Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
File: Elriz9MVwTEZNIRmWsrafAExY-w.mft (raw, json)
Hash identifier: MZjs1+qCRoa13L+93SYq3S9eCvQUxn7R7UVHV4V5WJs=
Subject key identifier: 14:89:CF:0B:A8:21:E3:52:F2:40:AC:83:85:BF:C2:83:EF:43:DD:60
Authority key identifier: 12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC
Certificate issuer: /CN=125ae2cfd315c131193484665acada7c013163ec
Certificate serial: 019DA3E66D243367961A25402DFA367D9CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
Manifest number: 18D0
Signing time: Sun 19 Apr 2026 04:01:20 +0000
Manifest this update: Sun 19 Apr 2026 04:01:20 +0000
Manifest next update: Mon 20 Apr 2026 04:01:20 +0000
Files and hashes: 1: Elriz9MVwTEZNIRmWsrafAExY-w.crl (hash: WVYuL46JV/oosUa3sgMIpmg3eYqsNFvqPZsxHCIpbRo=)
2: tzM4Lhas_5Err3uhIOugP7tZ2zA.roa (hash: O2meUFIJ8JO+/3JVTDSwDnZ6NU03UbjSV1N5GHCHgZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:6d:24:33:67:96:1a:25:40:2d:fa:36:7d:9c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=125ae2cfd315c131193484665acada7c013163ec
Validity
Not Before: Apr 19 04:01:20 2026 GMT
Not After : Apr 20 04:01:20 2026 GMT
Subject: CN=1489cf0ba821e352f240ac8385bfc283ef43dd60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7c:a2:63:02:64:76:03:7d:eb:a6:76:58:7e:
af:f5:9f:62:07:99:65:a9:b3:40:2a:38:1e:04:ee:
5c:92:bd:d7:f5:0c:10:ed:23:aa:35:b2:30:70:60:
01:7c:0b:5c:93:e8:96:c7:b5:79:9b:a8:cd:97:9f:
60:80:19:8d:5f:d3:4e:c5:74:09:41:de:c5:18:d0:
f8:81:ae:1b:d4:14:77:7d:e1:02:29:01:cb:3c:a0:
1f:1c:63:e7:db:84:ab:64:08:a3:2b:a1:03:e4:75:
ae:de:8c:e0:e7:92:40:af:fd:5f:52:98:53:b6:5a:
9a:01:ae:96:bf:08:8d:1c:53:26:b7:e6:b4:98:47:
f1:e0:b4:8e:f8:89:84:e8:4d:19:65:df:c3:cb:58:
5b:be:78:31:d9:0f:24:0a:ad:28:e0:c4:ab:c8:e8:
1b:b4:b3:db:71:16:c1:f3:49:d5:dd:3b:58:1c:bb:
7b:e7:dd:ce:e3:87:c9:87:2d:ae:d4:9f:06:bb:27:
f2:d5:26:73:bf:a8:18:d1:98:5d:bf:e2:63:48:f8:
6a:78:e3:db:27:ab:78:24:be:91:8d:a2:dd:d2:24:
ba:c4:f4:c4:54:72:1b:87:1d:f2:60:8e:a3:e2:1b:
4f:c2:b8:77:5b:3f:0a:ac:2c:2b:81:26:ec:77:42:
19:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:89:CF:0B:A8:21:E3:52:F2:40:AC:83:85:BF:C2:83:EF:43:DD:60
X509v3 Authority Key Identifier:
keyid:12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:cb:fc:d5:b4:e5:30:2d:8a:c7:c8:6b:a0:bb:86:ad:20:6f:
f4:45:0d:dc:6f:cd:bc:bd:77:88:f4:b8:50:b2:8a:52:97:98:
13:e8:32:43:1b:2b:0e:1f:35:84:95:86:68:c2:42:5b:4a:30:
f7:57:7e:72:b6:d9:94:37:74:1a:a5:ae:33:c9:60:18:9a:58:
1c:38:8d:81:60:bb:9d:1a:11:2b:79:89:b5:c0:00:62:2a:78:
39:ea:57:10:ee:b5:66:27:f3:f5:cc:8f:a0:3d:9c:80:86:7d:
bf:87:2f:2f:13:9a:dc:f6:79:3f:b0:b3:4e:de:0e:d6:dd:6b:
af:00:1e:8d:db:90:20:88:46:51:34:1a:6f:9c:fb:48:cf:de:
3e:aa:ff:ed:58:8f:0a:42:63:c4:65:fc:41:57:bd:f3:46:9c:
b9:3e:99:22:12:b6:00:2d:18:20:cd:06:7a:ab:61:a4:65:0f:
e9:cb:22:4b:d8:c6:82:05:6d:9c:fc:bb:21:61:36:54:a9:b4:
cb:64:01:7e:82:8f:99:c6:6d:87:e4:f8:11:11:09:02:03:b5:
60:36:62:8b:42:5c:83:98:fe:8a:42:ba:ec:00:6c:36:61:b6:
f8:cb:14:25:85:17:e7:66:15:a1:e4:08:10:78:11:54:de:b2:
62:01:6c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:14:26 2026 by rpki-client