Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
File: eRmmrv08qPUPyPNKs9FHklbbnXg.mft (raw, json)
Hash identifier: 3kHfaVnlhLQe8t9ANondc8BOV53SFp/swXtGsIXeiD0=
Subject key identifier: E9:71:21:1F:39:BB:25:F8:28:59:CF:FB:B8:B8:17:23:27:CF:13:4B
Authority key identifier: 79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78
Certificate issuer: /CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
Certificate serial: 019CAB6AF8FAA120ED36C8F73ED0CE62FA0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
Manifest number: 17D4
Signing time: Sun 01 Mar 2026 22:00:40 +0000
Manifest this update: Sun 01 Mar 2026 22:00:40 +0000
Manifest next update: Mon 02 Mar 2026 22:00:40 +0000
Files and hashes: 1: eRmmrv08qPUPyPNKs9FHklbbnXg.crl (hash: cjpFV5HKd2JMlftWIeflTejMCFB5AXjypoJjY1CegGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:f8:fa:a1:20:ed:36:c8:f7:3e:d0:ce:62:fa:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
Validity
Not Before: Mar 1 22:00:40 2026 GMT
Not After : Mar 2 22:00:40 2026 GMT
Subject: CN=e971211f39bb25f82859cffbb8b8172327cf134b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a9:58:aa:5c:9f:83:ec:1a:f8:58:fb:28:12:
43:9e:8b:67:27:3b:88:e4:20:79:10:9c:3c:bb:28:
cc:91:11:72:8e:c9:1b:13:9e:a5:a8:bb:d3:37:8e:
89:8c:0f:4f:b2:1b:4c:5d:e6:6a:53:19:c8:84:18:
55:9c:8a:55:a4:34:c1:a6:08:35:83:4d:3f:6c:57:
2e:06:99:6f:f5:ac:2e:79:f1:c7:27:72:e3:3d:27:
30:96:e0:5c:9b:83:b6:50:32:73:b2:95:48:d5:80:
5d:cd:1b:34:c1:36:7a:ec:08:ab:91:b3:eb:1d:fe:
ce:12:e6:b9:e6:2b:e1:21:1c:57:ba:b9:e6:92:3c:
f1:00:5e:ef:04:e1:41:38:4d:e9:36:7f:66:29:cb:
42:8a:7d:73:d1:de:13:1b:5b:25:56:7f:f2:02:ea:
e5:c5:58:5a:4d:02:12:2c:b3:c4:28:f8:00:df:51:
41:dc:72:3a:88:e0:df:7e:d8:34:ff:74:4b:33:c3:
6c:fa:12:73:ed:f5:73:6c:2b:1d:32:e9:e2:ca:e8:
15:00:35:3f:d2:f5:53:54:53:07:aa:41:1c:bd:90:
ec:e6:c8:19:4b:53:dc:ec:74:8c:e6:94:73:e7:2c:
74:db:9a:55:07:0e:4a:da:fe:de:4a:fb:bd:28:08:
b2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:71:21:1F:39:BB:25:F8:28:59:CF:FB:B8:B8:17:23:27:CF:13:4B
X509v3 Authority Key Identifier:
keyid:79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:40:ae:72:f3:ba:46:df:7b:8d:c5:2b:0f:8a:11:d0:0d:18:
b4:cc:10:d7:49:22:64:be:43:06:cc:c1:a3:3f:93:04:42:4f:
f0:0a:0b:ee:99:39:69:6a:79:2f:21:68:01:c8:0e:e6:7d:15:
5a:4b:76:6e:64:76:ea:e5:5b:81:58:62:e8:b4:27:69:34:7f:
de:18:0d:34:ef:e4:22:99:1b:4f:c2:e7:d2:68:72:97:c8:e9:
31:27:45:ed:d8:72:d8:46:ad:37:64:8e:c3:e0:9e:c6:76:e2:
80:61:8e:da:f5:a9:80:82:86:9a:45:bd:17:81:0f:49:7e:93:
44:2a:81:9d:a5:0c:62:88:3e:99:5b:ad:49:b8:ac:dc:65:06:
c3:6f:8a:0d:af:b3:0f:e3:a7:fa:74:60:e7:38:80:c6:79:26:
18:23:c7:a5:2c:1e:b5:6a:4f:d3:f8:a5:32:b7:fc:bd:22:50:
07:7f:fd:e3:50:63:c6:48:28:d9:14:d0:bc:04:86:8a:28:07:
07:ca:b4:8a:0a:c5:85:61:9d:b5:25:34:06:24:88:fe:5f:d1:
7d:24:81:d2:b1:90:77:40:25:2b:01:34:59:77:ca:3b:b0:ca:
cd:79:99:4c:9b:19:4d:6d:a6:7b:84:57:6d:dc:1d:0f:62:83:
b1:d1:d1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:23 2026 by rpki-client