Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
File: ErethYfzKycmXpxnphMr-bPwIPw.mft (raw, json)
Hash identifier: 13pimHI4S6VxFgpJYXlzl17SgAKzL0yLhbKprPE/aPk=
Subject key identifier: C2:CD:35:66:36:92:50:30:7C:88:99:91:31:69:28:F0:C3:BD:3C:E3
Authority key identifier: 12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
Certificate issuer: /CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Certificate serial: 019D99D0094D191E6D0A0E37590CF2F0D30C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
Manifest number: 04E3
Signing time: Fri 17 Apr 2026 05:00:41 +0000
Manifest this update: Fri 17 Apr 2026 05:00:41 +0000
Manifest next update: Sat 18 Apr 2026 05:00:41 +0000
Files and hashes: 1: ErethYfzKycmXpxnphMr-bPwIPw.crl (hash: 6wNkUWs60E7J/6w0opY6pglC1q1Ck5+YK9biJqNcIHM=)
2: RLh9s9zTeKJ9bogTETA60TFw6lo.roa (hash: 0m+pngGOwDg6Ap17PIVB2FP6vUl0HDw150aVd4LORg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:09:4d:19:1e:6d:0a:0e:37:59:0c:f2:f0:d3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Validity
Not Before: Apr 17 05:00:41 2026 GMT
Not After : Apr 18 05:00:41 2026 GMT
Subject: CN=c2cd3566369250307c889991316928f0c3bd3ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c1:3d:56:3b:6b:14:e0:5d:e9:b1:c6:60:9c:
1c:27:8e:eb:fb:f1:9c:b3:52:aa:98:bc:c9:ca:70:
da:b3:52:8c:64:98:e5:65:9d:30:c1:3b:b9:38:d6:
58:3a:13:c3:0f:86:a3:86:9e:43:35:20:e2:9b:d8:
93:95:f3:b6:2a:5b:8e:4a:1b:af:65:a0:fe:95:d4:
97:3c:39:99:b3:fc:fc:f6:e1:d2:4b:a0:32:f1:f8:
49:70:a2:de:09:76:6f:4b:80:df:b2:9c:b9:98:00:
e6:a6:fa:ad:eb:72:29:b1:9d:90:7f:59:b1:6b:fd:
88:76:6e:e1:ac:98:f9:c2:3c:1f:da:ef:d1:52:5f:
55:2f:7f:7a:6d:c8:4e:17:4b:de:d5:97:46:46:c1:
9c:ec:82:4d:08:c5:dc:b6:11:dd:b1:3e:4c:36:b0:
ae:20:4c:33:e6:4d:8e:35:1f:7a:fc:9d:b4:62:40:
75:10:07:2b:40:71:87:dd:20:1e:63:2a:50:d2:e0:
4f:32:2b:e9:ee:7f:02:0a:4b:46:2a:ae:02:51:0f:
56:02:70:49:33:75:7c:75:16:48:4e:81:8b:f1:96:
2d:ce:aa:f3:e6:1b:da:22:22:5f:37:b2:2c:5f:06:
e5:ca:0b:55:bd:33:44:29:25:2e:2b:bd:7c:c8:20:
f5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CD:35:66:36:92:50:30:7C:88:99:91:31:69:28:F0:C3:BD:3C:E3
X509v3 Authority Key Identifier:
keyid:12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:4b:80:92:ed:e1:a5:54:67:ac:cd:93:28:58:51:47:4c:91:
c8:cd:93:29:e1:50:c0:5f:94:c9:eb:1a:50:94:9e:df:a7:9a:
e3:3b:8a:05:3b:54:9b:b5:cd:b4:b4:4c:ee:51:a1:11:78:ac:
71:56:5b:89:49:e9:f5:c1:f4:e8:cd:b4:e7:f3:df:68:35:d2:
76:63:10:98:a6:66:9d:a5:8e:bc:91:eb:53:36:c5:60:9a:a7:
01:96:12:36:1f:34:f8:d0:9a:92:e6:13:75:15:68:c9:c2:79:
6a:f9:72:46:cc:5b:fe:85:42:b6:c9:66:fd:1f:d0:0b:2c:5b:
94:0a:ea:bc:3d:30:d5:92:77:a6:42:dc:44:b3:bd:53:9d:a7:
e6:1b:c5:b4:50:e1:9b:ec:a1:79:34:12:36:03:2a:02:df:3c:
1c:dd:f3:3e:e1:75:4c:89:02:f0:6e:ba:b0:ea:14:95:8e:1c:
83:05:d4:51:c8:90:ee:8c:8a:75:63:d4:80:a3:4b:a9:ab:24:
96:3f:87:6d:68:db:58:6e:6c:40:03:f6:f7:0e:65:ad:00:75:
14:db:5e:e2:36:b6:0e:fe:8a:4f:80:73:5e:b4:4b:1b:25:fa:
8f:dd:36:1b:92:c6:91:03:83:7d:43:8e:d6:1d:74:28:b2:8c:
bb:f9:46:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:30:46 2026 by rpki-client