Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
File: ERhPtlA6dgZX-QJw4naj_LULjo8.mft (raw, json)
Hash identifier: YBfHMIOyYGfyeQJPJnXUbY+FdCZsCwvoEbCBLOMkZFQ=
Subject key identifier: 31:E2:BE:F6:57:E7:EB:38:EF:49:27:5D:8E:2F:B4:F2:E3:22:D0:1E
Authority key identifier: 11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
Certificate issuer: /CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Certificate serial: 019CAA58A9D27C5D09362FED85420BDC0B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 17:01:03 +0000
Manifest this update: Sun 01 Mar 2026 17:01:03 +0000
Manifest next update: Mon 02 Mar 2026 17:01:03 +0000
Files and hashes: 1: ERhPtlA6dgZX-QJw4naj_LULjo8.crl (hash: BMZ6BebcV3/inzk3gQTbOZo3qtyZVHBbDQI5iFN5ZHo=)
2: I9hNFsiUppOM9VZIcAfH4qbXw_k.roa (hash: W4bc2pkEjBkLLPhivhIIPW+Vl4uMQLKBx8OjNwjL98A=)
3: lypKNyumbp3Rx5Ca8OfilFGC6co.roa (hash: 1pqIQQrSkAL4LQAupUembuigh5NslsCnzhntmGy1wNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:a9:d2:7c:5d:09:36:2f:ed:85:42:0b:dc:0b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Validity
Not Before: Mar 1 17:01:03 2026 GMT
Not After : Mar 2 17:01:03 2026 GMT
Subject: CN=31e2bef657e7eb38ef49275d8e2fb4f2e322d01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:4f:8a:c0:cf:6f:a1:d1:c6:4d:cb:01:83:
b8:60:2d:2b:ac:37:b7:1f:f0:c6:08:8f:a6:a5:68:
bd:5c:36:65:85:17:c6:d4:9b:8d:bc:14:e9:cc:0e:
ea:d0:0d:8a:5e:33:a4:33:be:71:4f:ce:9b:6b:c5:
69:37:f6:64:33:7d:c0:5d:01:b8:19:66:20:66:d0:
1f:d9:db:7c:b3:d9:ca:84:b0:6d:f9:b7:da:89:d0:
83:70:9d:3e:52:2a:20:d2:eb:1e:59:dd:03:5f:2a:
29:0b:52:e9:7f:94:1f:0a:27:77:42:0f:e6:ed:cd:
24:8b:b3:0f:0c:5c:7f:37:67:bb:45:c2:e8:e9:45:
70:c8:50:d6:81:03:c5:2b:78:21:a8:25:aa:03:bf:
17:4d:2d:27:75:0b:ab:2f:81:67:11:48:88:dd:ee:
85:33:dd:45:f1:91:a4:8b:20:31:32:55:0d:0d:00:
49:b2:02:63:ac:f6:bf:0f:ef:56:00:3f:c1:60:20:
48:95:35:0b:50:94:43:0b:ba:c9:40:10:1b:e6:e0:
3c:df:3f:3b:6c:d9:22:45:d6:1d:9b:70:4d:e4:80:
7b:99:2e:05:15:4a:1b:6c:fd:aa:a1:c9:c9:ac:41:
25:88:33:72:3a:91:10:d8:57:ff:a4:37:20:74:97:
31:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E2:BE:F6:57:E7:EB:38:EF:49:27:5D:8E:2F:B4:F2:E3:22:D0:1E
X509v3 Authority Key Identifier:
keyid:11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:34:d3:51:fb:4f:c4:25:ee:71:99:4a:fd:11:3b:bf:d1:e0:
de:13:30:7f:38:a1:36:3b:86:a4:6d:a4:87:51:14:f8:da:06:
68:46:9d:4e:24:40:22:f2:50:2e:12:da:e1:20:e8:41:24:0b:
c1:1a:b8:f9:f4:ea:ae:94:81:9f:89:e5:39:3d:52:76:a9:ba:
6f:14:90:5c:d6:2b:37:9a:af:31:3c:d1:19:f9:4a:76:6f:d3:
a7:ca:42:37:ab:27:05:68:8f:7e:74:7d:4f:80:00:80:b9:0a:
fb:4c:fb:43:ef:d5:51:73:4c:ca:b2:e6:90:61:4d:00:67:f0:
1a:34:03:ce:87:df:f0:fd:8b:e2:8f:86:ae:c5:25:b8:61:16:
01:e3:b4:38:f0:b4:8e:dc:85:e3:c3:1f:95:88:1c:64:79:78:
b5:d8:ed:fd:50:b2:8d:3d:e1:23:20:bd:1d:e8:6a:e6:f3:38:
d8:45:99:c2:ae:14:91:e1:c1:d0:78:a0:aa:ba:82:24:db:96:
74:6d:08:cd:c2:de:f9:2e:7d:af:59:de:41:67:ed:78:7c:69:
ef:de:17:2d:21:c6:06:ee:4a:e1:3a:79:cc:c1:1b:f4:5b:e7:
8f:16:5c:ae:23:2e:16:fc:95:b0:c5:91:61:9c:9f:76:c2:37:
3e:de:46:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:31 2026 by rpki-client