Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
File: ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft (raw, json)
Hash identifier: Bc6vRTPKW+obbu+YSaq9wof4vIbkRhbwuJRbdGVbq4M=
Subject key identifier: 9C:58:0E:3E:84:4D:29:7D:A8:9A:A1:9E:1D:2B:42:F0:2D:47:FF:37
Authority key identifier: 11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
Certificate issuer: /CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Certificate serial: 019D8614B36586EDEA6ECD0538E9A54DBF7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
Manifest number: 18BB
Signing time: Mon 13 Apr 2026 09:03:16 +0000
Manifest this update: Mon 13 Apr 2026 09:03:16 +0000
Manifest next update: Tue 14 Apr 2026 09:03:16 +0000
Files and hashes: 1: ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl (hash: pOlmE0WB/50rKTgmxVolPgEODcRHFI3a7R0c4S+NlO4=)
2: h4hw0o1BGCO1IauXuWvv1pBVH-c.roa (hash: 5IBae8jcl3eOYKt23qLWVmfDo0rcP1nvWM8WUvRm6eI=)
3: lSj7G66n_Zbfp5QixdzpYlLB0i4.roa (hash: flGRTyUdnWXMFICIWjCtri2/GPHC/mh1hngklA/vSAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Apr 2026 09:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:86:14:b3:65:86:ed:ea:6e:cd:05:38:e9:a5:4d:bf:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Validity
Not Before: Apr 13 09:03:16 2026 GMT
Not After : Apr 14 09:03:16 2026 GMT
Subject: CN=9c580e3e844d297da89aa19e1d2b42f02d47ff37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:17:1a:91:ac:9a:1e:69:73:ad:b6:4d:d9:5d:
45:e6:86:ff:f3:a8:38:e1:e9:1a:7f:b9:f1:ee:d3:
59:e4:7e:13:84:33:bf:a3:7f:38:54:f8:41:01:d2:
06:0f:bf:ba:bf:af:81:4e:27:9b:ce:1c:2b:b0:df:
96:d4:9b:d7:6d:f8:b0:f8:79:94:87:a0:43:3b:75:
60:93:73:bf:5f:c0:dc:9b:ed:96:17:88:b5:63:b4:
08:73:10:a7:53:a9:c2:7c:84:27:21:7a:cb:74:e1:
4d:08:f4:d6:97:c2:77:8b:a2:7a:2f:45:7b:f3:6e:
f8:6f:8f:fd:4a:1d:57:55:77:d3:16:7b:69:56:d0:
04:92:15:df:04:03:6e:c8:5a:53:95:76:34:df:c3:
e3:59:16:4e:31:54:e0:f0:5b:3f:bf:7a:a9:40:a2:
ab:5b:2a:b0:9b:ea:44:1e:cb:2f:61:2e:de:9b:7b:
cc:37:9c:e7:bb:b6:1d:94:04:cb:40:b0:a9:34:2e:
e6:ad:76:a1:dc:19:02:fc:72:1f:39:32:72:3b:1f:
ee:70:b7:6d:c2:ea:37:34:b7:b9:65:a3:c8:1e:7f:
2b:fc:aa:78:d9:e6:62:ce:6d:a4:ce:77:ea:f1:bb:
45:b4:d4:3d:90:2a:91:e1:0a:68:fc:f4:62:e0:81:
cf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:58:0E:3E:84:4D:29:7D:A8:9A:A1:9E:1D:2B:42:F0:2D:47:FF:37
X509v3 Authority Key Identifier:
keyid:11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:06:b5:5c:cf:86:18:17:8a:05:80:26:c6:59:20:8a:1e:56:
77:fe:ac:83:6b:1e:9c:73:26:6f:0d:32:65:b2:c9:13:18:fe:
ba:bc:c2:1d:bd:28:0b:d7:20:71:1a:1e:ed:c3:92:64:4a:75:
34:fa:8b:ee:53:58:61:b8:8d:ce:00:b4:48:99:d4:ed:59:2d:
45:1a:7c:2f:6f:1f:f4:e5:85:fc:67:b0:7d:07:8b:22:80:7a:
d3:06:ca:8e:c9:a3:55:71:28:91:a6:aa:8d:15:45:3e:28:d0:
09:f0:87:b6:e5:b4:df:cb:74:8b:ce:8b:b1:b1:c0:96:5d:64:
f0:c0:56:d3:1a:12:30:a1:9d:74:e5:22:d4:9b:ad:83:73:7e:
24:72:d0:c7:4c:c8:9e:8e:8c:c2:89:54:f4:26:93:9b:30:94:
bf:9b:3a:c6:6b:21:36:b2:f7:47:3e:2b:61:1f:e4:aa:5b:d3:
d4:c6:a0:a0:52:5d:52:2c:72:2a:67:dd:bc:20:d5:17:de:f5:
89:c6:7e:ae:17:4b:b5:56:d6:d2:57:c1:02:89:d6:90:ea:b7:
83:74:41:1a:c7:71:77:73:94:42:5d:76:3d:73:ac:b2:87:ec:
49:ad:f8:d2:f6:0f:3c:f8:01:e3:44:a3:e9:33:44:7d:34:3c:
9a:d9:40:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:57:28 2026 by rpki-client