Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
File: er4RhD2-gDQLJGD8Fg7GubiPIio.mft (raw, json)
Hash identifier: r9EaZOuSgUWjpy1uBtt5c7XeaeqZbZWcvje548cpJ2I=
Subject key identifier: 66:E5:F7:7E:B5:37:D2:8B:9D:02:71:CE:D2:9E:2C:E4:3D:8A:BC:E7
Authority key identifier: 7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
Certificate issuer: /CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Certificate serial: 019D39AE518050DC0665BAEFA2B0B39AFE7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
Manifest number: 0C20
Signing time: Sun 29 Mar 2026 13:00:18 +0000
Manifest this update: Sun 29 Mar 2026 13:00:18 +0000
Manifest next update: Mon 30 Mar 2026 13:00:18 +0000
Files and hashes: 1: er4RhD2-gDQLJGD8Fg7GubiPIio.crl (hash: nReDHyImhlyAeoLEOyUhWkOGRS8PmeXVO3SZtjqHRZw=)
2: o7A96UnzoRTZUSuVj7u0eveSlFA.roa (hash: FF0zn80ZmtefbQSduZMh5HE52BLjPHqOv0VeweTxfaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:51:80:50:dc:06:65:ba:ef:a2:b0:b3:9a:fe:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Validity
Not Before: Mar 29 13:00:18 2026 GMT
Not After : Mar 30 13:00:18 2026 GMT
Subject: CN=66e5f77eb537d28b9d0271ced29e2ce43d8abce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b1:7e:32:f0:1d:85:8e:03:e3:e0:2b:07:c0:
42:30:61:45:9b:45:37:6d:7a:3e:ad:a5:b0:0d:5a:
ee:5c:f8:e5:9d:a5:c0:56:4b:a1:6c:81:bd:fd:84:
b4:70:23:9f:1b:ec:6b:c2:f9:23:39:b9:6f:f3:31:
8f:b6:32:9f:54:26:9e:c5:08:0a:ee:91:be:e0:38:
9b:ea:2d:0d:bc:39:99:6c:9e:a3:07:fe:0a:fd:8f:
68:ed:51:75:51:1a:ab:a4:9c:80:bc:d7:fb:70:0d:
e2:7f:99:c1:21:a8:0f:33:7d:4c:31:3f:6a:a6:ca:
fc:55:1d:4a:18:6c:01:86:7b:47:64:aa:76:fc:a8:
12:ca:8f:d2:24:01:a9:ea:8c:8b:1d:3c:47:94:43:
3b:89:ed:84:eb:63:9a:2c:39:55:8a:8f:f0:f6:77:
f2:69:0e:a5:4f:4b:9c:33:1f:84:f5:a0:ca:9c:cb:
aa:a8:47:e3:5c:a1:63:aa:17:0d:ad:ec:ed:ae:35:
61:e9:d0:e1:e7:b5:cc:9e:83:a8:bc:7b:db:04:fa:
6e:bc:58:68:71:db:4b:d5:15:81:da:06:15:3f:54:
24:fb:00:cf:af:09:08:be:f6:37:97:d0:71:c1:62:
85:be:5f:73:43:52:32:a6:e3:7e:7d:1a:12:26:b6:
43:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E5:F7:7E:B5:37:D2:8B:9D:02:71:CE:D2:9E:2C:E4:3D:8A:BC:E7
X509v3 Authority Key Identifier:
keyid:7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f6:55:41:20:58:86:3d:cf:1e:36:62:e9:10:e1:fd:c5:20:
a4:eb:e9:a9:c0:97:75:25:99:58:05:ef:85:d9:22:0a:3c:76:
