Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
File: erUEHcNxgO4qD5_dX11lzWxs3wQ.mft (raw, json)
Hash identifier: Pn9aw1Tv15WjHMTDy4M4J2h3ypNEM/i9ktXlXWwZHrc=
Subject key identifier: 43:8E:55:6F:46:DC:09:4C:CE:CC:A3:D8:D0:61:A2:F0:09:CF:A2:35
Authority key identifier: 7A:B5:04:1D:C3:71:80:EE:2A:0F:9F:DD:5F:5D:65:CD:6C:6C:DF:04
Certificate issuer: /CN=7ab5041dc37180ee2a0f9fdd5f5d65cd6c6cdf04
Certificate serial: 019CAAC6614DDE3BE680B7F01BBFC5548F6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
Manifest number: 12F1
Signing time: Sun 01 Mar 2026 19:00:53 +0000
Manifest this update: Sun 01 Mar 2026 19:00:53 +0000
Manifest next update: Mon 02 Mar 2026 19:00:53 +0000
Files and hashes: 1: erUEHcNxgO4qD5_dX11lzWxs3wQ.crl (hash: 8P5zd2HB7/l8qlufvGIrUULlsknRHgc9bKnIQUTJ/5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:61:4d:de:3b:e6:80:b7:f0:1b:bf:c5:54:8f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ab5041dc37180ee2a0f9fdd5f5d65cd6c6cdf04
Validity
Not Before: Mar 1 19:00:53 2026 GMT
Not After : Mar 2 19:00:53 2026 GMT
Subject: CN=438e556f46dc094ccecca3d8d061a2f009cfa235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:41:b2:56:d4:63:73:50:03:ea:42:b5:14:77:
1b:1d:d5:2f:33:e2:07:ab:f8:37:e2:71:9b:61:cb:
21:b6:c7:9e:73:9d:35:7d:3a:e2:e0:ff:0b:6a:48:
99:fb:f2:77:0c:4e:d0:85:33:7f:c7:77:77:51:19:
3a:10:74:89:35:eb:4e:99:4b:cb:ec:6e:e0:93:09:
10:2f:f0:01:14:35:d9:d4:af:53:3d:68:4d:43:f0:
94:61:d9:00:b5:56:d1:8c:ea:51:bd:7d:06:f4:1f:
1c:80:af:e7:26:8b:62:1b:20:df:82:0d:12:de:fa:
29:d0:b8:39:67:b6:0f:af:d9:76:86:d4:33:50:72:
db:4e:bf:b3:85:01:94:08:81:d1:ca:da:31:aa:54:
18:1f:1d:4d:f5:e9:aa:3a:e1:55:8b:19:20:de:b9:
65:4a:f6:1c:f4:f3:ad:5d:7c:36:0a:98:7d:d4:13:
93:93:9a:12:e4:dc:8f:15:48:47:30:f7:a5:f6:c1:
e4:fe:62:1a:9f:51:f5:59:74:aa:5e:96:d4:72:2a:
61:aa:8c:b2:98:98:b8:1d:a4:76:fa:2a:dc:e3:e8:
72:f3:5f:5a:0d:1e:c5:78:4b:e8:b4:f5:ee:ae:c6:
5b:ff:4f:22:38:4d:4e:da:91:1c:71:b1:a1:7e:49:
77:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8E:55:6F:46:DC:09:4C:CE:CC:A3:D8:D0:61:A2:F0:09:CF:A2:35
X509v3 Authority Key Identifier:
keyid:7A:B5:04:1D:C3:71:80:EE:2A:0F:9F:DD:5F:5D:65:CD:6C:6C:DF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ee:e0:17:c2:42:6d:0b:70:b5:b1:5e:b0:9a:ea:47:55:c9:
4d:20:3d:de:31:51:e5:e5:27:a7:17:50:f3:82:2c:0f:87:ce:
37:02:85:fb:15:9a:aa:eb:6d:c7:a5:24:09:8c:58:b2:31:f4:
8c:57:66:d5:2e:fe:dc:a8:a8:cc:06:64:b5:43:55:19:7a:2a:
99:c5:70:bf:73:ab:33:3f:68:09:73:a3:f3:ba:09:11:c1:e6:
c2:f9:82:92:ac:b3:97:b4:8c:ba:86:e3:79:1a:5a:63:ea:91:
4a:53:d1:5f:61:7f:48:6e:43:e9:2b:90:4f:73:76:d1:0b:d4:
a8:41:83:bb:2d:37:99:7b:6e:51:35:50:63:a4:dd:cb:32:6e:
4d:61:ac:2d:9d:17:eb:01:d6:6f:53:a9:bd:b3:df:c0:2f:4d:
76:1d:c4:ad:34:45:23:62:b8:c5:fd:04:de:2f:ff:38:53:04:
26:4b:c9:5a:52:01:96:87:51:ac:ed:3c:c3:a4:48:98:ac:44:
4e:44:28:c0:74:5c:29:4f:4c:39:59:67:e6:ac:32:7a:0f:42:
d4:b4:0f:56:bf:e3:39:a7:cf:bd:3f:bc:68:aa:9f:be:ed:47:
87:06:ed:c5:3a:67:d9:c3:c5:52:59:fe:4e:24:c4:a3:b7:e4:
67:79:bd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:53 2026 by rpki-client