Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
File: er4RhD2-gDQLJGD8Fg7GubiPIio.mft (raw, json)
Hash identifier: uImIT2pdejRpYX2DBGneXkmNzhqzrRqYhQosESSV/Qs=
Subject key identifier: F4:10:0F:D1:18:F6:85:44:D0:B0:A3:05:BE:8E:80:C4:A0:25:9D:1E
Authority key identifier: 7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
Certificate issuer: /CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Certificate serial: 019D9850AE744C3607B4130583FFB576FE93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
Manifest number: 0C51
Signing time: Thu 16 Apr 2026 22:01:57 +0000
Manifest this update: Thu 16 Apr 2026 22:01:57 +0000
Manifest next update: Fri 17 Apr 2026 22:01:57 +0000
Files and hashes: 1: er4RhD2-gDQLJGD8Fg7GubiPIio.crl (hash: x+gr33YzKhvpia6BN9gbxJtWODQDDnyypzEJ/RsLzwc=)
2: o7A96UnzoRTZUSuVj7u0eveSlFA.roa (hash: FF0zn80ZmtefbQSduZMh5HE52BLjPHqOv0VeweTxfaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:ae:74:4c:36:07:b4:13:05:83:ff:b5:76:fe:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Validity
Not Before: Apr 16 22:01:57 2026 GMT
Not After : Apr 17 22:01:57 2026 GMT
Subject: CN=f4100fd118f68544d0b0a305be8e80c4a0259d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f9:df:3f:1f:9a:d8:c3:ce:08:5e:b0:aa:95:
53:43:46:a4:cc:73:dd:f1:e3:47:dd:6f:3c:74:f4:
eb:9d:ca:e9:c5:06:6c:a1:fe:52:bc:c3:09:68:53:
61:f7:31:f0:37:e9:be:a9:b7:7f:74:3f:b4:b1:d6:
8d:8c:2c:b3:fe:01:74:50:41:b1:4e:af:db:f0:42:
30:37:49:66:1f:c1:cf:0e:75:f2:36:30:77:5d:96:
a0:ac:0a:5b:c4:cc:00:14:3e:e2:4f:f9:62:b6:3d:
ae:a6:67:e7:90:f6:29:3e:66:da:ac:79:78:2b:60:
26:3d:df:49:6b:b2:22:76:00:64:db:78:c6:b2:28:
74:de:04:5e:45:ad:a0:81:e0:8b:91:da:4f:40:04:
52:2a:b4:8d:b2:47:ed:dc:f1:38:dc:3c:d7:3a:07:
d6:1f:7e:a0:4c:e9:d5:27:82:23:db:96:67:77:1e:
b4:94:c7:e9:31:ca:10:23:76:f2:d3:8e:d5:02:ff:
fd:b6:69:39:c1:2e:39:46:ce:40:3a:98:ee:70:57:
b1:7e:65:01:2c:5c:d2:4b:ff:54:25:9a:13:c8:c6:
1b:23:a9:9a:f8:88:a0:eb:a4:65:c0:97:d1:25:02:
2f:69:7c:25:e6:94:90:67:f5:21:7f:45:8c:f9:e9:
fb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:10:0F:D1:18:F6:85:44:D0:B0:A3:05:BE:8E:80:C4:A0:25:9D:1E
X509v3 Authority Key Identifier:
keyid:7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:db:e9:c0:96:ec:82:b1:fd:a0:8e:c9:aa:1e:52:4b:79:f2:
62:8e:f2:ab:15:da:23:01:66:99:17:15:7f:23:54:e1:c2:99:
01:a0:57:49:ef:93:2b:06:5d:a3:66:02:a1:de:93:56:12:e0:
31:3d:0e:4d:0c:ad:bd:38:1c:95:3b:e2:53:62:3e:9a:f1:f1:
6b:62:0e:37:a2:98:ee:c7:a7:1e:25:cf:ae:08:77:09:38:3f:
11:aa:7f:c6:96:31:a7:c4:c9:87:f9:19:6d:4b:2f:eb:27:42:
a6:69:99:72:72:67:64:79:ac:2d:ae:df:6c:e9:86:07:e0:4e:
9a:75:2b:6c:a6:36:0f:82:58:1d:0b:5f:54:d4:fd:77:bc:24:
8d:fb:40:65:1d:c0:ed:81:b9:bb:96:de:f5:36:42:30:4d:b2:
e7:70:cf:be:9c:bf:e1:49:bf:50:ab:38:53:52:e3:60:10:97:
6a:e8:25:04:72:c3:05:21:2f:d2:b4:ef:ab:74:81:97:d4:35:
6f:c8:a9:a2:29:54:22:9d:ce:4c:7d:ee:76:36:e6:4a:b4:a1:
8e:d2:2c:19:b3:14:95:44:ae:ae:a0:d5:16:b9:2f:35:c6:2e:
f1:58:2f:3f:92:e9:b7:83:49:a9:23:7d:fa:26:b3:f8:de:2f:
6d:b2:46:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:26:59 2026 by rpki-client