Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
File: ErmEbY911kX_YwjOAwCHopfms1k.mft (raw, json)
Hash identifier: jcr43T6fCT+dPfqQxtJ4oU1LhfN+x6ZRyKQ35u9sbCc=
Subject key identifier: 7A:3C:14:8E:62:B6:20:47:5D:A6:A5:F0:B7:53:D4:2B:1E:5F:D1:00
Authority key identifier: 12:B9:84:6D:8F:75:D6:45:FF:63:08:CE:03:00:87:A2:97:E6:B3:59
Certificate issuer: /CN=12b9846d8f75d645ff6308ce030087a297e6b359
Certificate serial: 019D371BA0E8B5660DC417EC7FC8DA8388E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
Manifest number: 16B0
Signing time: Sun 29 Mar 2026 01:00:50 +0000
Manifest this update: Sun 29 Mar 2026 01:00:50 +0000
Manifest next update: Mon 30 Mar 2026 01:00:50 +0000
Files and hashes: 1: 0bgPaSS9Ae0rB9f1u5QtAJZ7vjQ.roa (hash: IFhoLkFpjChfV3wyKbItrjVFxiC4Oyb3ylSVZABFfD0=)
2: ErmEbY911kX_YwjOAwCHopfms1k.crl (hash: UI6ngTaAIe4V49gofQmhfQkFMw6uBTh7Xy67FYwpfbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:a0:e8:b5:66:0d:c4:17:ec:7f:c8:da:83:88:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b9846d8f75d645ff6308ce030087a297e6b359
Validity
Not Before: Mar 29 01:00:50 2026 GMT
Not After : Mar 30 01:00:50 2026 GMT
Subject: CN=7a3c148e62b620475da6a5f0b753d42b1e5fd100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:02:d2:46:19:5e:53:93:c2:d7:5e:5c:94:df:
dd:52:9c:a2:9a:4b:9c:6f:03:9f:1b:38:a4:fb:28:
13:a6:72:5c:ce:27:76:31:7f:70:81:42:d4:ec:c1:
c1:f3:dd:86:27:ff:4f:52:91:8b:09:e8:60:84:cf:
58:be:7f:b0:05:a7:43:61:6d:5d:ef:59:28:ef:ae:
6d:93:01:15:37:a1:27:7f:d3:6d:f9:5c:0e:c2:0c:
dd:7d:f6:61:e4:d5:34:c0:6e:10:1b:88:5f:36:86:
55:39:88:9a:b4:2f:e8:60:6e:fc:c5:b3:52:ce:7b:
15:a3:e4:de:aa:9a:aa:fc:4f:4f:03:00:49:3d:26:
33:6b:8f:21:80:18:de:eb:9a:29:82:d7:2c:a3:35:
34:da:3e:6c:56:d0:e4:3e:2d:16:db:59:ac:70:2c:
13:98:1e:39:89:0c:39:58:12:98:7e:bf:bb:39:db:
06:be:fb:1d:c7:58:0b:d5:49:4f:27:c5:2c:12:4e:
0b:fe:a9:ee:69:d4:c7:f4:65:de:21:4f:24:4b:c7:
c2:30:47:51:c9:f0:3d:56:1e:97:09:a0:23:f1:37:
f8:98:cc:b4:a4:23:0f:99:2a:95:76:a8:fc:ef:69:
aa:e4:6b:d2:1c:e8:05:d2:cd:08:12:23:08:b4:cc:
4d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3C:14:8E:62:B6:20:47:5D:A6:A5:F0:B7:53:D4:2B:1E:5F:D1:00
X509v3 Authority Key Identifier:
keyid:12:B9:84:6D:8F:75:D6:45:FF:63:08:CE:03:00:87:A2:97:E6:B3:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d1:a7:51:9b:39:a6:d1:42:a2:6d:df:47:9a:d1:38:90:e0:
78:51:f3:97:9a:9f:ba:2c:78:19:7b:c3:80:e0:73:fd:13:9f:
30:40:00:77:af:a3:c1:c3:a4:fb:7a:52:c9:63:c6:ba:2f:a5:
0d:42:61:99:0a:fb:82:dd:31:03:d6:10:93:1f:4c:cb:5b:66:
5f:99:05:f4:d8:16:de:da:85:c3:47:a3:06:34:a9:23:ec:6c:
5a:d4:0d:d4:e3:79:47:52:4e:81:9d:e0:5d:17:5f:70:9c:c2:
2b:5f:2b:d4:f7:ac:27:f8:0e:7f:ac:00:01:75:2a:8d:4a:07:
66:88:39:28:c8:a9:73:28:43:4e:9d:76:a1:e3:0c:64:9f:f6:
4f:3c:0b:f5:2f:7d:cb:48:3c:bc:6f:e3:97:e4:0e:59:67:30:
11:8c:58:49:b1:a0:04:9e:9b:50:02:74:b9:20:14:5e:f1:36:
61:0a:66:f1:85:80:f2:e9:26:48:cd:9e:b3:ae:54:44:f1:09:
b4:fd:2e:c3:8c:06:c2:71:e7:40:d8:03:bc:94:a7:cf:0b:aa:
73:07:d0:5c:e5:02:26:c1:24:03:64:ab:9a:2c:a4:11:e8:ae:
fb:28:ef:04:c4:83:7d:ce:f8:a3:fa:77:4f:dd:04:cb:29:52:
64:ef:6f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:01 2026 by rpki-client