Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
File: ERAUzorTjRU1AJbVSe4cWAXQncg.mft (raw, json)
Hash identifier: +LyfgIcfAm9Qnhc6h7k3A8F4zjgjNTSSLTrRSWJGi1U=
Subject key identifier: F4:EA:9F:A0:E4:92:A5:82:F8:EA:FF:D4:2F:F9:B5:96:00:63:D9:53
Authority key identifier: 11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8
Certificate issuer: /CN=111014ce8ad38d15350096d549ee1c5805d09dc8
Certificate serial: 019FA93DBF392333E155A328D2768D5EB8DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 15:00:23 +0000
Manifest this update: Tue 28 Jul 2026 15:00:23 +0000
Manifest next update: Wed 29 Jul 2026 15:00:23 +0000
Files and hashes: 1: ERAUzorTjRU1AJbVSe4cWAXQncg.crl (hash: F3FGYxKfzb8xQnifQZe2f8uhkuIUyQq2d7Kc4z/+ACY=)
2: ZPA0yTEgbeGTPx3uVMlT6oTLbXM.roa (hash: 1cNaYSmAVMmYxCmd/+BHA+BklNBA0EPt0mpd9OexoGk=)
3: eZKM8TJMYeLWEyu920Ld75NcinM.roa (hash: tmv3AASNUdy6CqfMaQz0xtQC6GhRK7nXqdtlIL9UhUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:bf:39:23:33:e1:55:a3:28:d2:76:8d:5e:b8:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111014ce8ad38d15350096d549ee1c5805d09dc8
Validity
Not Before: Jul 28 15:00:23 2026 GMT
Not After : Jul 29 15:00:23 2026 GMT
Subject: CN=f4ea9fa0e492a582f8eaffd42ff9b5960063d953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d0:70:8d:bb:54:9e:bb:4b:c8:c8:d5:aa:23:
8c:1c:0a:d6:f6:5b:04:bc:29:33:07:d0:b9:e0:f4:
cd:98:f6:2d:ec:e2:ab:cf:9d:a2:e0:00:bb:0c:ff:
a5:24:93:c0:43:1e:86:9b:f4:04:b4:9f:7b:bf:ed:
3f:24:0b:38:54:0f:50:ec:67:59:e9:83:45:73:90:
63:e8:02:bc:76:d8:c7:6f:1c:c5:62:f4:a3:ee:56:
02:00:8e:4b:05:11:2f:81:9a:46:26:a4:0e:63:b7:
49:92:8f:23:75:09:9d:35:1e:05:30:e5:8b:b6:aa:
8e:0a:5f:a6:74:05:71:5c:09:c6:16:06:f4:3c:c1:
bf:5b:a3:4e:82:e3:58:61:e3:87:13:77:67:b0:c7:
9f:da:b3:b1:5e:62:4c:09:79:b7:ad:22:e4:e7:df:
a0:98:e8:c6:f3:c4:fa:5d:38:f9:0b:5c:4a:92:1b:
0f:3d:d6:db:d2:b7:a0:27:ac:3a:26:e7:70:53:82:
86:be:ae:8b:07:eb:25:d4:99:c3:0c:2b:68:e0:b8:
95:aa:88:fa:f4:33:b1:41:35:61:32:b0:f3:df:5e:
6d:2f:db:c8:78:88:62:c1:7f:b1:21:af:02:fc:b8:
e3:0e:64:6b:d0:2c:21:86:d4:15:d1:34:d9:f2:54:
f8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EA:9F:A0:E4:92:A5:82:F8:EA:FF:D4:2F:F9:B5:96:00:63:D9:53
X509v3 Authority Key Identifier:
keyid:11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:7c:98:fa:33:51:d2:78:42:88:d1:f1:fb:63:26:a2:97:2a:
c3:4a:7c:ca:be:e8:27:65:f8:a7:ac:0e:f7:91:3c:7d:69:97:
f6:3f:88:6f:23:4a:19:f7:92:68:83:51:7a:c6:12:c0:8e:86:
eb:21:16:e2:3c:35:9c:ad:2f:50:51:fd:0d:ec:d2:cf:39:ed:
a1:9b:ef:53:33:62:e5:46:f9:94:5a:79:9d:70:8b:27:dc:5d:
32:64:7e:1a:06:ef:cd:17:c0:69:af:f3:df:43:a5:b6:bd:66:
b8:9b:f0:37:1d:2f:f1:b5:94:db:e9:fc:c3:93:da:98:43:fe:
12:6e:2b:9c:b8:45:0f:29:00:11:e4:85:1e:8d:41:76:07:fc:
fa:76:13:cd:ec:8b:e6:5c:b5:6d:b6:1d:f4:fb:26:4a:98:c4:
25:c0:7f:5b:83:ad:c2:97:d0:dc:df:93:d1:43:81:29:39:c8:
8f:f7:14:9f:95:67:4c:60:ac:fa:95:a4:78:09:0f:40:2d:68:
6e:3d:02:ea:7b:70:cc:ef:41:f6:f6:29:19:59:a3:bb:30:0e:
92:44:9a:48:97:9d:b2:fb:38:64:e7:1d:ac:ea:5d:5c:76:e0:
d3:69:a7:2a:c5:71:97:08:95:47:a8:67:cd:fc:4c:7f:61:c4:
0e:bb:22:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:39:23 2026 by rpki-client