Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
File: ERAUzorTjRU1AJbVSe4cWAXQncg.mft (raw, json)
Hash identifier: fedEwFngPV8K6HRrZ671qUkqJPcMgaRUJTVipaiIIKk=
Subject key identifier: B0:E3:72:2A:C6:6F:9B:0E:7E:CB:86:C4:F6:AD:DD:BF:B0:E4:F8:68
Authority key identifier: 11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8
Certificate issuer: /CN=111014ce8ad38d15350096d549ee1c5805d09dc8
Certificate serial: 01A1298C9E57D186CE5CF1399AC51E9FF808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
Manifest number: 1A9C
Signing time: Sun 11 Oct 2026 06:00:43 +0000
Manifest this update: Sun 11 Oct 2026 06:00:43 +0000
Manifest next update: Mon 12 Oct 2026 06:00:43 +0000
Files and hashes: 1: ERAUzorTjRU1AJbVSe4cWAXQncg.crl (hash: 433Fhi+KMR2DzIcqPdcAzVQwCQaipgPDH3btXgFILAY=)
2: ZPA0yTEgbeGTPx3uVMlT6oTLbXM.roa (hash: 1cNaYSmAVMmYxCmd/+BHA+BklNBA0EPt0mpd9OexoGk=)
3: eZKM8TJMYeLWEyu920Ld75NcinM.roa (hash: tmv3AASNUdy6CqfMaQz0xtQC6GhRK7nXqdtlIL9UhUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:8c:9e:57:d1:86:ce:5c:f1:39:9a:c5:1e:9f:f8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111014ce8ad38d15350096d549ee1c5805d09dc8
Validity
Not Before: Oct 11 06:00:43 2026 GMT
Not After : Oct 12 06:00:43 2026 GMT
Subject: CN=b0e3722ac66f9b0e7ecb86c4f6adddbfb0e4f868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5b:ab:8f:86:a0:cf:c0:33:43:f7:2d:00:c7:
4b:18:1c:de:2e:4e:51:35:86:ac:39:52:47:e4:46:
46:f4:2f:0c:0e:cb:70:b3:fb:57:40:4f:80:20:d7:
1a:9b:77:03:44:fb:31:59:47:bc:13:34:a2:82:07:
36:00:ad:6a:93:d6:10:11:b1:47:98:35:95:ba:4b:
4d:9a:ca:e9:93:75:6b:b9:59:b9:51:c4:8c:15:a1:
03:5a:4c:40:ec:8d:d3:ec:64:74:dc:80:40:62:eb:
d7:8e:c5:11:8b:9f:9c:87:3b:ed:30:ed:26:1e:57:
59:2a:93:74:c7:2f:c3:68:a7:b6:59:da:c5:17:04:
7e:9d:ec:53:b8:c3:34:fc:cf:a3:4f:a4:bc:65:65:
4f:3c:99:4d:65:2e:cc:82:ff:83:8d:67:7d:4c:69:
69:d3:e5:dd:0f:dc:81:d4:d9:d3:7a:07:17:21:87:
b8:fb:6f:94:38:82:d2:1b:0b:90:fc:d0:07:18:a6:
d3:89:c6:7d:ef:90:b4:e5:85:a5:18:d8:ac:47:25:
ac:88:e1:28:e3:be:58:9f:8c:e6:97:9f:4b:2f:5d:
2b:9a:60:f2:4d:0e:d3:07:ae:52:a6:28:34:96:6f:
66:c4:7d:4a:81:00:0c:73:85:1a:22:ef:89:1d:96:
05:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E3:72:2A:C6:6F:9B:0E:7E:CB:86:C4:F6:AD:DD:BF:B0:E4:F8:68
X509v3 Authority Key Identifier:
keyid:11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0b:d1:a1:74:1f:8c:00:f3:76:4c:14:f3:0d:cc:43:96:91:
95:d3:13:0c:2a:d3:bd:a0:d5:7d:01:7a:82:5b:3d:45:6a:38:
b9:ee:df:72:d1:91:41:a1:77:30:09:c1:4e:c3:ac:a8:37:71:
a7:7a:94:ed:2e:4e:7d:fb:3d:52:13:65:7c:1c:3c:b2:02:17:
d4:22:68:db:89:9d:da:f0:39:96:ff:bb:93:04:7b:48:ad:6f:
60:9d:68:5d:57:25:49:6b:bb:64:9b:04:28:b1:61:dd:2b:1d:
e4:32:7f:cf:9d:bf:6e:e2:43:3c:73:91:21:83:be:8b:c6:e1:
06:26:f8:83:74:0b:a8:2d:da:3a:32:00:e1:7c:4d:8d:dc:da:
aa:ab:d3:a3:a6:d8:9d:44:84:4f:01:e5:97:1f:65:99:bb:dd:
76:d6:f7:71:d2:ec:ac:b7:a4:f7:a6:df:9a:b1:c7:fb:86:0e:
24:e0:07:79:ff:b3:26:0e:42:80:37:35:1b:c6:e2:99:ae:69:
50:25:52:4b:eb:45:de:66:58:82:8e:c5:4e:0e:a7:27:68:1d:
c2:c4:23:77:7a:2e:e5:ed:a4:cf:ea:21:37:7a:37:a4:6f:a7:
d5:74:49:55:07:eb:8b:53:a1:d5:29:89:8d:5c:75:67:ce:8f:
9d:46:a4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:53:10 2026 by rpki-client