Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
File: erUEHcNxgO4qD5_dX11lzWxs3wQ.mft (raw, json)
Hash identifier: 1+dATFqug7n+PUNt94vJ8FwlQoHQrDKmjVDMW9zn8cw=
Subject key identifier: 59:A6:C3:F5:FE:B0:9E:79:96:BF:C2:98:1B:D4:DD:D2:D7:6B:A8:14
Authority key identifier: 7A:B5:04:1D:C3:71:80:EE:2A:0F:9F:DD:5F:5D:65:CD:6C:6C:DF:04
Certificate issuer: /CN=7ab5041dc37180ee2a0f9fdd5f5d65cd6c6cdf04
Certificate serial: 019D9A3E89E96F8E10DC16B9B0BD32525013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
Manifest number: 136D
Signing time: Fri 17 Apr 2026 07:01:22 +0000
Manifest this update: Fri 17 Apr 2026 07:01:22 +0000
Manifest next update: Sat 18 Apr 2026 07:01:22 +0000
Files and hashes: 1: erUEHcNxgO4qD5_dX11lzWxs3wQ.crl (hash: RF+ODHfqLnLTXxDMBEO7cPVi1B1Ezdr67+xaBchpAxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:89:e9:6f:8e:10:dc:16:b9:b0:bd:32:52:50:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ab5041dc37180ee2a0f9fdd5f5d65cd6c6cdf04
Validity
Not Before: Apr 17 07:01:22 2026 GMT
Not After : Apr 18 07:01:22 2026 GMT
Subject: CN=59a6c3f5feb09e7996bfc2981bd4ddd2d76ba814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:09:4a:63:88:64:71:30:ba:d8:62:10:cf:8a:
c3:9d:25:9c:9c:7a:2a:9f:b4:16:e3:20:74:91:f2:
8f:ba:7b:0d:cb:93:a3:85:f4:c0:1c:83:95:6e:5b:
eb:ef:d5:98:8b:2a:a2:cf:86:27:e9:45:66:02:8e:
25:37:3f:a9:96:44:b7:60:4d:d3:b2:a3:ff:36:1c:
4f:a6:56:07:c2:f8:d1:a0:0b:45:d4:60:68:95:5f:
8b:21:33:e6:59:38:ab:e1:72:3d:12:61:00:05:10:
bf:b0:32:32:35:a0:c3:73:59:c8:c9:be:ac:ea:bf:
3b:9a:b6:de:b7:36:1f:1a:88:33:7c:45:84:65:85:
aa:76:c4:25:da:76:28:b9:87:95:e8:fa:72:6a:bd:
f9:4e:1e:8b:c9:2c:fa:6c:61:ce:0b:9e:82:56:ff:
2d:ed:bc:52:ae:95:97:c4:e0:fb:c1:f6:59:1f:6d:
a9:67:18:5a:76:67:07:f4:fb:a5:e2:16:7c:b3:f6:
02:74:9c:7b:03:7c:a7:c6:b7:89:78:e0:90:bf:ed:
31:4b:18:9d:3b:99:77:04:59:ba:29:87:65:20:39:
26:35:1a:2e:83:12:99:c4:55:05:8d:c6:27:4e:f7:
19:f7:95:54:1f:dd:84:c0:54:b7:15:59:51:84:e1:
1a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A6:C3:F5:FE:B0:9E:79:96:BF:C2:98:1B:D4:DD:D2:D7:6B:A8:14
X509v3 Authority Key Identifier:
keyid:7A:B5:04:1D:C3:71:80:EE:2A:0F:9F:DD:5F:5D:65:CD:6C:6C:DF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c4:4a:86:ca:8f:0f:3b:cd:8d:36:61:34:e4:47:68:38:87:
27:04:01:5f:00:a1:2d:02:d8:1d:e1:1c:97:2a:df:4f:c0:eb:
63:d0:2f:43:53:d2:97:87:f7:9e:9e:67:9e:a9:01:d2:3a:75:
f0:b2:97:45:2d:e5:ab:e8:d1:f2:18:40:35:d1:8b:01:98:a0:
da:8f:ec:85:35:59:9f:b2:8b:a4:7a:0c:d5:61:62:99:a8:8e:
fc:2a:13:bf:46:38:dc:c1:2a:2e:32:f2:f5:37:3c:5b:90:c3:
c1:78:ba:7a:86:90:5f:17:4e:55:8a:7b:6a:7f:01:2b:ad:9f:
76:67:13:cb:29:78:09:75:5e:b3:3d:bd:ad:49:ef:ba:21:45:
c0:2e:9e:9e:f3:21:87:10:fb:b8:92:e4:c2:6c:e9:f3:9f:d0:
fe:a4:9a:1f:46:1a:d8:9e:71:da:fd:ef:70:83:98:79:78:92:
c0:9f:bd:33:db:c2:54:07:3b:21:80:7e:33:85:e0:a3:ff:53:
02:d2:46:86:00:77:df:9e:de:ce:b7:78:f1:b9:29:f5:71:8c:
00:62:c5:e1:94:32:a6:c1:69:54:5d:b8:a2:05:45:a9:5c:40:
92:24:2c:ba:da:cd:2b:f8:7a:c9:ba:6a:1d:83:c4:af:36:8b:
6e:db:36:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:43:21 2026 by rpki-client