Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
File: ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft (raw, json)
Hash identifier: jSPNQO3hhv9XZxBzWruz9QOPhGO5OBP1CMwIghpVKuA=
Subject key identifier: CF:E4:20:32:00:DC:54:A1:F5:F0:01:D3:C0:A8:CA:78:87:59:30:26
Authority key identifier: 11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
Certificate issuer: /CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Certificate serial: 019D99624DBDC26E659D86395D1F682CB636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 03:00:49 +0000
Manifest this update: Fri 17 Apr 2026 03:00:49 +0000
Manifest next update: Sat 18 Apr 2026 03:00:49 +0000
Files and hashes: 1: ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl (hash: YUMhx7XNreThoAH210i8DUyW0Z5P1/Ik0zHXo684ql8=)
2: h4hw0o1BGCO1IauXuWvv1pBVH-c.roa (hash: 5IBae8jcl3eOYKt23qLWVmfDo0rcP1nvWM8WUvRm6eI=)
3: lSj7G66n_Zbfp5QixdzpYlLB0i4.roa (hash: flGRTyUdnWXMFICIWjCtri2/GPHC/mh1hngklA/vSAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:4d:bd:c2:6e:65:9d:86:39:5d:1f:68:2c:b6:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Validity
Not Before: Apr 17 03:00:49 2026 GMT
Not After : Apr 18 03:00:49 2026 GMT
Subject: CN=cfe4203200dc54a1f5f001d3c0a8ca7887593026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:23:ba:aa:cb:c0:6c:bb:af:48:99:a3:ad:d6:
dc:28:96:4e:21:58:4a:97:87:6a:a8:93:c5:2d:93:
4b:ca:70:a9:30:3c:08:70:90:5b:63:a9:b9:cd:4b:
cb:8b:1f:a3:f5:f8:9f:83:6f:1b:3f:91:70:14:15:
11:31:d6:c6:62:53:cd:12:6f:fa:27:34:84:2e:22:
b4:30:41:c3:31:d8:38:c7:05:df:3a:17:02:78:b6:
96:a0:dd:da:ff:87:ea:61:27:bf:76:26:99:86:90:
c1:11:72:2e:ed:b7:d4:49:36:3c:a1:ac:a7:e0:4e:
0d:a1:1d:a9:a0:7a:01:05:f0:1f:96:a9:a9:d9:97:
4a:49:ef:27:cd:17:46:9f:74:a9:a4:0e:3a:8b:3a:
c0:31:c0:a5:dd:4e:46:63:6d:69:e8:93:c7:84:9b:
e3:2b:22:95:c1:4e:f8:2d:b8:fa:58:9a:c9:e2:55:
45:e9:98:80:bd:9c:0c:4f:6b:74:0f:ff:0b:5c:15:
e5:19:12:0c:c0:d3:25:6c:7a:8e:bf:d8:31:6d:76:
e2:d5:b6:8b:f6:61:2d:e2:7b:39:28:14:e3:7e:1a:
f2:04:b7:07:44:d3:9a:54:cd:52:15:d3:26:b2:2f:
e6:c0:01:31:df:1e:57:12:99:70:96:b1:e3:81:47:
e8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E4:20:32:00:DC:54:A1:F5:F0:01:D3:C0:A8:CA:78:87:59:30:26
X509v3 Authority Key Identifier:
keyid:11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b2:15:9b:5f:16:7b:e6:08:52:66:0b:a7:f8:19:c1:10:dd:
83:88:a3:72:fe:34:d9:c6:36:8e:10:d2:ab:3c:d3:79:bc:a2:
01:7d:80:aa:fd:55:3d:a5:b9:64:65:bf:77:54:03:b9:9b:93:
5e:48:5c:f9:d0:fa:93:e3:4b:3e:c5:2f:26:59:cc:11:bc:ee:
21:23:c0:33:e5:f4:cb:32:d9:49:6b:62:e6:f9:0b:d8:f3:c3:
92:cb:a3:a5:3e:2a:c4:4f:93:55:cf:18:c0:66:dd:09:71:f0:
a0:c0:59:2b:ef:1b:ac:fe:aa:09:48:f2:a1:86:3d:6e:db:20:
22:20:32:b1:56:00:b4:4b:c7:66:5d:57:56:aa:70:e5:6e:80:
da:80:0c:d4:a9:95:81:54:3c:e9:00:50:a4:65:f3:ff:07:91:
d6:bb:81:50:1f:c7:ef:56:5f:c3:fc:ba:03:4a:f3:ac:93:e9:
d5:22:15:1a:bd:1b:7a:3a:1c:eb:76:d3:92:1e:37:7d:a1:fc:
6d:dc:22:4f:f2:5c:e5:df:03:25:ee:35:04:c1:f6:b9:1a:75:
78:c1:84:17:90:9f:66:b7:2a:b0:e7:2c:97:8b:ce:f4:38:f0:
c7:64:e5:ed:6e:fa:59:85:ea:70:e8:10:d5:42:e8:36:a1:9a:
e5:d8:6c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:37:55 2026 by rpki-client