Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
File: er4RhD2-gDQLJGD8Fg7GubiPIio.mft (raw, json)
Hash identifier: 6Osty73lOLA47eBjK2+I9DiWzaz1YQtFhKhSBTtCH9I=
Subject key identifier: 01:80:91:4B:85:E1:0A:39:0A:C9:BC:30:7E:B7:0D:AB:16:D0:16:E1
Authority key identifier: 7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
Certificate issuer: /CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Certificate serial: 019CACB4C13CB32916A5B7276C52B9B3E14E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
Manifest number: 0BD7
Signing time: Mon 02 Mar 2026 04:00:52 +0000
Manifest this update: Mon 02 Mar 2026 04:00:52 +0000
Manifest next update: Tue 03 Mar 2026 04:00:52 +0000
Files and hashes: 1: er4RhD2-gDQLJGD8Fg7GubiPIio.crl (hash: TrEVHcfyLTsvfKag34p1qvZ1RlsZtUz8Qa7dxwfKy9A=)
2: o7A96UnzoRTZUSuVj7u0eveSlFA.roa (hash: FF0zn80ZmtefbQSduZMh5HE52BLjPHqOv0VeweTxfaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:c1:3c:b3:29:16:a5:b7:27:6c:52:b9:b3:e1:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Validity
Not Before: Mar 2 04:00:52 2026 GMT
Not After : Mar 3 04:00:52 2026 GMT
Subject: CN=0180914b85e10a390ac9bc307eb70dab16d016e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d0:e9:e1:2a:94:8d:82:61:c8:88:9c:3a:60:
53:56:f6:6f:e5:ef:e6:ec:bf:1a:4f:fa:55:d7:6b:
48:c6:53:7f:da:f8:7c:53:13:7e:3c:b8:3b:de:ce:
ee:c5:cb:20:db:8a:b1:8b:c4:12:0e:e2:9c:56:32:
7c:f4:f5:e0:bc:26:11:60:b5:18:99:55:d7:44:5f:
3c:a2:49:d8:59:c8:d8:cd:76:1b:ba:78:e1:80:1e:
30:a8:1a:45:47:4c:65:a3:75:c9:91:83:83:60:e8:
33:71:03:d7:25:ab:a1:58:bf:72:c7:4c:40:7e:fe:
00:fc:26:e5:c8:7e:9d:61:f3:bb:91:31:ae:65:1d:
35:fd:6d:c1:99:50:6c:43:61:31:7b:bf:e4:1a:4b:
3a:2e:64:c6:36:ce:b6:fc:34:f4:01:0b:01:09:30:
c8:3f:d5:4c:08:b7:da:cb:9b:87:90:74:62:38:b3:
e0:ce:8f:14:df:17:ae:d8:17:24:3a:89:84:04:07:
fd:0c:23:ec:4f:e7:7e:42:0b:cd:9b:a0:c8:b3:f4:
fa:66:d8:2d:28:1f:58:f9:36:4c:0c:4f:bc:1f:6b:
f0:0b:e8:d4:fd:1a:77:35:8e:00:9a:e0:7e:2c:9f:
a2:49:ea:59:ea:c7:07:2a:c2:81:fb:dc:e8:69:3f:
98:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:80:91:4B:85:E1:0A:39:0A:C9:BC:30:7E:B7:0D:AB:16:D0:16:E1
X509v3 Authority Key Identifier:
keyid:7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:6c:42:1e:05:9e:9a:5d:0b:f5:1b:7f:f0:f4:9c:00:17:f0:
67:ce:d4:70:9e:d2:48:2a:7b:57:ad:f0:17:93:7a:94:35:a0:
