Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
File: ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft (raw, json)
Hash identifier: f66sE1WsgjjyJHOcworBL/XTn1QylDwZASsGtAvSE7c=
Subject key identifier: DC:B3:EB:18:CC:8B:F8:4C:FC:D9:37:D0:49:D5:2B:45:2F:10:82:AF
Authority key identifier: 11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
Certificate issuer: /CN=111b09710acdb72086d658e90d8f025fa6a111b1
Certificate serial: 019E1F7E6300CCBA982CD4FA8A40CDF6328B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
Manifest number: 0BA6
Signing time: Wed 13 May 2026 04:00:36 +0000
Manifest this update: Wed 13 May 2026 04:00:36 +0000
Manifest next update: Thu 14 May 2026 04:00:36 +0000
Files and hashes: 1: 185JWtL1nJVygOFr95-RQtms_58.roa (hash: KasP2muj3cS9GbttmeKweMSTbVCW9PhTnMbBxoVVNls=)
2: ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl (hash: lqtjsvmdBdq3P/qHLquQXlEP5Y4WO2/t2iqLCTk5fZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:63:00:cc:ba:98:2c:d4:fa:8a:40:cd:f6:32:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111b09710acdb72086d658e90d8f025fa6a111b1
Validity
Not Before: May 13 04:00:36 2026 GMT
Not After : May 14 04:00:36 2026 GMT
Subject: CN=dcb3eb18cc8bf84cfcd937d049d52b452f1082af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:53:ab:df:ca:1b:13:7c:8b:dc:b0:97:34:b9:
c4:56:f6:61:64:44:a8:bb:3f:8d:52:e1:54:a1:7b:
2f:f0:90:6f:6f:52:d4:a6:4f:ec:c2:bc:da:da:3c:
f8:8c:f6:b3:62:a9:0e:55:e3:24:d9:09:45:85:fb:
1b:72:69:df:37:ea:fc:e7:d9:22:22:ce:3d:10:22:
4b:d3:57:3f:ed:8b:af:a0:1c:13:66:4b:a1:01:65:
f5:4e:7f:1e:1b:96:c1:42:0f:c2:9e:74:57:9f:70:
92:4b:7d:94:a6:06:3b:d0:e8:62:40:8e:97:47:ec:
59:ea:f9:db:d0:72:10:5d:1b:54:cd:46:29:2f:0b:
e8:3b:35:76:b8:a1:dd:7e:8e:0b:20:52:a8:05:75:
c3:c3:e0:49:0b:ac:07:8d:15:4c:5f:dd:5d:44:52:
2c:1e:71:78:a7:3d:ae:f7:32:d6:15:31:f5:bf:83:
22:58:2d:d4:a9:38:aa:58:b7:49:8c:5f:e2:05:50:
83:23:f5:d3:40:f1:98:25:27:17:92:07:30:c5:be:
d3:9a:97:04:0f:8f:da:85:8e:62:46:97:ba:d5:ae:
49:ad:ad:a4:b2:e5:71:b0:bb:b7:64:eb:08:ae:60:
c2:00:6b:3e:af:23:a8:5f:24:15:dc:8b:79:5b:dc:
57:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B3:EB:18:CC:8B:F8:4C:FC:D9:37:D0:49:D5:2B:45:2F:10:82:AF
X509v3 Authority Key Identifier:
keyid:11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:6f:d3:99:c1:88:1b:5b:8b:ba:88:fa:57:8f:cf:fc:a1:58:
77:21:15:46:80:72:0e:4a:5c:98:a8:b4:29:1c:95:da:4d:cf:
b2:c4:5a:36:be:5f:dc:db:a6:2e:0d:40:19:5a:52:b3:6e:2b:
b1:a2:53:74:77:c9:0c:10:ac:cb:6c:4a:40:68:ae:90:53:8f:
40:6f:7c:15:81:b9:32:34:73:39:4b:5d:6b:fc:03:0c:95:1c:
2e:dd:e7:bd:29:fb:86:69:f3:c2:23:00:ff:2e:b5:28:ca:4b:
17:63:58:a3:68:41:d6:9d:69:12:7e:4a:57:d5:91:2e:7b:37:
cf:76:1e:50:40:3b:fa:02:26:17:10:43:d7:ff:b2:b3:e3:1b:
cd:fd:a0:4e:81:c4:7d:42:fe:d1:d6:57:2f:09:8e:5f:cf:b4:
61:bc:f7:fb:61:13:ea:e2:cc:29:d7:aa:04:28:09:6d:d1:3b:
59:1f:9a:aa:9b:62:67:60:11:7b:75:d4:68:83:7c:74:04:02:
0f:5d:5e:5c:84:34:47:b8:fc:c3:6e:71:9e:96:d2:66:8a:42:
f2:d2:27:48:e5:aa:94:be:6b:a4:cc:7c:f9:df:4a:0a:a5:e3:
bf:df:41:fe:03:c7:99:6b:59:17:bb:4c:6b:a9:7a:76:85:6c:
ac:e6:d5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:34:43 2026 by rpki-client