Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
File: ErethYfzKycmXpxnphMr-bPwIPw.mft (raw, json)
Hash identifier: aeQzfObSeo8msqUHAwkrVs0nEV7IxcbeVIP6ZyTozGk=
Subject key identifier: CC:68:93:EC:2D:55:71:8B:B6:68:30:7E:24:5B:6B:C3:16:57:5C:B3
Authority key identifier: 12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
Certificate issuer: /CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Certificate serial: 019CAA5850F847E3AAF3DE73391D51BB352D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
Manifest number: 0467
Signing time: Sun 01 Mar 2026 17:00:40 +0000
Manifest this update: Sun 01 Mar 2026 17:00:40 +0000
Manifest next update: Mon 02 Mar 2026 17:00:40 +0000
Files and hashes: 1: ErethYfzKycmXpxnphMr-bPwIPw.crl (hash: Vmb45LX1zu+WJ9ummq85osGLMzN7/OfOGfHzmhbImns=)
2: RLh9s9zTeKJ9bogTETA60TFw6lo.roa (hash: 0m+pngGOwDg6Ap17PIVB2FP6vUl0HDw150aVd4LORg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:50:f8:47:e3:aa:f3:de:73:39:1d:51:bb:35:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Validity
Not Before: Mar 1 17:00:40 2026 GMT
Not After : Mar 2 17:00:40 2026 GMT
Subject: CN=cc6893ec2d55718bb668307e245b6bc316575cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b2:c7:b2:b6:df:56:2f:21:f5:f7:c5:6e:f3:
5a:af:57:c0:6f:11:d9:c6:e1:0a:8f:cf:74:14:9a:
1e:83:4d:0b:07:39:a7:d2:60:e7:b5:f5:f1:53:f6:
6a:fb:cb:23:1f:a3:2e:e5:02:09:88:15:3e:7c:49:
4e:70:e7:0a:59:a6:9e:06:b2:b4:94:58:f7:9d:d6:
71:99:8e:b8:21:78:c6:d8:23:0a:84:e8:5f:41:72:
5d:51:32:04:14:eb:62:da:df:f5:ba:64:27:09:0f:
5a:30:01:43:f8:de:c9:b1:12:9f:cd:8e:32:8d:bf:
ff:01:47:a7:57:eb:29:a9:a3:ed:70:87:0b:1b:3b:
b7:85:75:36:ee:57:e5:92:79:0d:b6:e1:d6:4d:76:
c6:d1:0b:1c:9b:63:ba:03:f4:c4:97:31:5c:06:ac:
1e:53:16:1f:38:69:2a:47:8f:1e:50:4f:26:dc:51:
9e:69:d7:ac:f3:39:2d:8d:03:06:ec:6a:aa:2b:5b:
bc:e9:96:b9:da:5d:cb:ff:14:b1:5f:60:d0:09:31:
16:ca:b4:e5:d3:73:c9:9d:fa:47:93:e9:32:b7:15:
28:00:52:f3:bf:d0:b0:ec:13:bd:73:ed:c4:1e:e9:
dd:11:3a:f5:f0:0a:9b:9c:07:5e:f4:2e:42:80:0d:
d8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:68:93:EC:2D:55:71:8B:B6:68:30:7E:24:5B:6B:C3:16:57:5C:B3
X509v3 Authority Key Identifier:
keyid:12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f6:a0:54:fa:1d:d8:e9:37:ad:73:0d:53:5a:ba:16:44:cf:
a7:05:8e:2b:0d:44:dd:d0:9f:1c:c5:a6:6d:7c:a6:c2:65:20:
f4:84:45:c3:8c:ef:21:46:00:48:46:f0:59:7c:03:b9:bb:5d:
e7:e7:9d:dd:69:c2:b9:45:1f:cd:14:ae:36:31:54:cc:44:b4:
b1:44:36:21:c8:02:ca:e3:12:12:57:4e:b7:d4:c9:09:4d:c7:
a2:4a:a7:15:36:ee:8c:69:30:e6:ec:36:80:20:65:66:ab:0a:
a5:c6:5e:7d:8d:ef:c7:c8:b2:e5:0f:ce:b3:b4:7d:e6:86:10:
70:7c:c0:dd:ed:29:f6:77:94:7c:57:3a:4a:2d:96:f2:97:ad:
c3:c8:74:11:c8:e2:e1:57:ba:1e:5d:c3:44:fb:52:ad:22:e5:
41:5a:e5:80:89:7d:ac:ec:9a:c1:f3:5b:a2:34:ff:fc:da:57:
29:54:97:51:19:71:ce:4d:3a:f0:52:ec:20:ec:54:65:5f:50:
67:7e:25:18:f5:47:12:e9:a3:79:ad:2b:1c:1a:01:5f:97:44:
6d:55:13:60:63:d9:72:eb:5e:41:fb:45:57:e0:e4:3b:58:31:
72:4b:c3:e6:3c:88:f1:10:b4:a6:fc:0c:66:0a:ad:ec:2b:a6:
9a:9b:84:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:53:59 2026 by rpki-client