Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
File: Erh8bK-B3jYl_hzgVZ854wUFoFE.mft (raw, json)
Hash identifier: JPXMRrtgchl9ozrBqtrZCVG/i2MY5gvjpbfQ8Yl1PCk=
Subject key identifier: E3:F8:D9:A2:56:72:3B:F8:E0:A0:29:AF:91:B2:85:D8:A7:23:F2:55
Authority key identifier: 12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
Certificate issuer: /CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Certificate serial: 019D9A66C950B16F3DA124F3F347EB2DDF41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
Manifest number: 15B3
Signing time: Fri 17 Apr 2026 07:45:20 +0000
Manifest this update: Fri 17 Apr 2026 07:45:20 +0000
Manifest next update: Sat 18 Apr 2026 07:45:20 +0000
Files and hashes: 1: Erh8bK-B3jYl_hzgVZ854wUFoFE.crl (hash: wUo892Yazm8T0gL8Ryi7HTIh0u0+DKTYgXhXHPyGY/I=)
2: K3mAv4ENjdFvUb1ySwEcIqWxG_8.roa (hash: TrWxwfXOHY5NB4elTvUPByLYubX+YUC3/aQn4/n7h2A=)
3: UNr1JSsPVlDmc77n-IlJ4J8D-J0.roa (hash: cNdO2qWipe5XDjbIGYIIO5If+75z//dCQTdfnQ/FOsg=)
4: vv3CReJV7LkCDD7lq-2ePD1bHSw.roa (hash: vcOUmLLDOnBolotJp01JH8ANPyx16KLiqHkliISm6TA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:66:c9:50:b1:6f:3d:a1:24:f3:f3:47:eb:2d:df:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Validity
Not Before: Apr 17 07:45:20 2026 GMT
Not After : Apr 18 07:45:20 2026 GMT
Subject: CN=e3f8d9a256723bf8e0a029af91b285d8a723f255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9f:0b:47:5f:02:fc:06:33:f2:9c:ae:8b:02:
0b:41:c9:cc:ac:d1:ea:b5:5d:4a:e2:d0:5e:73:2d:
65:13:10:87:bf:dc:2c:88:d1:21:62:d9:bd:af:bc:
37:01:d1:1e:9b:58:2b:a4:0b:d8:17:7d:0b:b4:82:
b3:ef:1b:01:ab:59:e0:0b:a7:68:4c:3f:7b:81:62:
48:37:cb:d3:1f:08:04:e5:40:9a:b5:88:fb:c9:9b:
e1:bd:28:bd:97:fa:11:f3:03:a2:15:10:7e:fb:42:
28:98:c9:f7:de:ce:70:77:9c:be:45:56:f6:fc:93:
23:a5:e2:3c:56:29:a7:eb:37:fd:fb:e4:0e:ed:8e:
1c:c7:fa:3a:22:87:09:51:7b:a8:d5:06:85:ff:a9:
13:09:21:d1:ad:f5:cb:f0:de:90:24:46:85:d2:73:
d7:3b:73:af:d3:16:6f:63:ac:e6:37:8c:c7:47:4a:
98:1c:ff:e7:f5:8d:35:be:bd:12:ed:b7:63:a9:8f:
6b:fa:c0:d0:42:65:cd:65:4a:54:b4:6e:01:c7:b4:
bb:37:e5:13:65:35:a7:5f:13:30:9a:08:81:40:34:
bb:78:5a:64:a6:54:64:0c:53:c8:60:bc:4f:4a:7c:
d8:07:00:93:11:48:84:97:67:c9:95:5d:9d:c3:c8:
ef:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F8:D9:A2:56:72:3B:F8:E0:A0:29:AF:91:B2:85:D8:A7:23:F2:55
X509v3 Authority Key Identifier:
keyid:12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:11:e1:f3:52:2c:82:15:cf:78:7e:54:c5:79:c3:01:e9:8c:
1b:01:d2:7a:d0:4e:89:5b:60:5a:e5:aa:c3:0c:2d:3b:46:20:
72:97:9c:44:8a:b4:cd:af:08:ed:bc:84:4c:b1:4d:a1:00:92:
63:b6:9a:52:6f:4e:58:e0:d4:b3:63:fd:e6:b2:98:10:1c:22:
a0:ae:15:57:a7:6f:d8:3f:7d:67:cb:b8:9e:5a:99:9f:fc:dd:
5e:ee:a7:7c:a5:1b:aa:b4:2e:75:96:7d:02:b1:0a:a8:5d:7e:
03:d5:e5:9f:cb:eb:ff:34:de:00:a8:d2:1b:c2:1a:38:f5:0c:
5f:83:03:e9:b9:5b:15:27:2c:1c:35:38:4e:da:8b:c8:2d:d1:
b5:b3:d5:8d:6f:c3:f5:3d:44:9a:86:cc:65:74:47:33:c8:cb:
7e:8e:18:24:54:08:8b:26:0a:8d:e3:8f:b4:dc:b5:c8:c3:c3:
4c:6b:6f:3e:19:d7:a5:a0:6f:fd:d8:94:d0:6a:eb:d5:cf:d8:
ba:bd:52:b8:4f:69:d4:35:15:65:be:db:ac:17:ca:4e:ee:e1:
d7:5a:ed:49:eb:c4:01:c0:b5:2f:31:5c:ba:09:8d:f0:99:dd:
4b:ba:79:23:db:8c:9e:32:81:13:d0:c7:5d:f2:2c:bc:99:eb:
15:28:09:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:22:49 2026 by rpki-client