Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
File: ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft (raw, json)
Hash identifier: kiHySd9LvhV0U/xnvl9ChA0gqndP+lVrUI3FvKz7+a0=
Subject key identifier: D4:A8:1F:B2:35:BD:56:56:7B:4B:56:2D:83:30:2F:F6:9E:80:BA:D8
Authority key identifier: 12:B3:00:8E:DB:7C:C9:D6:1D:AF:65:F0:02:26:88:AC:73:25:F0:3A
Certificate issuer: /CN=12b3008edb7cc9d61daf65f0022688ac7325f03a
Certificate serial: 019DA48A98F9209CA037979CB23364589CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
Manifest number: 0C4C
Signing time: Sun 19 Apr 2026 07:00:39 +0000
Manifest this update: Sun 19 Apr 2026 07:00:39 +0000
Manifest next update: Mon 20 Apr 2026 07:00:39 +0000
Files and hashes: 1: ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl (hash: Z0Fxr9O4vATx029Bvje04TG+rf5bdUNVc7cxdMY63pA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:98:f9:20:9c:a0:37:97:9c:b2:33:64:58:9c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b3008edb7cc9d61daf65f0022688ac7325f03a
Validity
Not Before: Apr 19 07:00:39 2026 GMT
Not After : Apr 20 07:00:39 2026 GMT
Subject: CN=d4a81fb235bd56567b4b562d83302ff69e80bad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fb:f4:63:e5:98:e8:ba:06:11:97:07:4a:aa:
3c:dc:cd:45:61:c0:bf:3c:c9:76:a6:d1:a3:13:47:
ec:54:84:3f:00:95:d4:55:eb:fa:32:ee:dc:d2:18:
45:9c:30:b9:32:62:e7:3d:85:e1:f7:b2:17:48:2b:
c4:ec:bc:d5:54:41:53:b6:c9:e6:57:a9:56:f1:93:
d8:cb:c4:1d:94:f2:ff:45:66:c6:24:a2:57:0c:0d:
36:c8:62:50:d4:6d:5e:63:22:81:c4:3c:92:d1:44:
01:68:2d:1b:e5:a1:7a:71:49:77:1f:0f:f5:4f:06:
b7:a5:e0:d7:a6:c5:a3:ef:81:43:8c:43:5a:f8:b6:
a6:8f:f9:7a:78:01:6f:db:67:db:13:43:c1:e0:a5:
9f:a9:93:25:e4:eb:4b:32:41:a1:98:0c:74:cd:32:
cf:02:8d:a1:f6:fb:e3:05:d9:31:fb:ae:d5:b4:26:
29:1c:ab:80:f0:b7:58:7d:62:8f:92:3f:d3:6a:2e:
d7:d6:1c:7c:9b:5f:39:9b:c9:ad:38:be:db:ca:37:
8c:42:22:ce:ea:1c:02:a4:c0:0f:20:b6:ff:85:43:
d7:28:e0:26:1d:9e:7a:f5:04:bb:29:63:48:fa:3b:
b7:ee:d7:af:41:06:76:a8:06:e8:12:6c:a2:aa:94:
c7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A8:1F:B2:35:BD:56:56:7B:4B:56:2D:83:30:2F:F6:9E:80:BA:D8
X509v3 Authority Key Identifier:
keyid:12:B3:00:8E:DB:7C:C9:D6:1D:AF:65:F0:02:26:88:AC:73:25:F0:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d6:40:76:b3:c8:c9:36:21:7b:23:e9:8c:b8:a8:59:97:81:
88:78:9f:43:17:52:ac:93:af:9f:64:ee:6b:e4:83:ab:39:2c:
72:4b:dc:72:95:96:f1:76:30:ac:59:51:2f:9a:01:35:ae:cb:
b2:81:c4:80:6d:72:82:29:74:3b:80:93:63:23:a5:57:40:9f:
e7:29:74:fe:dd:71:72:f0:3b:6d:3a:3f:4f:0c:78:63:a6:d4:
1b:75:91:65:4a:ef:9c:f1:88:c8:16:3b:50:2f:08:3c:29:d3:
c8:28:3f:be:3e:6e:bc:34:d3:75:ba:3f:d5:08:ea:08:ad:98:
b4:60:dd:70:02:0c:62:03:db:79:12:4f:99:2d:5d:84:a3:b9:
e8:b8:6e:0a:8e:5a:ce:02:16:bd:e8:6e:5c:e3:69:51:8d:fb:
68:07:ea:92:6e:93:f4:9f:be:be:41:e3:77:f8:1a:19:3c:e0:
c0:f4:9d:5e:38:ee:ff:f0:84:ea:86:76:43:d6:1c:b9:72:48:
13:59:36:7f:54:e5:7a:a8:4e:26:82:4b:71:7c:c2:8c:00:1f:
31:22:5a:bf:c6:2d:75:d2:4f:3e:60:05:2c:18:ff:4b:2c:d1:
96:e8:6f:52:e4:45:c1:3b:b1:b1:0c:3a:52:91:2f:c2:18:8a:
0e:98:32:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:05:36 2026 by rpki-client