Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
File: ErethYfzKycmXpxnphMr-bPwIPw.mft (raw, json)
Hash identifier: hnfxfZQB3OBlp9z/UZt9+j2hWe23wX3G4ZIRlvu5ntc=
Subject key identifier: D6:73:0B:10:1A:90:C0:0C:04:A0:F3:A8:B5:D5:B4:2D:84:D5:E0:57
Authority key identifier: 12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
Certificate issuer: /CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Certificate serial: 019EC337F661939EF49E28779C0ECFA764C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
Manifest number: 057D
Signing time: Sat 13 Jun 2026 23:01:25 +0000
Manifest this update: Sat 13 Jun 2026 23:01:25 +0000
Manifest next update: Sun 14 Jun 2026 23:01:25 +0000
Files and hashes: 1: ErethYfzKycmXpxnphMr-bPwIPw.crl (hash: s7D5jPSJB2iJ7DyRlbpVfy3QyuPP8m5BT54fZfoSKVI=)
2: RLh9s9zTeKJ9bogTETA60TFw6lo.roa (hash: 0m+pngGOwDg6Ap17PIVB2FP6vUl0HDw150aVd4LORg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:37:f6:61:93:9e:f4:9e:28:77:9c:0e:cf:a7:64:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Validity
Not Before: Jun 13 23:01:25 2026 GMT
Not After : Jun 14 23:01:25 2026 GMT
Subject: CN=d6730b101a90c00c04a0f3a8b5d5b42d84d5e057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bf:c6:f2:c4:a3:9d:a1:b7:c5:23:26:4b:45:
7c:59:1b:2f:1b:2c:fa:f5:10:03:34:91:c0:5f:75:
ee:f6:9c:8e:cc:95:29:1a:32:ff:ab:3f:67:ab:a3:
51:85:25:47:3d:c3:d1:44:79:c0:fb:eb:80:76:d9:
27:c2:5a:5a:e3:e4:63:43:9a:32:d0:29:74:7d:52:
bd:e7:2d:f8:3a:33:ca:ce:b1:83:fc:fc:5f:1e:61:
fd:dc:ed:00:55:28:c2:ca:f5:ed:62:fd:01:46:19:
c0:0c:ad:8c:37:d0:ef:09:54:a5:1b:6a:fc:fa:8b:
97:e6:dd:c3:8f:95:c5:0a:f6:83:06:00:d9:ad:32:
b1:8e:6f:fb:78:34:32:1c:e0:b0:c1:41:9e:50:73:
1a:18:bd:77:31:45:6b:fd:e4:64:c9:b3:39:e3:07:
a4:19:de:c4:85:8c:5f:95:38:a3:8b:37:9f:9a:cd:
8b:ec:9f:6d:ee:9d:61:4b:f3:71:19:df:ab:85:54:
15:28:00:3b:10:d5:6f:5f:58:01:77:15:9a:80:80:
26:8e:17:d6:00:ee:85:4b:3e:87:18:15:d9:e1:58:
9e:97:e9:02:93:92:a3:84:e9:96:9d:08:81:c0:75:
2b:7d:62:79:2c:55:d4:80:26:3b:9e:70:61:ab:0a:
b5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:73:0B:10:1A:90:C0:0C:04:A0:F3:A8:B5:D5:B4:2D:84:D5:E0:57
X509v3 Authority Key Identifier:
keyid:12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:30:9e:c3:cf:21:d6:74:e0:15:39:05:0a:f0:03:72:60:42:
14:a7:43:33:61:67:e2:23:ea:ea:fd:2c:e6:b2:03:ad:e0:62:
55:e4:a0:eb:4b:c8:d8:a9:48:f4:ab:47:28:2f:a4:9a:4d:7d:
f3:70:aa:c4:6c:20:cf:d9:ab:d4:da:83:ec:60:62:27:cf:16:
6b:1a:fb:27:30:68:00:a0:ec:26:1a:05:f4:5c:4b:69:e7:19:
e2:35:7b:8c:39:66:dd:ef:53:a3:82:0f:32:43:23:f9:55:c5:
28:a2:2d:32:be:34:b4:75:22:ce:85:8f:20:97:51:cf:8f:b4:
e4:24:fd:00:d1:20:25:70:c5:b7:c3:6c:3c:0c:15:9c:96:e1:
6c:43:c3:05:ed:4e:3f:87:92:b9:dc:20:cf:14:e8:7b:5d:b4:
37:b5:ae:42:a0:a8:d5:e7:35:eb:c9:fe:ce:35:07:a6:5f:6a:
42:09:e0:88:a8:e1:bd:c5:03:24:4a:6e:7e:4b:ac:45:26:42:
3d:c1:64:8d:4a:03:63:9a:ea:be:d0:94:ff:60:67:15:69:17:
9f:9c:f4:ce:33:54:42:de:54:bd:0d:e9:75:f3:b1:49:0d:db:
d0:9f:de:63:00:7b:67:c9:81:d0:1b:0d:b0:66:58:81:3c:25:
4f:23:a1:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DN/Zhk570nih3nA7Pp2TIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYjdhZDg1ODdmMzJiMjcyNjVlOWM2N2E2MTMyYmY5YjNm
MDIwZmMwHhcNMjYwNjEzMjMwMTI1WhcNMjYwNjE0MjMwMTI1WjAzMTEwLwYDVQQD
EyhkNjczMGIxMDFhOTBjMDBjMDRhMGYzYThiNWQ1YjQyZDg0ZDVlMDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL/G8sSjnaG3xSMmS0V8WRsvGyz6
9RADNJHAX3Xu9pyOzJUpGjL/qz9nq6NRhSVHPcPRRHnA++uAdtknwlpa4+RjQ5oy
0Cl0fVK95y34OjPKzrGD/PxfHmH93O0AVSjCyvXtYv0BRhnADK2MN9DvCVSlG2r8
+ouX5t3Dj5XFCvaDBgDZrTKxjm/7eDQyHOCwwUGeUHMaGL13MUVr/eRkybM54wek
Gd7EhYxflTijizefms2L7J9t7p1hS/NxGd+rhVQVKAA7ENVvX1gBdxWagIAmjhfW
AO6FSz6HGBXZ4Viel+kCk5KjhOmWnQiBwHUrfWJ5LFXUgCY7nnBhqwq1WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZzCxAakMAMBKDzqLXVtC2E1eBXMB8GA1UdIwQY
MBaAFBK3rYWH8ysnJl6cZ6YTK/mz8CD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84OTIyMGYtOTFlYy00Y2UxLTk5YzUt
MTA5MTIyNzlhMTI1LzEvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84OTIyMGYtOTFlYy00Y2UxLTk5YzUtMTA5MTIyNzlhMTI1
LzEvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALTCew88h
1nTgFTkFCvADcmBCFKdDM2Fn4iPq6v0s5rIDreBiVeSg60vI2KlI9KtHKC+kmk19
83CqxGwgz9mr1NqD7GBiJ88Waxr7JzBoAKDsJhoF9FxLaecZ4jV7jDlm3e9To4IP
MkMj+VXFKKItMr40tHUizoWPIJdRz4+05CT9ANEgJXDFt8NsPAwVnJbhbEPDBe1O
P4eSudwgzxToe120N7WuQqCo1ec168n+zjUHpl9qQgngiKjhvcUDJEpufkusRSZC
PcFkjUoDY5rqvtCU/2BnFWkXn5z0zjNUQt5UvQ3pdfOxSQ3b0J/eYwB7Z8mB0BsN
sGZYgTwlTyOh+Q==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:24:57 2026 by rpki-client