Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
File: ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft (raw, json)
Hash identifier: 8tFTMZcfuWEod0PvERM7tMv5tFAroDN91TeC5gchxVg=
Subject key identifier: 3D:02:6D:F7:5F:FE:08:43:6D:4C:BC:20:97:84:3B:06:BE:66:AC:A7
Authority key identifier: 11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
Certificate issuer: /CN=111b09710acdb72086d658e90d8f025fa6a111b1
Certificate serial: 019D284DEDFA4B9879E3B48CFD5F4A1B362E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
Manifest number: 0B26
Signing time: Thu 26 Mar 2026 04:01:28 +0000
Manifest this update: Thu 26 Mar 2026 04:01:28 +0000
Manifest next update: Fri 27 Mar 2026 04:01:28 +0000
Files and hashes: 1: 185JWtL1nJVygOFr95-RQtms_58.roa (hash: KasP2muj3cS9GbttmeKweMSTbVCW9PhTnMbBxoVVNls=)
2: ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl (hash: rpUqvJYueGBA2xixiLEMyr/3TM8R85lacMGoMKj35og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:ed:fa:4b:98:79:e3:b4:8c:fd:5f:4a:1b:36:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111b09710acdb72086d658e90d8f025fa6a111b1
Validity
Not Before: Mar 26 04:01:28 2026 GMT
Not After : Mar 27 04:01:28 2026 GMT
Subject: CN=3d026df75ffe08436d4cbc2097843b06be66aca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:06:3c:3b:e4:5b:46:15:c8:2f:81:e0:d6:9f:
80:ea:2e:58:0f:d5:35:2d:99:ed:07:3d:aa:cf:bd:
80:08:0d:1b:2d:bc:7b:34:81:5e:10:e7:c1:1f:6e:
ce:97:7b:b5:c6:5a:44:b8:18:e7:57:c3:49:3c:b7:
c7:55:64:ac:e5:28:1f:6b:6d:6c:0d:d3:91:30:0e:
83:21:ed:88:62:07:2f:a3:72:42:d5:54:5b:a7:7b:
f0:6d:07:38:00:6b:22:ca:a7:35:cf:db:6a:20:19:
3e:25:01:f5:13:5b:9e:5e:5f:c0:cc:3d:3b:69:86:
a7:74:08:0b:2f:a7:e9:51:fc:91:d6:ef:61:61:93:
31:18:0e:35:35:a9:a2:f1:11:bb:7c:d7:a2:5c:32:
48:dc:d4:75:4f:d8:e8:33:1b:b2:5b:90:f1:40:6e:
3d:3a:a3:d2:a8:bd:2c:c6:56:1d:74:f8:ec:db:00:
2f:3f:1b:fe:88:12:84:cd:ce:c7:57:9f:74:09:41:
2d:11:27:aa:3d:60:a4:6a:97:29:16:84:57:5e:51:
f3:ff:44:cd:b3:e9:fa:ed:3e:ba:46:de:8a:d3:27:
12:51:a9:d9:9c:d3:61:44:ca:61:27:47:64:69:e0:
2e:1f:46:c1:83:de:83:fe:2c:5b:46:dd:9d:cd:2d:
33:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:02:6D:F7:5F:FE:08:43:6D:4C:BC:20:97:84:3B:06:BE:66:AC:A7
X509v3 Authority Key Identifier:
keyid:11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:74:3b:92:67:d3:64:0a:f8:97:e7:e5:7e:59:76:d8:a0:7f:
1b:26:b1:49:25:60:7e:0c:62:3b:9f:89:b0:80:7d:b6:b7:96:
c1:26:2a:ce:7a:c5:c1:8f:db:26:a3:d0:ee:05:ed:40:fa:4f:
d7:b5:75:a4:6f:14:66:8f:91:f3:1a:03:c9:cb:f1:32:68:fa:
a8:3f:f2:d8:f1:d1:4c:c3:d0:49:6f:0c:eb:0b:84:b6:0a:f2:
22:e8:67:58:fd:25:29:33:41:d6:15:0a:cb:c8:0e:11:23:37:
07:ac:85:05:93:bb:18:10:f0:04:17:f9:29:ca:de:91:6d:ea:
1b:a3:35:f4:95:34:f5:f5:ac:9a:64:4c:18:63:9d:c2:6b:ca:
65:05:b5:c1:de:00:6d:cd:0b:99:73:98:b8:a2:e5:ac:56:b0:
7d:97:36:d2:58:09:f2:c1:d4:11:8e:3e:23:e9:a8:08:30:b7:
e5:9c:26:58:93:54:ae:55:3a:b6:c2:30:60:48:aa:1f:9e:9a:
aa:89:ab:8b:aa:32:94:f9:d8:ad:8e:0d:c6:5d:26:d2:5c:8a:
20:ce:50:c8:1e:68:1d:6e:f5:fd:80:ef:44:ce:93:a9:34:c4:
fb:7f:de:a1:e7:0d:75:bb:e7:f2:e3:98:a0:db:7b:87:da:73:
f8:30:44:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTe36S5h547SM/V9KGzYuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMWIwOTcxMGFjZGI3MjA4NmQ2NThlOTBkOGYwMjVmYTZh
MTExYjEwHhcNMjYwMzI2MDQwMTI4WhcNMjYwMzI3MDQwMTI4WjAzMTEwLwYDVQQD
EygzZDAyNmRmNzVmZmUwODQzNmQ0Y2JjMjA5Nzg0M2IwNmJlNjZhY2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQY8O+RbRhXIL4Hg1p+A6i5YD9U1
LZntBz2qz72ACA0bLbx7NIFeEOfBH27Ol3u1xlpEuBjnV8NJPLfHVWSs5Sgfa21s
DdORMA6DIe2IYgcvo3JC1VRbp3vwbQc4AGsiyqc1z9tqIBk+JQH1E1ueXl/AzD07
aYandAgLL6fpUfyR1u9hYZMxGA41Nami8RG7fNeiXDJI3NR1T9joMxuyW5DxQG49
OqPSqL0sxlYddPjs2wAvPxv+iBKEzc7HV590CUEtESeqPWCkapcpFoRXXlHz/0TN
s+n67T66Rt6K0ycSUanZnNNhRMphJ0dkaeAuH0bBg96D/ixbRt2dzS0zEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0Cbfdf/ghDbUy8IJeEOwa+ZqynMB8GA1UdIwQY
MBaAFBEbCXEKzbcghtZY6Q2PAl+moRGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjkt
N2JmMDM1NmE2YmFiLzEvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjktN2JmMDM1NmE2YmFi
LzEvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnHQ7kmfT
ZAr4l+flfll22KB/GyaxSSVgfgxiO5+JsIB9treWwSYqznrFwY/bJqPQ7gXtQPpP
17V1pG8UZo+R8xoDycvxMmj6qD/y2PHRTMPQSW8M6wuEtgryIuhnWP0lKTNB1hUK
y8gOESM3B6yFBZO7GBDwBBf5KcrekW3qG6M19JU09fWsmmRMGGOdwmvKZQW1wd4A
bc0LmXOYuKLlrFawfZc20lgJ8sHUEY4+I+moCDC35ZwmWJNUrlU6tsIwYEiqH56a
qomri6oylPnYrY4Nxl0m0lyKIM5QyB5oHW71/YDvRM6TqTTE+3/eoecNdbvn8uOY
oNt7h9pz+DBEZg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:30:59 2026 by rpki-client