Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
File: ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft (raw, json)
Hash identifier: Lxh8g1EoiLgvnMhqICAdFIi/QyfmksQ4OHkTuhLjJhQ=
Subject key identifier: 8B:40:CD:64:2D:55:24:9D:C6:DE:F3:84:AD:D4:F3:66:85:8C:37:A2
Authority key identifier: 12:B3:00:8E:DB:7C:C9:D6:1D:AF:65:F0:02:26:88:AC:73:25:F0:3A
Certificate issuer: /CN=12b3008edb7cc9d61daf65f0022688ac7325f03a
Certificate serial: 019CAB6AD25E4FA2BF63EC144F82694E1C89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
Manifest number: 0BCB
Signing time: Sun 01 Mar 2026 22:00:30 +0000
Manifest this update: Sun 01 Mar 2026 22:00:30 +0000
Manifest next update: Mon 02 Mar 2026 22:00:30 +0000
Files and hashes: 1: ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl (hash: 8J/1Dz+wjI0Nrz/xWlE+8brpo+Z9hLIpo1KkAK0sSvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:d2:5e:4f:a2:bf:63:ec:14:4f:82:69:4e:1c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b3008edb7cc9d61daf65f0022688ac7325f03a
Validity
Not Before: Mar 1 22:00:30 2026 GMT
Not After : Mar 2 22:00:30 2026 GMT
Subject: CN=8b40cd642d55249dc6def384add4f366858c37a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:30:e8:64:d8:95:00:2f:b2:9a:51:cb:ac:6e:
9c:20:a8:f3:af:88:21:5d:54:a7:b7:1f:75:ca:30:
7b:f8:83:b1:11:62:28:4b:bd:82:db:b9:e2:80:8e:
bf:01:65:c2:97:d8:e9:d2:09:9a:9e:24:ca:20:21:
a0:44:42:53:32:27:67:61:54:92:20:74:d7:76:75:
09:26:5c:35:f3:de:e0:6e:a4:6e:35:0b:7b:5c:19:
29:3c:6f:48:2b:59:88:99:d2:44:07:29:d5:e4:3f:
6c:d2:fa:73:96:ee:4a:b2:1c:4e:82:63:d3:56:a5:
80:e0:c8:98:07:63:df:83:7e:72:45:56:bc:81:f9:
56:da:db:ff:7a:d7:fe:c3:a5:06:52:60:c9:a0:ae:
90:f8:1a:9d:b0:ae:16:ed:fe:42:1a:8e:ae:17:4d:
a7:34:91:a5:cd:32:70:0e:d1:6f:96:3d:fd:8c:67:
e7:1c:10:04:8e:99:71:b3:65:e5:a5:75:4c:da:c4:
9b:db:ec:a9:11:d3:2e:8a:8e:84:a0:07:a0:d6:9c:
20:e0:5c:17:ee:f8:ab:f5:79:9f:03:da:04:3d:23:
2d:f8:15:60:38:3a:e2:95:1b:56:49:3b:f8:84:f3:
5f:1a:75:b8:54:ec:ee:a4:ad:a4:e2:df:c3:49:7b:
08:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:40:CD:64:2D:55:24:9D:C6:DE:F3:84:AD:D4:F3:66:85:8C:37:A2
X509v3 Authority Key Identifier:
keyid:12:B3:00:8E:DB:7C:C9:D6:1D:AF:65:F0:02:26:88:AC:73:25:F0:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:6a:43:5b:ec:00:f6:1c:e5:1d:28:7d:9b:85:95:ea:cc:23:
af:0c:d8:f0:b7:9e:04:8f:d6:c2:e2:16:07:65:74:e8:f8:79:
