Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
File: ERk_jomOtvvRLFPffa0CFUPu_G4.mft (raw, json)
Hash identifier: k1PdLxLbY0wK9fRMcStQ0WnwfyVhLif/hLchoJoIiMw=
Subject key identifier: DF:F5:92:38:61:F7:8A:A2:90:A6:8E:4B:AF:C1:40:3D:05:DE:6B:4F
Authority key identifier: 11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E
Certificate issuer: /CN=11193f8e898eb6fbd12c53df7dad021543eefc6e
Certificate serial: 01A0C47C1A17D2B6CC0F5C3C261349004941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
Manifest number: 0ECC
Signing time: Mon 21 Sep 2026 15:01:02 +0000
Manifest this update: Mon 21 Sep 2026 15:01:02 +0000
Manifest next update: Tue 22 Sep 2026 15:01:02 +0000
Files and hashes: 1: ERk_jomOtvvRLFPffa0CFUPu_G4.crl (hash: mZehB9xkskfFI/wh59ClPKdBulq6tKYK0gePaBx/oW0=)
2: R54X7zTNG912i2EvC7AKSQH7Vtc.roa (hash: t8SIcyAg5d0NiVmbOss6KTkA5q+y1vbgNzl8dJK1AX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:1a:17:d2:b6:cc:0f:5c:3c:26:13:49:00:49:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11193f8e898eb6fbd12c53df7dad021543eefc6e
Validity
Not Before: Sep 21 15:01:02 2026 GMT
Not After : Sep 22 15:01:02 2026 GMT
Subject: CN=dff5923861f78aa290a68e4bafc1403d05de6b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:77:a8:10:fa:21:7c:c0:09:17:b9:c8:2d:0d:
0c:3a:c7:70:d4:1f:79:36:da:9a:59:fb:05:ae:64:
05:1d:dc:07:a0:48:e0:3e:99:5c:68:33:59:68:c8:
f8:b1:0b:99:9f:2f:7d:19:9c:a4:5f:26:c3:6f:9c:
77:77:a7:19:a4:93:2a:89:88:80:50:35:b7:1a:31:
83:9b:1e:2b:bf:b4:bb:fc:a0:66:21:2b:92:a4:7c:
e7:7a:d0:58:5c:43:b1:c7:be:54:26:82:84:76:83:
97:6d:5d:50:d8:39:bc:d1:b4:38:d6:88:b8:63:e5:
0a:8c:1e:1a:18:6d:5b:c8:d3:5f:e3:cc:07:53:e2:
f9:20:31:85:9e:ea:d7:35:66:ae:99:5f:ae:3d:2d:
19:5a:73:2d:50:d5:1f:ea:7d:38:f2:58:d6:13:31:
59:9f:e6:20:39:86:bc:0a:8c:5d:aa:1f:b3:4b:77:
13:b0:71:f9:e5:86:01:cb:89:0f:fc:c7:8f:30:71:
29:39:35:73:93:28:0e:cf:7a:c1:b4:31:10:05:e2:
28:d6:f6:43:5c:b7:e6:20:45:7f:3b:9a:91:5d:43:
a1:09:7a:68:6a:58:fa:48:62:09:77:83:2a:78:23:
77:01:c0:4c:16:cb:c1:56:ba:c3:91:d4:cc:08:c4:
c5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F5:92:38:61:F7:8A:A2:90:A6:8E:4B:AF:C1:40:3D:05:DE:6B:4F
X509v3 Authority Key Identifier:
keyid:11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c9:e4:02:ef:80:36:6d:92:45:4f:8a:a3:de:6f:33:e2:9a:
51:b7:30:5e:da:de:ae:26:27:fc:f7:f7:b5:93:1f:46:f1:6b:
e7:19:e5:5d:9f:98:5f:22:3b:7e:f8:dc:2d:9c:06:eb:f3:cc:
2a:ae:87:b6:12:7f:07:8d:fd:96:00:61:ca:34:a9:6e:f7:37:
95:55:41:52:9c:ae:4a:06:3d:9b:eb:c0:3c:30:15:c3:a0:df:
f7:d0:58:4a:69:fe:cc:0a:4f:5c:8f:7f:86:8e:86:6f:5b:1f:
6f:0c:66:71:62:a6:05:63:f8:4c:3d:24:07:97:1c:82:38:16:
56:c3:27:80:20:10:7a:d5:3f:fc:d5:de:05:27:91:ff:bf:6b:
63:61:de:71:e1:2b:ad:ac:d8:39:81:be:01:89:1e:f6:62:d5:
18:02:86:24:55:1e:dc:45:1c:5d:af:a0:94:50:58:de:b6:44:
c3:7f:ac:62:39:cf:50:cc:6b:56:df:3a:d9:70:c2:9b:6e:99:
0b:8e:fa:95:be:f8:2b:22:16:1a:6d:1e:7a:8f:46:ad:f5:82:
14:3a:9a:9a:89:47:a6:d5:f9:f1:5c:e5:0c:b9:1a:7d:59:6d:
cb:25:ad:11:6a:20:6e:3e:e0:bc:90:05:a2:a9:1d:7a:80:de:
59:e8:b1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:17:27 2026 by rpki-client