETI2KuapYlDmYU=)
2: I9hNFsiUppOM9VZIcAfH4qbXw_k.roa (hash: W4bc2pkEjBkLLPhivhIIPW+Vl4uMQLKBx8OjNwjL98A=)
3: lypKNyumbp3Rx5Ca8OfilFGC6co.roa (hash: 1pqIQQrSkAL4LQAupUembuigh5NslsCnzhntmGy1wNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:3e:54:50:3a:e1:6f:74:17:49:03:d3:a2:c6:da:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Validity
Not Before: Mar 7 17:00:31 2026 GMT
Not After : Mar 8 17:00:31 2026 GMT
Subject: CN=ead3290e9c453ac5bd25c21a2b0d86da89b20b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ad:e6:1c:fc:ec:72:97:5f:e1:24:db:57:78:
eb:49:d2:1c:28:4b:4e:aa:b4:dc:8a:9e:36:1f:e9:
a6:6a:fd:e4:73:81:3e:3e:4c:e4:67:e4:db:01:89:
1e:f1:ba:65:30:a3:4c:f8:d7:d2:af:37:d8:67:4a:
ae:4f:9f:f2:a7:a5:fc:50:4e:cc:be:79:4b:60:64:
b2:63:36:24:18:dc:13:f4:14:2b:42:95:5d:a1:d3:
de:a1:23:d6:37:08:d2:1b:19:d4:76:c3:f8:80:d3:
63:38:8b:31:bf:75:04:bd:71:3f:60:ee:b4:2f:e8:
dc:a0:fc:93:36:ad:f1:d6:a2:27:28:98:2d:b5:b5:
a7:5d:13:19:f3:63:fb:6f:d0:69:a6:c5:77:e6:a2:
24:c0:19:98:ca:dd:c9:59:4e:d1:ca:dd:d2:5a:ad:
da:c5:78:29:ae:95:9e:a3:98:6b:ff:4a:fe:cf:57:
8c:c2:49:ed:24:26:dd:ae:af:76:82:ec:92:59:1f:
68:ab:24:13:1a:54:bf:56:13:1d:36:cc:5e:16:c1:
17:8c:23:5b:ef:fd:0a:b8:0e:44:d5:28:32:01:c1:
4a:94:41:6c:21:be:9c:0f:be:6e:33:5f:0c:f7:2f:
3d:40:22:07:2a:2f:c1:b2:db:2c:2b:99:b5:1b:97:
35:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D3:29:0E:9C:45:3A:C5:BD:25:C2:1A:2B:0D:86:DA:89:B2:0B:6E
X509v3 Authority Key Identifier:
keyid:11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f9:84:7f:da:62:b1:d3:7f:69:5c:3d:29:db:95:5d:e0:0f:
1c:72:d5:79:13:39:4e:9e:04:27:c6:e6:01:c8:f1:15:d0:61:
ea:1c:57:94:45:ec:e5:c6:82:e2:32:71:39:de:d2:5a:46:4b:
54:3a:1c:db:a7:ab:33:43:46:39:92:d8:a9:87:bb:75:c2:33:
9b:1c:d0:07:33:aa:b3:56:62:b7:7e:a8:97:bd:80:c6:17:8f:
3b:16:05:fe:a1:b0:d1:79:1f:f9:e8:74:4c:d5:f2:55:a5:cf:
06:f1:57:9d:fa:7f:c3:49:9e:9a:9c:99:c7:ae:e3:58:7c:d1:
cf:00:7e:3e:d0:44:c8:86:e4:3b:b4:37:20:ac:09:3b:78:32:
77:ef:63:85:9a:08:ef:a5:9e:ff:ba:09:b7:ff:cd:08:6a:97:
d7:c6:88:ff:2c:bd:23:7b:ed:3e:d4:b4:6b:a9:7c:ed:18:be:
2c:d0:e5:57:c6:3d:d2:ca:71:61:94:7f:b9:60:7c:af:a4:43:
ea:e5:6b:25:45:27:bd:46:7c:fc:a1:0f:31:12:4d:4d:ee:28:
40:98:b7:85:b6:fc:b2:6c:74:9f:bc:a7:fd:bc:41:72:0d:68:
2d:23:59:13:1f:0b:5f:1e:48:4c:63:d8:41:5f:8e:81:92:33:
69:ce:58:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 20:49:23 2026 by rpki-client