Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
File: kERLB53wCKfHy-KPy6Xb4GIOjhc.mft (raw, json)
Hash identifier: uVQbNDi9WCe/AS18p6kU81UGC7fUc/DWKVvjJKPyKQU=
Subject key identifier: B4:14:A2:E9:3F:5A:26:A1:66:47:64:D6:A2:22:D5:22:C8:BB:1E:5F
Authority key identifier: 90:44:4B:07:9D:F0:08:A7:C7:CB:E2:8F:CB:A5:DB:E0:62:0E:8E:17
Certificate issuer: /CN=90444b079df008a7c7cbe28fcba5dbe0620e8e17
Certificate serial: 019FAAF5CFCE58FB7C5C339B040033727235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
Manifest number: 1847
Signing time: Tue 28 Jul 2026 23:01:03 +0000
Manifest this update: Tue 28 Jul 2026 23:01:03 +0000
Manifest next update: Wed 29 Jul 2026 23:01:03 +0000
Files and hashes: 1: kERLB53wCKfHy-KPy6Xb4GIOjhc.crl (hash: ui0pinlaF6sUmY5rJ1WemYqnCeMs2LVDo3u9boNkYiA=)
2: qh7XZDst8WsBCGjKLPzTSR00_9w.roa (hash: 91hvylgfnm1S7Q889lgwTcLMuKxZDx/xX3dO/XE0rko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:cf:ce:58:fb:7c:5c:33:9b:04:00:33:72:72:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90444b079df008a7c7cbe28fcba5dbe0620e8e17
Validity
Not Before: Jul 28 23:01:03 2026 GMT
Not After : Jul 29 23:01:03 2026 GMT
Subject: CN=b414a2e93f5a26a1664764d6a222d522c8bb1e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1d:8f:ef:06:8c:c2:c6:c4:5d:d7:4b:8b:46:
e0:6a:a4:14:99:91:4e:6c:3f:27:ca:9c:36:e3:48:
30:ba:b4:2c:27:0c:16:77:c9:29:fe:70:37:21:8e:
79:34:6f:85:21:94:b9:08:51:e1:7c:8f:0f:d6:ff:
07:28:80:1b:3f:5b:c8:5e:72:03:14:ae:57:20:b8:
57:26:59:d3:6a:88:b2:0a:3d:3e:9e:45:c4:e5:2e:
1a:10:15:30:a6:09:42:6e:12:b5:49:d8:f5:63:9f:
d3:96:6e:60:93:09:64:3e:74:04:15:0a:c0:06:bb:
63:de:63:c0:8e:02:d7:c3:95:9a:d4:82:77:81:69:
cb:f8:c4:24:a1:09:e7:3d:5f:50:84:47:82:21:3c:
89:de:68:bf:31:0e:17:f6:1e:f2:df:b0:34:d4:31:
ec:4d:d4:35:1d:28:92:35:9e:97:57:5b:34:c9:f7:
11:eb:1d:43:58:54:18:c3:e0:43:19:fb:97:98:f5:
1b:a9:59:d4:81:7e:dc:55:c2:2c:f0:9d:26:b4:64:
d7:6d:27:a2:63:5b:eb:b4:de:4e:51:f6:f7:77:41:
2d:62:dc:3e:c6:2d:5a:f9:46:7d:3d:4f:f4:ee:17:
45:eb:9d:7e:2b:32:87:2c:e2:b9:b1:08:e4:5e:70:
31:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:14:A2:E9:3F:5A:26:A1:66:47:64:D6:A2:22:D5:22:C8:BB:1E:5F
X509v3 Authority Key Identifier:
keyid:90:44:4B:07:9D:F0:08:A7:C7:CB:E2:8F:CB:A5:DB:E0:62:0E:8E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:1c:7a:6f:74:b6:da:7b:c1:63:d6:e9:75:28:66:43:be:4c:
56:9e:6a:2c:05:16:45:59:b8:d1:c8:1f:71:33:4c:be:03:72:
ab:33:5e:d0:81:a8:9e:67:61:a4:5b:ac:76:76:12:ca:d6:2c:
51:b6:89:8d:bb:b1:66:77:11:05:24:81:5d:7e:31:52:f7:f8:
61:fb:c8:74:ae:9b:b2:35:f1:b2:6c:0e:3b:11:41:c1:56:6d:
3c:b0:45:fd:6e:eb:df:3b:a0:7e:38:a9:d8:85:e1:89:15:60:
8f:62:6e:c6:b2:7c:e2:6d:6f:8f:e0:2a:b6:cd:f4:8b:cf:5a:
62:07:b4:58:ea:d8:20:05:ef:47:d2:6c:cc:b6:fb:a4:d1:6f:
02:f9:41:dc:e5:9e:64:76:f3:d8:31:ce:5e:54:6d:61:09:37:
f7:aa:45:81:53:f7:0e:1a:41:43:f6:ef:7b:8c:59:f6:17:9d:
50:46:2b:6a:81:73:1d:69:b7:ce:5d:9b:ac:d9:17:90:b2:e6:
ed:4c:be:b8:93:86:4c:d4:63:5d:73:45:66:57:bc:0e:1b:19:
38:f5:3a:0c:49:dd:95:47:06:27:a7:16:57:97:30:30:a1:53:
11:f7:96:0d:99:45:3f:40:96:76:a2:95:87:8d:35:bd:80:d2:
da:7b:0c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:22:01 2026 by rpki-client