Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
File: kERLB53wCKfHy-KPy6Xb4GIOjhc.mft (raw, json)
Hash identifier: Eg6OPRArS9uWx2MrQeZI8BejvgWauMaf6Zka7DQuM6w=
Subject key identifier: FE:9B:E6:60:51:E2:65:AC:E0:29:8A:84:D5:02:09:E4:E1:33:5B:7F
Authority key identifier: 90:44:4B:07:9D:F0:08:A7:C7:CB:E2:8F:CB:A5:DB:E0:62:0E:8E:17
Certificate issuer: /CN=90444b079df008a7c7cbe28fcba5dbe0620e8e17
Certificate serial: 01A0C8C6EB583226E340D4784BAEE9D3BA18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
Manifest number: 18DB
Signing time: Tue 22 Sep 2026 11:01:14 +0000
Manifest this update: Tue 22 Sep 2026 11:01:14 +0000
Manifest next update: Wed 23 Sep 2026 11:01:14 +0000
Files and hashes: 1: kERLB53wCKfHy-KPy6Xb4GIOjhc.crl (hash: SvUfjpb47q7UFwuanO1oZiqbjiyyzc/LcYs5IDEwfos=)
2: qh7XZDst8WsBCGjKLPzTSR00_9w.roa (hash: 91hvylgfnm1S7Q889lgwTcLMuKxZDx/xX3dO/XE0rko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:eb:58:32:26:e3:40:d4:78:4b:ae:e9:d3:ba:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90444b079df008a7c7cbe28fcba5dbe0620e8e17
Validity
Not Before: Sep 22 11:01:14 2026 GMT
Not After : Sep 23 11:01:14 2026 GMT
Subject: CN=fe9be66051e265ace0298a84d50209e4e1335b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5a:ed:10:a9:02:d5:ac:5f:e6:2b:87:1f:44:
37:2e:8d:8a:ae:41:33:5c:c7:0d:5f:1d:91:92:39:
74:72:07:1c:eb:a2:dd:84:68:17:be:13:eb:8a:54:
ee:b0:b9:ee:0b:34:87:a3:ca:6f:8d:92:5a:13:55:
75:b2:40:9e:67:e4:d5:72:ef:0b:35:e9:36:57:47:
2e:06:bb:81:8e:70:1f:71:df:e8:40:35:a2:38:31:
a4:46:b6:34:28:19:e5:6b:2a:dd:85:8e:3d:2c:a6:
17:4c:39:e6:9b:4f:bb:fd:de:90:ef:39:d7:02:ca:
8a:ff:4d:d8:75:c7:34:bc:2b:1e:84:3c:2c:2c:45:
27:40:e7:48:3c:2f:0e:50:99:29:11:88:9a:06:d9:
dd:26:fe:7e:a9:cf:19:5f:16:81:4a:54:5e:d9:54:
e0:15:19:39:c3:35:3a:2a:0e:d4:65:b0:85:dc:fe:
82:63:af:52:da:a5:7a:fc:1f:27:14:20:a7:b5:f1:
5e:1b:bf:56:a4:70:7d:32:e1:60:71:fc:61:5c:d7:
f0:d5:cf:46:c8:0c:09:9d:7b:7c:d3:b9:d3:d1:d2:
8d:27:df:8c:a9:2e:bb:8c:a5:08:a8:97:c8:f0:3a:
b2:ab:dd:a6:86:7e:0b:d7:1c:7e:84:1c:6f:f2:ed:
9b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9B:E6:60:51:E2:65:AC:E0:29:8A:84:D5:02:09:E4:E1:33:5B:7F
X509v3 Authority Key Identifier:
keyid:90:44:4B:07:9D:F0:08:A7:C7:CB:E2:8F:CB:A5:DB:E0:62:0E:8E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b8:33:14:ef:c0:7d:56:66:6e:c9:b1:a1:0c:a8:45:36:55:
