Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
File: ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft (raw, json)
Hash identifier: Y/C+Y24+bpxyeeedj3SxYfAF9JP34n6ERPPdiiL4EJI=
Subject key identifier: B0:FA:44:6C:A6:86:93:5C:95:67:44:35:71:0E:4F:F1:B3:CD:0C:F8
Authority key identifier: 11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
Certificate issuer: /CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Certificate serial: 01A12EB41E81195CF02097299DF4A5CD3C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
Manifest number: 1AA0
Signing time: Mon 12 Oct 2026 06:01:58 +0000
Manifest this update: Mon 12 Oct 2026 06:01:58 +0000
Manifest next update: Tue 13 Oct 2026 06:01:58 +0000
Files and hashes: 1: ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl (hash: zhTYtiFQBoaQD9k6iYFWtlSaxQPlDIniwFR+cIkEafM=)
2: h4hw0o1BGCO1IauXuWvv1pBVH-c.roa (hash: 5IBae8jcl3eOYKt23qLWVmfDo0rcP1nvWM8WUvRm6eI=)
3: lSj7G66n_Zbfp5QixdzpYlLB0i4.roa (hash: flGRTyUdnWXMFICIWjCtri2/GPHC/mh1hngklA/vSAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:b4:1e:81:19:5c:f0:20:97:29:9d:f4:a5:cd:3c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Validity
Not Before: Oct 12 06:01:58 2026 GMT
Not After : Oct 13 06:01:58 2026 GMT
Subject: CN=b0fa446ca686935c95674435710e4ff1b3cd0cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f0:20:24:ea:ce:77:b5:b6:e0:47:a2:44:5f:
cf:ea:c0:19:a9:ba:6d:4d:f7:17:17:48:8f:90:34:
f0:1f:b4:c6:a6:9b:3f:d2:34:5b:56:af:1a:9d:1e:
2b:11:48:a3:75:89:91:bf:ba:f8:93:d6:9e:21:17:
28:2c:ff:ed:3f:01:a9:47:5b:4d:c0:1e:12:a8:aa:
e5:b2:34:3d:d9:87:c1:05:ad:58:37:76:05:7f:87:
9a:7c:2b:a9:67:2f:01:27:be:29:b8:d3:14:b0:6b:
74:93:be:c5:4e:39:88:d9:ee:7c:60:46:40:9d:e2:
6f:5d:e8:35:4b:6d:8a:4c:7b:09:79:be:46:de:0a:
65:ac:38:fe:b1:3f:7b:28:df:52:c5:e2:80:c7:91:
57:06:f7:86:06:3d:05:a0:73:b6:5b:6e:82:6f:41:
e3:19:a8:74:51:2c:55:30:d3:ce:e4:01:f8:59:90:
26:03:c8:f6:c5:f3:b7:c6:48:a8:5f:37:9b:be:b3:
cc:7e:3f:19:28:f5:b2:b5:06:a8:41:1e:7c:d1:87:
69:b0:28:60:f6:56:98:65:bf:04:81:87:ea:a6:11:
d0:50:df:61:67:12:a8:3a:95:5b:9b:8a:db:d2:cf:
c3:03:ed:78:3c:d1:f3:3e:d3:88:28:a0:a5:49:50:
e2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FA:44:6C:A6:86:93:5C:95:67:44:35:71:0E:4F:F1:B3:CD:0C:F8
X509v3 Authority Key Identifier:
keyid:11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ed:5e:72:f6:0a:f6:33:b2:58:3a:bc:c6:f5:26:9f:00:26:
20:2f:59:f0:20:02:ac:27:ce:28:ea:01:ab:89:a8:e8:bf:99:
59:1f:b9:3a:54:40:2a:0f:75:ea:cf:c4:f6:f2:4d:76:16:35:
93:2c:49:59:c4:cf:1e:8a:94:ee:5b:f9:e3:b1:2f:4b:48:c4:
09:f3:5d:ac:08:3a:48:f5:a2:b4:73:d6:49:ef:a2:9f:80:cd:
f5:b7:eb:91:85:eb:f4:0f:b9:f8:85:1b:1d:5f:f0:64:a5:8b:
53:cd:fd:ae:0b:03:03:dc:b5:d2:11:29:f8:01:90:05:9c:12:
e0:25:4e:aa:d7:a1:87:3d:a8:2c:31:47:22:5e:5b:6b:02:f8:
20:e9:e3:0f:3b:5d:53:d9:da:5d:03:c8:d7:fb:6f:e3:12:21:
46:0e:6b:91:b1:01:7c:7e:33:90:4d:81:b8:3e:81:0d:10:09:
ca:18:1d:9b:51:57:88:4b:b8:68:35:9f:46:e3:29:4b:0b:11:
28:00:d1:a5:fd:31:c1:51:e6:a4:1d:2b:9a:25:7e:fc:bf:29:
8a:d1:1a:dc:13:13:20:0a:65:9d:36:43:76:8f:b0:3c:2e:aa:
c9:f5:a4:3a:cd:75:f1:86:5f:d7:68:6d:0b:27:c9:27:14:d4:
e1:07:b1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 10:33:58 2026 by rpki-client