Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
File: ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft (raw, json)
Hash identifier: jnTQRjNZ2zXx2VOhgTxCEtX7HedfI7yzPuNeaUGUGrM=
Subject key identifier: 58:E4:C0:F5:1E:D6:95:AB:D5:0A:97:73:3B:45:9B:DD:53:11:F3:9D
Authority key identifier: 12:B3:00:8E:DB:7C:C9:D6:1D:AF:65:F0:02:26:88:AC:73:25:F0:3A
Certificate issuer: /CN=12b3008edb7cc9d61daf65f0022688ac7325f03a
Certificate serial: 019D3866323EA739725FC1CBBB6D14379EAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
Manifest number: 0C14
Signing time: Sun 29 Mar 2026 07:01:54 +0000
Manifest this update: Sun 29 Mar 2026 07:01:54 +0000
Manifest next update: Mon 30 Mar 2026 07:01:54 +0000
Files and hashes: 1: ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl (hash: bh+Zr7t3u1mW5+y3yL55Z/jjz6C3EzVl8T6MOvb2RrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:32:3e:a7:39:72:5f:c1:cb:bb:6d:14:37:9e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b3008edb7cc9d61daf65f0022688ac7325f03a
Validity
Not Before: Mar 29 07:01:54 2026 GMT
Not After : Mar 30 07:01:54 2026 GMT
Subject: CN=58e4c0f51ed695abd50a97733b459bdd5311f39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:68:c4:54:bf:b5:87:42:09:5b:ec:7c:2d:07:
c6:c5:bf:01:72:dd:f0:60:99:c1:aa:dd:ae:9e:91:
85:37:c3:97:ba:50:df:41:01:32:6e:49:da:01:c0:
23:21:4b:ac:2a:7c:15:9c:50:db:56:9d:bc:96:de:
94:6f:a7:60:3d:95:1b:ed:9d:2d:03:a1:6e:66:85:
d6:f3:05:8d:19:95:7a:b6:c0:bb:32:03:ec:54:ab:
9c:23:fd:95:24:a6:5d:1a:2f:24:a4:e2:c7:f8:b2:
b7:41:8f:e7:69:b3:50:df:9c:cc:23:3a:8a:0f:1b:
ba:c9:05:c7:ff:50:79:d1:d3:70:55:c6:c3:94:2a:
12:cb:25:1e:09:9c:81:d9:7f:b4:6d:ba:4a:48:f9:
95:0e:12:33:e5:79:1b:c2:fa:c6:82:bf:ee:26:d2:
fe:da:56:a0:42:e3:99:2c:50:8d:a1:ef:35:2a:12:
ab:5f:8c:1b:94:fa:ef:81:3a:46:fd:51:5e:8a:dc:
6f:fd:5c:27:6b:da:a1:d8:00:40:4d:e5:70:b6:1c:
ce:84:4b:44:f3:e6:1b:15:2a:23:eb:5d:c5:96:f9:
cf:79:3b:ad:46:f4:43:5c:db:7d:f1:09:e1:ef:c2:
de:f5:2d:bc:a2:2f:7d:06:9a:65:00:17:43:ac:6f:
f1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E4:C0:F5:1E:D6:95:AB:D5:0A:97:73:3B:45:9B:DD:53:11:F3:9D
X509v3 Authority Key Identifier:
keyid:12:B3:00:8E:DB:7C:C9:D6:1D:AF:65:F0:02:26:88:AC:73:25:F0:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:37:47:78:9e:57:78:4e:09:f5:34:d4:e5:8c:58:62:11:f9:
81:2f:cd:b0:98:8e:19:5e:97:79:33:be:75:36:83:c1:3d:a5:
6b:10:b3:91:8e:81:02:2c:8d:78:15:c5:b6:68:6f:c6:04:2e:
21:a3:4e:a5:53:93:c9:88:78:25:af:89:e2:da:2a:5d:e6:96:
76:50:c2:41:fd:c7:5a:c9:a6:36:e2:c1:f1:d3:93:e3:ce:77:
86:d6:52:2e:c3:34:95:d0:dd:c1:28:21:b4:23:fd:3a:d8:22:
a7:fb:37:68:cc:19:25:05:cf:be:ea:05:06:ac:c9:6d:15:a9:
c5:92:f9:78:38:9a:59:4a:bc:1c:e1:92:18:ee:49:65:43:b2:
ee:27:24:56:48:b2:85:6e:f5:7f:ae:88:9d:b7:26:10:21:c2:
b4:b4:a0:21:0c:cb:77:26:c0:d5:87:4b:a0:29:15:f7:53:51:
4b:a3:69:8c:65:4d:e8:c3:ae:92:04:db:64:ba:70:9e:3d:ef:
9e:60:5c:3a:dc:a9:ca:58:1b:74:00:28:d8:0a:65:b6:26:bd:
c5:14:57:5d:23:c6:27:74:1c:1b:f9:fa:d7:40:da:b9:0e:43:
8c:e2:3e:bc:12:b2:fb:99:1c:da:61:06:33:45:5f:45:ce:05:
2f:09:2b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:48 2026 by rpki-client