2e:5e:85:2c:1d:6e:db:11:96:96:ce:8a:cb:09:69:ca:26:ac:
11:71:f1:7a:37:0c:0b:e0:ef:ba:6e:f5:80:74:da:cd:e5:67:
a6:58:18:4a:84:92:4f:23:2a:28:7b:95:21:13:c2:74:40:e5:
60:4e:a6:6d:57:76:12:9f:c6:49:18:6c:68:be:6c:6d:8a:fd:
bd:96:42:28:75:7a:00:3d:2f:7b:28:a2:bb:32:92:fd:e2:19:
68:ab:b1:5c:da:d8:d3:c1:85:a9:59:44:1b:63:48:84:d8:a3:
cf:89:24:fc:fa:2d:54:cf:cb:0e:ef:31:c2:b4:e5:bc:25:c8:
a6:bc:48:df:98:e7:d4:77:16:ef:87:30:83:a8:28:86:96:80:
7d:91:e2:a6:a5:77:53:1f:fd:07:f1:97:99:f3:72:2b:ff:c3:
65:00:58:d0:c7:30:1f:f0:76:fc:da:56:fa:bc:ec:a5:d6:53:
2d:ab:aa:80:83:fd:fc:5d:14:27:db:82:52:4f:d7:67:4e:f5:
63:89:4f:2c:14:13:aa:92:06:c5:b2:42:9d:8b:6d:84:fb:ab:
40:f4:40:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyratJeT6K/Y+wUT4JpThyJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYjMwMDhlZGI3Y2M5ZDYxZGFmNjVmMDAyMjY4OGFjNzMy
NWYwM2EwHhcNMjYwMzAxMjIwMDMwWhcNMjYwMzAyMjIwMDMwWjAzMTEwLwYDVQQD
Eyg4YjQwY2Q2NDJkNTUyNDlkYzZkZWYzODRhZGQ0ZjM2Njg1OGMzN2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzDoZNiVAC+ymlHLrG6cIKjzr4gh
XVSntx91yjB7+IOxEWIoS72C27nigI6/AWXCl9jp0gmaniTKICGgREJTMidnYVSS
IHTXdnUJJlw1897gbqRuNQt7XBkpPG9IK1mImdJEBynV5D9s0vpzlu5KshxOgmPT
VqWA4MiYB2Pfg35yRVa8gflW2tv/etf+w6UGUmDJoK6Q+BqdsK4W7f5CGo6uF02n
NJGlzTJwDtFvlj39jGfnHBAEjplxs2XlpXVM2sSb2+ypEdMuio6EoAeg1pwg4FwX
7vir9XmfA9oEPSMt+BVgODrilRtWSTv4hPNfGnW4VOzupK2k4t/DSXsIUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItAzWQtVSSdxt7zhK3U82aFjDeiMB8GA1UdIwQY
MBaAFBKzAI7bfMnWHa9l8AImiKxzJfA6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXJNQWp0dDh5ZFlkcjJYd0FpYUlySE1sOERvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kMDg5M2EtMTUyNi00Yzc4LTlkODkt
MDhhY2RlMzJlNjY0LzEvRXJNQWp0dDh5ZFlkcjJYd0FpYUlySE1sOERvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kMDg5M2EtMTUyNi00Yzc4LTlkODktMDhhY2RlMzJlNjY0
LzEvRXJNQWp0dDh5ZFlkcjJYd0FpYUlySE1sOERvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2pDW+wA
9hzlHSh9m4WV6swjrwzY8LeeBI/WwuIWB2V06Ph5Ll6FLB1u2xGWls6Kywlpyias
EXHxejcMC+Dvum71gHTazeVnplgYSoSSTyMqKHuVIRPCdEDlYE6mbVd2Ep/GSRhs
aL5sbYr9vZZCKHV6AD0veyiiuzKS/eIZaKuxXNrY08GFqVlEG2NIhNijz4kk/Pot
VM/LDu8xwrTlvCXIprxI35jn1HcW74cwg6gohpaAfZHipqV3Ux/9B/GXmfNyK//D
ZQBY0McwH/B2/NpW+rzspdZTLauqgIP9/F0UJ9uCUk/XZ071Y4lPLBQTqpIGxbJC
nYtthPurQPRAaA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:07 2026 by rpki-client