62:60:2c:17:32:e5:a3:54:6f:1d:62:66:34:40:a5:9e:86:0b:
1d:ee:d7:67:44:08:fa:ac:79:e4:33:b3:1f:ce:ee:92:12:f1:
32:32:33:b4:6a:96:98:2a:b0:8b:ab:21:28:9d:85:45:1f:58:
0b:d6:f4:8e:d6:e9:79:0b:4a:3c:ef:c4:ad:2e:c2:05:c9:50:
e7:cd:75:1e:37:38:4c:06:cb:a9:dd:fb:21:02:94:fa:5e:b9:
54:23:ec:0e:c7:fa:f1:e2:b9:a8:bf:04:52:73:8d:1c:4d:ca:
36:8e:fe:f3:b9:2c:63:82:47:75:a5:a9:2d:5a:9b:04:50:a1:
33:a6:02:6e:9a:f2:c5:83:d9:27:a4:f4:4b:09:95:d6:93:ec:
b0:b2:e0:33:2b:a7:aa:66:4b:8d:42:42:3f:a8:32:60:00:92:
19:ca:a2:34:77:e4:9c:31:6c:be:df:45:65:15:0a:f1:b8:53:
fa:3e:00:86:43:ea:cd:a9:8f:c6:1a:42:d8:61:65:e0:74:ee:
e8:a6:18:99:ea:78:c9:21:a6:f9:94:41:61:e6:53:2c:9e:ea:
4b:46:ac:af:b2:19:17:5e:9a:b1:02:77:2b:63:a7:f9:80:da:
24:8f:25:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIxutYMibjQNR4S67p07oYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNDQ0YjA3OWRmMDA4YTdjN2NiZTI4ZmNiYTVkYmUwNjIw
ZThlMTcwHhcNMjYwOTIyMTEwMTE0WhcNMjYwOTIzMTEwMTE0WjAzMTEwLwYDVQQD
EyhmZTliZTY2MDUxZTI2NWFjZTAyOThhODRkNTAyMDllNGUxMzM1YjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1rtEKkC1axf5iuHH0Q3Lo2KrkEz
XMcNXx2Rkjl0cgcc66LdhGgXvhPrilTusLnuCzSHo8pvjZJaE1V1skCeZ+TVcu8L
Nek2V0cuBruBjnAfcd/oQDWiODGkRrY0KBnlayrdhY49LKYXTDnmm0+7/d6Q7znX
AsqK/03Ydcc0vCsehDwsLEUnQOdIPC8OUJkpEYiaBtndJv5+qc8ZXxaBSlRe2VTg
FRk5wzU6Kg7UZbCF3P6CY69S2qV6/B8nFCCntfFeG79WpHB9MuFgcfxhXNfw1c9G
yAwJnXt807nT0dKNJ9+MqS67jKUIqJfI8Dqyq92mhn4L1xx+hBxv8u2bXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6b5mBR4mWs4CmKhNUCCeThM1t/MB8GA1UdIwQY
MBaAFJBESwed8Ainx8vij8ul2+BiDo4XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0VSTEI1M3dDS2ZIeS1LUHk2WGI0R0lPamhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yNGVjOGUtMWNjNi00NWUzLTkwNjMt
OTkxNDk4NjdkYmY3LzEva0VSTEI1M3dDS2ZIeS1LUHk2WGI0R0lPamhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8yNGVjOGUtMWNjNi00NWUzLTkwNjMtOTkxNDk4NjdkYmY3
LzEva0VSTEI1M3dDS2ZIeS1LUHk2WGI0R0lPamhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7gzFO/A
fVZmbsmxoQyoRTZVYmAsFzLlo1RvHWJmNEClnoYLHe7XZ0QI+qx55DOzH87ukhLx
MjIztGqWmCqwi6shKJ2FRR9YC9b0jtbpeQtKPO/ErS7CBclQ5811Hjc4TAbLqd37
IQKU+l65VCPsDsf68eK5qL8EUnONHE3KNo7+87ksY4JHdaWpLVqbBFChM6YCbpry
xYPZJ6T0SwmV1pPssLLgMyunqmZLjUJCP6gyYACSGcqiNHfknDFsvt9FZRUK8bhT
+j4AhkPqzamPxhpC2GFl4HTu6KYYmep4ySGm+ZRBYeZTLJ7qS0asr7IZF16asQJ3
K2On+YDaJI8liw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:51:42 2026 by rpki-client