Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft
File: erqgtAKPBzwFZKZYtPuIhsvI0-s.mft (raw, json)
Hash identifier: +/Ei6GWw/3O75eQpoL3xTPX/pDEVSx9VErc8K2ueXco=
Subject key identifier: C7:E1:5A:EC:0F:4C:CB:8F:A9:C6:93:51:55:13:52:A4:9C:85:E8:98
Authority key identifier: 7A:BA:A0:B4:02:8F:07:3C:05:64:A6:58:B4:FB:88:86:CB:C8:D3:EB
Certificate issuer: /CN=7abaa0b4028f073c0564a658b4fb8886cbc8d3eb
Certificate serial: 019CAC46993BC71AA505DABF997B09D886C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft
Manifest number: 0425
Signing time: Mon 02 Mar 2026 02:00:33 +0000
Manifest this update: Mon 02 Mar 2026 02:00:33 +0000
Manifest next update: Tue 03 Mar 2026 02:00:33 +0000
Files and hashes: 1: 5kkE3XtE9ZnSspR1OcwpVp0TyV8.roa (hash: n0us7CHhoP1rKb4vN6/gR6gcwVv7Il8CmXn18T2tiXo=)
2: erqgtAKPBzwFZKZYtPuIhsvI0-s.crl (hash: G7JSs+TWx7C4UkNK3hLzeQdg+kDRTStWA5dV221cngo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:99:3b:c7:1a:a5:05:da:bf:99:7b:09:d8:86:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abaa0b4028f073c0564a658b4fb8886cbc8d3eb
Validity
Not Before: Mar 2 02:00:33 2026 GMT
Not After : Mar 3 02:00:33 2026 GMT
Subject: CN=c7e15aec0f4ccb8fa9c69351551352a49c85e898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:27:e6:50:66:97:8b:67:35:d1:76:db:83:9c:
d8:ff:c1:0e:e6:b4:80:d5:d8:70:e1:a6:1d:78:a1:
32:7b:9c:6f:df:52:05:78:02:b4:03:b3:50:d7:b2:
07:2a:2a:28:e5:d1:8c:e4:05:b1:5a:aa:74:53:a7:
58:09:06:b2:77:85:25:c2:63:8a:7d:60:5f:7f:8f:
93:3a:6b:66:17:c7:09:aa:97:a2:e6:13:76:f1:f0:
9b:37:85:74:a4:fa:66:79:96:dc:85:f6:c5:f1:ba:
79:c5:7b:1d:3a:f7:78:5f:8b:04:3f:eb:68:6b:68:
6e:9f:3a:68:2e:24:9e:c8:57:a1:30:92:e7:13:6f:
91:89:0e:81:44:27:27:8f:94:9a:f7:58:4c:ad:da:
0d:2a:98:da:87:96:13:3a:e0:76:69:a4:02:5f:fd:
00:5a:b5:d4:01:fc:2f:78:e5:46:fc:b6:74:de:4d:
f4:ef:ac:98:4e:47:77:81:4d:eb:ed:df:e8:cf:60:
c2:b1:1d:28:fa:63:09:3a:c9:e9:2d:c4:98:7d:63:
94:07:d1:47:e9:07:eb:cf:b2:08:69:58:53:48:c2:
6b:f3:2c:c0:bc:36:1e:48:10:80:ca:75:2f:5a:db:
98:af:51:07:93:44:ba:78:2a:3d:9d:99:2b:16:b0:
c1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E1:5A:EC:0F:4C:CB:8F:A9:C6:93:51:55:13:52:A4:9C:85:E8:98
X509v3 Authority Key Identifier:
keyid:7A:BA:A0:B4:02:8F:07:3C:05:64:A6:58:B4:FB:88:86:CB:C8:D3:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:3e:fb:0d:6e:82:5f:6a:3a:7e:22:67:1b:41:ef:2d:db:f5:
87:c1:f3:61:ec:4a:bb:79:39:91:90:63:b0:8d:c4:a1:fb:eb:
85:fc:5b:c8:d4:44:b7:c0:ce:dc:f5:95:77:d0:57:d2:b8:36:
50:a0:f3:9f:c3:8c:11:4e:f9:b2:e9:76:d6:57:8e:65:b5:1f:
7b:6f:de:16:5d:ea:f3:2c:03:a4:03:21:91:4d:33:1d:70:54:
39:f5:6e:fb:01:c0:63:25:17:cc:50:c3:81:9f:76:cc:26:26:
e2:8b:65:3a:8d:23:ba:91:75:8e:57:70:88:3c:af:24:dc:ce:
37:f3:3d:64:94:b6:0f:5c:72:f7:ed:3d:24:b1:6f:e3:9e:04:
8c:73:95:71:98:da:aa:68:fb:06:90:71:9f:c2:ae:c3:50:c9:
49:37:e0:7b:ad:38:2d:8f:1e:b1:36:78:43:8b:57:e5:b1:8f:
83:29:41:b2:67:eb:ab:81:f1:5c:76:0b:bd:26:1e:b6:31:fa:
7d:7f:09:1d:5e:29:9c:c8:41:d3:7e:85:1b:17:b9:e4:84:a2:
57:c6:15:82:67:58:f4:ff:56:e6:5c:66:3f:ae:15:e7:d5:e9:
a4:40:92:4f:94:b9:4e:ca:98:d5:49:59:a5:c9:30:29:8a:49:
28:dc:09:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:28:46 2026 by rpki-client