Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
File: Erh8bK-B3jYl_hzgVZ854wUFoFE.mft (raw, json)
Hash identifier: RwyqWu33DYSyAKtWPu1rCzrQHP2SF1Gc9AHJE6G3hus=
Subject key identifier: 50:EF:CA:E3:4E:2F:89:21:EB:A1:29:D6:7D:BD:09:A3:2F:D3:16:63
Authority key identifier: 12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
Certificate issuer: /CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Certificate serial: 019CAB6AD772ADFA62FD8B557D50954D9FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
Manifest number: 1532
Signing time: Sun 01 Mar 2026 22:00:31 +0000
Manifest this update: Sun 01 Mar 2026 22:00:31 +0000
Manifest next update: Mon 02 Mar 2026 22:00:31 +0000
Files and hashes: 1: Erh8bK-B3jYl_hzgVZ854wUFoFE.crl (hash: mRqBNi+ip4/NJGiY2kQjVTBfXJ4tBUfFPgSLpWnQvS0=)
2: KlixQVOZPwj2P7IsU6UK6TEAtrI.roa (hash: sDFOAzJVALs9ccbx12fQTxrUvz7R6MdVGJZt6nowTYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:d7:72:ad:fa:62:fd:8b:55:7d:50:95:4d:9f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Validity
Not Before: Mar 1 22:00:31 2026 GMT
Not After : Mar 2 22:00:31 2026 GMT
Subject: CN=50efcae34e2f8921eba129d67dbd09a32fd31663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ae:fa:02:9f:d5:0b:f5:47:47:1e:f6:55:e7:
84:98:f5:35:6a:14:5e:38:1a:86:74:cb:61:c3:54:
34:a6:8e:07:4f:5e:96:e2:fe:c4:e4:96:42:02:99:
10:23:09:e5:0e:f9:81:81:c2:08:96:ec:d7:4a:9c:
8b:fe:dd:d2:56:47:90:b8:fd:7d:d5:fc:75:dc:ff:
2e:50:4d:f3:ed:b5:7b:c1:23:14:ba:5e:7f:b5:ea:
28:07:30:c5:2d:82:d6:e9:7d:98:93:ae:bf:48:b6:
a6:9f:85:f2:3b:dc:79:3c:76:54:0c:7e:c1:f1:42:
16:78:60:60:c0:b1:13:8d:e1:36:2d:2d:79:54:9b:
49:cf:49:ac:b2:04:a2:aa:c1:78:b9:18:4c:54:03:
c6:09:df:81:3a:7d:ed:f7:07:80:1d:fa:ad:f0:5f:
3c:0f:99:ae:62:e3:03:69:f0:6a:2a:6a:9f:6f:fa:
f4:9a:6f:e2:5e:f8:10:96:17:c0:ec:14:b3:9a:9f:
97:16:25:97:96:92:56:e0:91:01:e9:5d:e9:29:0d:
e2:6d:a4:49:a2:e9:7e:8d:0c:47:30:6d:fa:fb:a1:
27:48:53:e2:18:d2:1f:e3:2a:6f:21:af:19:ff:fa:
aa:10:cc:47:af:3e:90:60:0b:72:26:5b:45:78:9b:
48:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EF:CA:E3:4E:2F:89:21:EB:A1:29:D6:7D:BD:09:A3:2F:D3:16:63
X509v3 Authority Key Identifier:
keyid:12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c1:1f:94:62:fa:32:48:3c:6e:b0:3f:4b:02:70:55:04:5a:
fe:fc:b5:41:dd:16:02:bb:9b:e6:3a:a6:65:93:ca:f9:c7:12:
4a:d4:ae:23:ac:19:02:ff:1f:90:dc:08:3f:c6:42:34:dd:73:
44:4b:91:22:75:ce:4b:1b:05:b5:c1:8b:c5:7c:a8:e8:06:68:
a1:52:be:42:4f:6b:59:ac:ed:75:b8:3c:20:99:5b:36:7e:25:
4f:6e:75:21:a2:f0:71:5d:97:76:ca:15:d5:2e:b8:51:c9:e2:
4d:7f:cc:ff:16:f7:50:e0:83:c5:57:52:8c:22:45:90:92:aa:
df:52:b3:1b:ac:b0:d5:62:a2:6a:ee:a8:fc:00:4a:30:b3:44:
52:2e:f6:ec:e8:f0:3a:25:1b:31:aa:37:bc:da:57:db:81:e6:
ca:c0:cf:ee:56:e9:97:e3:f3:fc:15:19:fe:57:5d:43:12:ea:
ee:53:89:f3:9c:7e:5d:b3:90:67:f0:1e:f0:51:bd:38:f2:cd:
58:ee:de:3d:82:e0:96:20:9d:8d:b7:10:62:66:4e:f9:86:ea:
6b:79:f5:9e:3e:53:d4:01:2c:7e:79:6b:92:4d:f7:9b:f9:93:
73:89:42:f1:cf:97:f7:7b:bd:e0:95:8a:6b:1d:15:a2:41:49:
0b:fc:70:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:26:25 2026 by rpki-client