Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
File: ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft (raw, json)
Hash identifier: MVzvVctmhPo5aeDhBO/eTUeDmptkVlufQihhpSzfKXI=
Subject key identifier: E1:DB:5E:E3:2C:1C:96:C7:13:8F:2B:54:F6:D3:57:71:66:09:30:D8
Authority key identifier: 11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
Certificate issuer: /CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Certificate serial: 01A0016FF11938F03C732695CC7FD3EC4D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
Manifest number: 1A04
Signing time: Fri 14 Aug 2026 18:01:48 +0000
Manifest this update: Fri 14 Aug 2026 18:01:48 +0000
Manifest next update: Sat 15 Aug 2026 18:01:48 +0000
Files and hashes: 1: ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl (hash: w5hRmwuFXqzxmoZG+0+ZVlyl4tlzCqMAzzP6vKTWNSo=)
2: h4hw0o1BGCO1IauXuWvv1pBVH-c.roa (hash: 5IBae8jcl3eOYKt23qLWVmfDo0rcP1nvWM8WUvRm6eI=)
3: lSj7G66n_Zbfp5QixdzpYlLB0i4.roa (hash: flGRTyUdnWXMFICIWjCtri2/GPHC/mh1hngklA/vSAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:f1:19:38:f0:3c:73:26:95:cc:7f:d3:ec:4d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Validity
Not Before: Aug 14 18:01:48 2026 GMT
Not After : Aug 15 18:01:48 2026 GMT
Subject: CN=e1db5ee32c1c96c7138f2b54f6d35771660930d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c5:af:51:65:6c:1d:39:20:f1:ef:92:31:ea:
cc:40:e6:c8:ae:05:8a:aa:97:a5:f7:95:83:a1:b3:
43:d8:a8:bd:98:5f:ef:01:3b:bc:7f:07:b7:91:2d:
3f:2d:da:6e:bd:32:70:5c:3c:0d:c6:11:cd:da:b7:
26:f5:8f:d3:d9:9f:01:37:2a:2f:09:66:2c:2e:d5:
d1:12:11:f8:7a:0c:45:61:ab:80:9b:36:2d:80:e6:
9b:50:44:29:49:fc:b4:ad:92:df:5d:46:14:60:e4:
17:8e:b2:8a:a0:74:7c:45:db:24:5a:53:89:32:5c:
3a:59:85:9b:99:e2:86:6e:0c:19:bb:9f:72:dc:f1:
f5:fd:c3:b8:88:91:5d:1f:6d:d7:9e:83:7a:52:52:
22:b0:8c:45:c3:39:3e:b8:ce:3d:55:1c:8e:91:1e:
49:39:c4:0b:ea:61:95:5c:de:4d:08:2a:78:3b:a0:
7e:78:77:90:bf:f1:4d:85:c8:f8:a6:c9:f6:35:66:
12:d8:96:ef:7b:34:c2:40:49:24:42:bb:09:55:ce:
42:31:4b:5f:86:d9:dc:c5:1d:b8:ea:72:dd:3f:74:
28:bf:3c:d7:96:a8:36:80:c0:83:f0:49:34:85:e0:
b3:d2:17:6b:a2:02:e0:36:66:fa:e6:f0:22:b6:e4:
20:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DB:5E:E3:2C:1C:96:C7:13:8F:2B:54:F6:D3:57:71:66:09:30:D8
X509v3 Authority Key Identifier:
keyid:11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:49:62:21:ee:74:b9:59:b6:0b:04:a5:f1:7b:8d:3b:87:49:
e0:b9:f6:55:8c:45:87:37:29:b9:84:c9:ff:bc:c1:2f:11:d8:
45:db:bd:1d:72:58:3a:cf:b9:bf:30:06:6b:66:ef:5a:52:16:
1a:68:38:23:43:c3:27:82:85:89:cc:05:1a:73:6d:1b:5f:e3:
38:a1:ed:e2:96:1c:26:03:8b:06:82:92:8a:c8:46:e8:9a:34:
b0:02:f5:82:15:f5:d4:c5:4d:1b:9c:f1:27:ea:42:e2:86:02:
6f:c6:5e:39:30:d0:7b:bf:a4:d1:84:af:10:af:49:69:26:15:
d9:4c:db:5d:c7:9f:db:a8:34:92:3e:2d:82:0e:85:f2:71:f5:
ff:35:20:fc:c1:71:b6:c3:9c:c1:b1:8f:b3:0d:8e:9d:c7:bc:
b6:ce:97:61:c3:ef:5f:3a:21:88:88:11:c1:79:15:a0:8c:82:
c8:e6:fd:09:17:d4:3b:57:24:be:59:3c:92:b1:ca:c9:e5:d1:
cf:47:3b:10:a9:b2:ff:87:96:a8:1c:dd:2f:bd:fd:94:50:d1:
87:32:aa:e5:da:0b:2a:59:e5:c1:8f:b6:91:51:34:93:ea:d4:
49:61:57:9d:18:0f:9d:23:02:8e:d4:de:35:81:4a:05:c1:59:
ea:70:d9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:33:01 2026 by rpki-client