b2:07:08:89:08:f1:cc:97:7b:a9:8a:46:62:ff:36:49:1d:ec:
71:32:7d:35:88:6d:f4:1b:c1:55:93:e8:6a:de:33:bb:48:5f:
34:a9:c7:5d:cb:a1:68:51:22:7c:49:ad:d5:2e:1c:eb:eb:94:
37:db:9e:16:45:86:44:7b:b9:85:36:33:52:62:47:fb:65:44:
c0:ae:3e:01:6f:35:1c:99:25:04:00:73:9f:22:4d:3a:92:c3:
97:14:28:3a:75:43:13:8c:13:ba:2a:a7:e5:19:76:3a:75:51:
a6:f8:96:b7:07:a5:e7:57:a5:31:84:18:7d:e9:2d:79:2a:47:
6f:30:ed:0e:64:7d:cd:99:c3:79:c7:76:59:de:18:a1:e9:73:
5d:09:a6:04:ec:23:87:38:6f:b8:2a:a8:5e:37:20:d6:4b:43:
ec:0c:31:66:fd:6f:df:10:47:2c:10:37:cf:3a:65:0a:fc:13:
ed:de:16:34:09:dc:6e:ff:76:aa:d8:fb:5a:f5:13:f3:d4:d8:
e6:13:4d:8a:2d:36:6f:71:66:73:53:d5:9b:7e:3d:33:59:99:
64:96:9e:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rlGAUNwGZbrvorCzmv57MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYmUxMTg0M2RiZTgwMzQwYjI0NjBmYzE2MGVjNmI5Yjg4
ZjIyMmEwHhcNMjYwMzI5MTMwMDE4WhcNMjYwMzMwMTMwMDE4WjAzMTEwLwYDVQQD
Eyg2NmU1Zjc3ZWI1MzdkMjhiOWQwMjcxY2VkMjllMmNlNDNkOGFiY2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLF+MvAdhY4D4+ArB8BCMGFFm0U3
bXo+raWwDVruXPjlnaXAVkuhbIG9/YS0cCOfG+xrwvkjOblv8zGPtjKfVCaexQgK
7pG+4Dib6i0NvDmZbJ6jB/4K/Y9o7VF1URqrpJyAvNf7cA3if5nBIagPM31MMT9q
psr8VR1KGGwBhntHZKp2/KgSyo/SJAGp6oyLHTxHlEM7ie2E62OaLDlVio/w9nfy
aQ6lT0ucMx+E9aDKnMuqqEfjXKFjqhcNreztrjVh6dDh57XMnoOovHvbBPpuvFho
cdtL1RWB2gYVP1Qk+wDPrwkIvvY3l9BxwWKFvl9zQ1IypuN+fRoSJrZD+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbl9361N9KLnQJxztKeLOQ9irznMB8GA1UdIwQY
MBaAFHq+EYQ9voA0CyRg/BYOxrm4jyIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXI0UmhEMi1nRFFMSkdEOEZnN0d1YmlQSWlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82MjM1NjEtMDcxNS00Mjc3LWEwYmUt
MzQxMWM2ZmI0ZmNhLzEvZXI0UmhEMi1nRFFMSkdEOEZnN0d1YmlQSWlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82MjM1NjEtMDcxNS00Mjc3LWEwYmUtMzQxMWM2ZmI0ZmNh
LzEvZXI0UmhEMi1nRFFMSkdEOEZnN0d1YmlQSWlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANPZVQSBY
hj3PHjZi6RDh/cUgpOvpqcCXdSWZWAXvhdkiCjx2sgcIiQjxzJd7qYpGYv82SR3s
cTJ9NYht9BvBVZPoat4zu0hfNKnHXcuhaFEifEmt1S4c6+uUN9ueFkWGRHu5hTYz
UmJH+2VEwK4+AW81HJklBABznyJNOpLDlxQoOnVDE4wTuiqn5Rl2OnVRpviWtwel
51elMYQYfekteSpHbzDtDmR9zZnDecd2Wd4YoelzXQmmBOwjhzhvuCqoXjcg1ktD
7AwxZv1v3xBHLBA3zzplCvwT7d4WNAncbv92qtj7WvUT89TY5hNNii02b3Fmc1PV
m349M1mZZJaerw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:03 2026 by rpki-client