Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
File: Elriz9MVwTEZNIRmWsrafAExY-w.mft (raw, json)
Hash identifier: 2xkxWsA7mYk2Gr7NsIWGWw7kXXmYIbO65XcpAWNtbLU=
Subject key identifier: B9:22:55:01:2A:24:FB:33:7E:93:82:80:34:CB:6C:AF:9A:D3:48:E9
Authority key identifier: 12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC
Certificate issuer: /CN=125ae2cfd315c131193484665acada7c013163ec
Certificate serial: 019D37BFF8832B36E98C07A143C1355730B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
Manifest number: 1898
Signing time: Sun 29 Mar 2026 04:00:20 +0000
Manifest this update: Sun 29 Mar 2026 04:00:20 +0000
Manifest next update: Mon 30 Mar 2026 04:00:20 +0000
Files and hashes: 1: Elriz9MVwTEZNIRmWsrafAExY-w.crl (hash: 1UhHgNYt2I7B6YNahcn5XmFApT17ZeFH6/IABwivBtI=)
2: tzM4Lhas_5Err3uhIOugP7tZ2zA.roa (hash: O2meUFIJ8JO+/3JVTDSwDnZ6NU03UbjSV1N5GHCHgZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:f8:83:2b:36:e9:8c:07:a1:43:c1:35:57:30:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=125ae2cfd315c131193484665acada7c013163ec
Validity
Not Before: Mar 29 04:00:20 2026 GMT
Not After : Mar 30 04:00:20 2026 GMT
Subject: CN=b92255012a24fb337e93828034cb6caf9ad348e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:00:57:74:77:b5:df:a4:a0:26:b9:6f:a5:7d:
94:8a:98:d0:ec:66:6f:91:f3:c6:5c:b0:89:76:f5:
87:dd:5c:8d:9c:08:3c:d1:6e:73:5d:c5:28:85:41:
5a:36:74:98:e1:2e:e6:b5:e8:15:1d:eb:58:a0:ef:
b9:50:b3:21:30:4c:1b:66:24:c4:b1:be:7d:93:38:
be:97:51:a5:23:ed:c3:d1:96:18:a9:c3:e7:3d:80:
3b:bb:ee:7e:e6:2f:69:b6:fc:77:ee:9f:ce:77:0d:
af:64:b6:88:be:0a:6f:18:62:4c:b6:1a:0c:da:db:
93:6d:b8:9e:85:53:6b:cb:c9:f1:13:cb:72:bc:d3:
d8:42:c3:13:68:2c:e2:a9:ea:01:62:4c:77:21:35:
12:24:f9:0e:c3:bb:fc:99:e3:01:c4:fb:b6:e3:f9:
c3:70:e9:09:67:40:6a:fa:ea:4f:fb:0d:38:cb:4c:
ce:1e:7e:b0:c5:cd:b5:b9:36:8e:ce:68:10:0d:13:
f1:43:a0:e4:96:d1:09:da:1b:e8:71:c7:52:9d:aa:
d0:5e:30:c0:bd:7b:6e:25:06:63:d3:85:42:7c:eb:
f0:47:13:28:2c:3a:a0:7a:b9:78:91:a2:a5:93:33:
53:c2:20:b8:80:2d:fd:fc:58:f8:4a:c2:f8:47:3b:
58:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:22:55:01:2A:24:FB:33:7E:93:82:80:34:CB:6C:AF:9A:D3:48:E9
X509v3 Authority Key Identifier:
keyid:12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d6:a4:c6:30:3d:0f:46:72:79:b7:00:dd:df:25:fc:6f:f6:
f4:b9:58:e9:05:26:c1:30:64:23:b9:bc:60:4e:6c:76:12:2a:
