Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
File: ERhPtlA6dgZX-QJw4naj_LULjo8.mft (raw, json)
Hash identifier: lQsP18igEw1+cMSn61mqIonrZhIXtiuTsZQ52CG8xGI=
Subject key identifier: C3:51:6F:78:46:17:BA:16:19:64:2D:3A:7E:E5:54:1B:9C:92:C4:B4
Authority key identifier: 11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
Certificate issuer: /CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Certificate serial: 019F8643F38B7211CCD6141509D3835AB06F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
Manifest number: 19C3
Signing time: Tue 21 Jul 2026 20:00:27 +0000
Manifest this update: Tue 21 Jul 2026 20:00:27 +0000
Manifest next update: Wed 22 Jul 2026 20:00:27 +0000
Files and hashes: 1: ERhPtlA6dgZX-QJw4naj_LULjo8.crl (hash: +t9uAswnj30NStalfcweo2YYZyS92Jg/PDu9BYTxmtA=)
2: I9hNFsiUppOM9VZIcAfH4qbXw_k.roa (hash: W4bc2pkEjBkLLPhivhIIPW+Vl4uMQLKBx8OjNwjL98A=)
3: lypKNyumbp3Rx5Ca8OfilFGC6co.roa (hash: 1pqIQQrSkAL4LQAupUembuigh5NslsCnzhntmGy1wNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:43:f3:8b:72:11:cc:d6:14:15:09:d3:83:5a:b0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Validity
Not Before: Jul 21 20:00:27 2026 GMT
Not After : Jul 22 20:00:27 2026 GMT
Subject: CN=c3516f784617ba1619642d3a7ee5541b9c92c4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:32:13:09:07:a0:7e:57:cc:40:69:1d:ca:9c:
7c:cb:d6:2a:cf:ad:c0:3c:11:93:46:e0:89:58:e5:
ef:c7:d1:40:00:31:b0:0f:da:a0:04:f7:d0:15:3a:
21:a6:34:8a:af:33:d2:e3:87:f3:5f:0a:db:27:be:
df:fc:f6:12:7b:a6:8a:36:24:01:68:a8:e5:e1:df:
24:41:66:73:b5:7e:79:e1:05:c0:b2:de:4a:7f:8f:
57:9c:0f:9c:3d:f4:b0:f2:e3:f5:3b:8e:bc:c1:54:
5a:52:08:d8:75:85:7b:f4:54:b3:ba:53:df:ac:48:
4e:2b:88:44:78:3c:1d:e5:be:6b:fb:af:38:4b:74:
6c:f0:20:04:97:7d:32:53:37:f3:d3:b8:4a:95:03:
d4:5c:c7:60:71:d8:9e:19:63:70:c0:d3:f8:1a:ae:
83:c3:6c:b4:f8:28:16:c4:63:15:62:62:6f:e1:fe:
07:64:cb:f7:54:c5:3e:14:36:73:83:7c:c9:18:42:
9d:2c:d6:f5:ca:4e:fb:90:94:a7:33:72:8b:4c:d3:
15:75:fb:46:c6:d4:7a:90:16:2f:d5:1d:7d:2d:d4:
5d:a4:ac:d3:d9:79:37:f1:ce:78:ca:9c:ba:d8:82:
4b:4c:6a:d3:50:49:88:78:79:2a:34:cb:a3:e2:fd:
a2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:51:6F:78:46:17:BA:16:19:64:2D:3A:7E:E5:54:1B:9C:92:C4:B4
X509v3 Authority Key Identifier:
keyid:11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:89:9d:c2:0e:62:9a:e9:e5:8b:d2:f3:a4:29:ea:1b:52:f7:
46:42:f6:62:e3:84:48:6b:30:ad:da:66:51:84:3d:ab:38:5b:
23:9c:4c:7c:bb:1d:ca:0e:31:92:d5:ef:8f:1f:1d:f2:19:27:
05:f7:aa:97:b8:85:58:2f:95:1c:0c:ca:83:ae:d7:18:f8:2e:
54:08:12:ed:7f:82:38:d7:db:9e:c3:f5:8b:00:7c:97:f2:ed:
5d:ba:79:62:cf:58:97:63:8c:d3:77:4d:8f:f3:bc:32:2d:da:
6c:ac:a6:02:8f:9c:b6:4d:9e:8a:0f:79:c1:e9:d5:9d:83:04:
2a:2f:e5:3f:b9:f5:88:89:0d:56:a7:96:71:4d:c6:60:22:36:
b0:ed:5c:0a:08:b1:84:15:7b:eb:70:ac:b2:17:cc:3e:d7:66:
58:41:8a:60:6b:50:3c:5c:f2:9b:25:ca:b2:4d:cd:c6:25:25:
dd:57:fe:04:39:2c:2e:33:85:2c:a9:9b:ae:4d:48:57:d4:73:
35:d1:71:ee:ee:76:86:52:af:14:59:55:ae:b3:ec:b8:99:68:
cc:4b:78:7e:43:31:99:5c:6c:92:e0:1a:25:8f:08:fc:ee:b6:
32:18:eb:ed:4e:8a:13:b7:8a:f0:b1:3c:43:0b:87:f8:04:fc:
66:7b:70:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:45 2026 by rpki-client