01:f8:df:e4:cb:34:5f:6f:12:ae:1d:92:db:1c:73:46:1b:bd:
3b:7a:db:57:2f:8b:03:d4:1a:71:4e:43:0b:3e:e9:b0:a8:77:
06:47:f2:e1:40:f8:92:cf:cc:5d:53:ac:0a:30:d9:f1:5d:04:
2e:21:58:8e:7c:b2:5e:5f:18:b9:1a:d3:c2:da:50:6e:c3:f7:
c5:83:7c:9b:97:28:ec:ec:90:27:c2:05:f3:eb:11:51:61:72:
d2:75:e0:66:fb:ea:6f:18:8d:0c:9b:e1:8f:08:ee:90:0f:71:
3d:35:8a:b9:1a:3b:0c:98:ee:2d:c6:68:a4:11:cf:27:76:ff:
09:63:77:ae:b1:20:ca:13:e2:6a:af:72:4e:b4:6f:e4:0d:8f:
62:7b:0f:6e:f3:90:80:e5:94:f4:bd:11:41:7f:06:ba:7e:0d:
75:ee:31:97:3f:b9:79:c7:6c:d3:60:79:6f:0b:47:03:a8:ce:
36:18:2f:a7:14:16:e6:ad:92:8a:32:14:4b:7d:e2:03:b3:16:
f4:fb:19:c3:10:4f:08:04:40:16:3b:dc:5d:e3:9e:7f:7b:54:
dd:f6:31:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystME8sykWpbcnbFK5s+FOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYmUxMTg0M2RiZTgwMzQwYjI0NjBmYzE2MGVjNmI5Yjg4
ZjIyMmEwHhcNMjYwMzAyMDQwMDUyWhcNMjYwMzAzMDQwMDUyWjAzMTEwLwYDVQQD
EygwMTgwOTE0Yjg1ZTEwYTM5MGFjOWJjMzA3ZWI3MGRhYjE2ZDAxNmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9Dp4SqUjYJhyIicOmBTVvZv5e/m
7L8aT/pV12tIxlN/2vh8UxN+PLg73s7uxcsg24qxi8QSDuKcVjJ89PXgvCYRYLUY
mVXXRF88oknYWcjYzXYbunjhgB4wqBpFR0xlo3XJkYODYOgzcQPXJauhWL9yx0xA
fv4A/CblyH6dYfO7kTGuZR01/W3BmVBsQ2Exe7/kGks6LmTGNs62/DT0AQsBCTDI
P9VMCLfay5uHkHRiOLPgzo8U3xeu2BckOomEBAf9DCPsT+d+QgvNm6DIs/T6Ztgt
KB9Y+TZMDE+8H2vwC+jU/Rp3NY4AmuB+LJ+iSepZ6scHKsKB+9zoaT+YDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGAkUuF4Qo5Csm8MH63DasW0BbhMB8GA1UdIwQY
MBaAFHq+EYQ9voA0CyRg/BYOxrm4jyIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXI0UmhEMi1nRFFMSkdEOEZnN0d1YmlQSWlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82MjM1NjEtMDcxNS00Mjc3LWEwYmUt
MzQxMWM2ZmI0ZmNhLzEvZXI0UmhEMi1nRFFMSkdEOEZnN0d1YmlQSWlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82MjM1NjEtMDcxNS00Mjc3LWEwYmUtMzQxMWM2ZmI0ZmNh
LzEvZXI0UmhEMi1nRFFMSkdEOEZnN0d1YmlQSWlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABGxCHgWe
ml0L9Rt/8PScABfwZ87UcJ7SSCp7V63wF5N6lDWgAfjf5Ms0X28Srh2S2xxzRhu9
O3rbVy+LA9QacU5DCz7psKh3Bkfy4UD4ks/MXVOsCjDZ8V0ELiFYjnyyXl8YuRrT
wtpQbsP3xYN8m5co7OyQJ8IF8+sRUWFy0nXgZvvqbxiNDJvhjwjukA9xPTWKuRo7
DJjuLcZopBHPJ3b/CWN3rrEgyhPiaq9yTrRv5A2PYnsPbvOQgOWU9L0RQX8Gun4N
de4xlz+5ecds02B5bwtHA6jONhgvpxQW5q2SijIUS33iA7MW9PsZwxBPCARAFjvc
XeOef3tU3fYxrA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:40:02 2026 by rpki-client