a7:42:61:df:d6:22:4f:cd:12:ea:73:10:39:5a:5d:a9:6f:78:
34:d2:4e:fe:5e:f5:65:09:82:1d:f6:48:26:18:98:6f:4a:55:
93:28:f6:f1:00:20:58:6a:24:28:6f:6b:32:6a:10:bb:ae:25:
75:39:cf:c3:af:17:f4:c6:bd:a0:a9:63:50:68:45:e8:99:d4:
0d:76:5b:80:d6:7c:74:d6:08:5e:e3:77:6b:cb:4e:72:c5:7d:
66:64:2a:ba:03:a7:a4:42:68:c2:3c:c3:e2:fa:ce:31:ff:37:
b8:b6:83:7d:13:06:50:20:5c:6d:a2:50:68:63:b6:a9:ba:d8:
bd:6d:25:36:28:60:54:00:5d:d8:7b:ce:59:ef:e6:21:c6:c9:
3b:14:d6:2e:08:c8:86:56:62:41:1e:40:c4:a7:95:15:32:3f:
e9:6e:ce:b9:f5:23:5c:d5:df:70:26:e5:50:81:1c:8e:94:1d:
f9:a0:f3:26:2a:27:3e:5d:c6:05:15:c0:3c:32:d1:d8:91:ef:
e2:c7:8a:da:27:d5:d3:29:62:29:4d:16:e1:5c:38:23:64:f8:
74:72:fc:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03v/iDKzbpjAehQ8E1VzC1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNWFlMmNmZDMxNWMxMzExOTM0ODQ2NjVhY2FkYTdjMDEz
MTYzZWMwHhcNMjYwMzI5MDQwMDIwWhcNMjYwMzMwMDQwMDIwWjAzMTEwLwYDVQQD
EyhiOTIyNTUwMTJhMjRmYjMzN2U5MzgyODAzNGNiNmNhZjlhZDM0OGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuABXdHe136SgJrlvpX2UipjQ7GZv
kfPGXLCJdvWH3VyNnAg80W5zXcUohUFaNnSY4S7mtegVHetYoO+5ULMhMEwbZiTE
sb59kzi+l1GlI+3D0ZYYqcPnPYA7u+5+5i9ptvx37p/Odw2vZLaIvgpvGGJMthoM
2tuTbbiehVNry8nxE8tyvNPYQsMTaCziqeoBYkx3ITUSJPkOw7v8meMBxPu24/nD
cOkJZ0Bq+upP+w04y0zOHn6wxc21uTaOzmgQDRPxQ6DkltEJ2hvoccdSnarQXjDA
vXtuJQZj04VCfOvwRxMoLDqgerl4kaKlkzNTwiC4gC39/Fj4SsL4RztYYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLkiVQEqJPszfpOCgDTLbK+a00jpMB8GA1UdIwQY
MBaAFBJa4s/TFcExGTSEZlrK2nwBMWPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWxyaXo5TVZ3VEVaTklSbVdzcmFmQUV4WS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8wMzdhZGYtYjljMi00YWQxLTk2MGEt
NGQ0MDMzNjlkMmEyLzEvRWxyaXo5TVZ3VEVaTklSbVdzcmFmQUV4WS13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8wMzdhZGYtYjljMi00YWQxLTk2MGEtNGQ0MDMzNjlkMmEy
LzEvRWxyaXo5TVZ3VEVaTklSbVdzcmFmQUV4WS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADdakxjA9
D0ZyebcA3d8l/G/29LlY6QUmwTBkI7m8YE5sdhIqp0Jh39YiT80S6nMQOVpdqW94
NNJO/l71ZQmCHfZIJhiYb0pVkyj28QAgWGokKG9rMmoQu64ldTnPw68X9Ma9oKlj
UGhF6JnUDXZbgNZ8dNYIXuN3a8tOcsV9ZmQqugOnpEJowjzD4vrOMf83uLaDfRMG
UCBcbaJQaGO2qbrYvW0lNihgVABd2HvOWe/mIcbJOxTWLgjIhlZiQR5AxKeVFTI/
6W7OufUjXNXfcCblUIEcjpQd+aDzJionPl3GBRXAPDLR2JHv4seK2ifV0yliKU0W
4Vw4I2T4dHL8VA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:52 2026 by rpki-client