Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
File: ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft (raw, json)
Hash identifier: wsvQnqaXiv6n2pbntSLuSMqQlnTvO6+UdSyXx/OVgCM=
Subject key identifier: A4:7C:41:E4:6F:D6:6A:28:F5:DF:F8:2F:6A:8D:0D:30:DC:DA:A0:7E
Authority key identifier: 11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
Certificate issuer: /CN=111b09710acdb72086d658e90d8f025fa6a111b1
Certificate serial: 01A0E43E69EBCA30E862D71EEC9BE9276D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
Manifest number: 0D15
Signing time: Sun 27 Sep 2026 19:01:30 +0000
Manifest this update: Sun 27 Sep 2026 19:01:30 +0000
Manifest next update: Mon 28 Sep 2026 19:01:30 +0000
Files and hashes: 1: 185JWtL1nJVygOFr95-RQtms_58.roa (hash: KasP2muj3cS9GbttmeKweMSTbVCW9PhTnMbBxoVVNls=)
2: ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl (hash: BfoinLC2WTW5G1RY3CPmaP5XTuZQTfI9HFncltlkI9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:3e:69:eb:ca:30:e8:62:d7:1e:ec:9b:e9:27:6d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111b09710acdb72086d658e90d8f025fa6a111b1
Validity
Not Before: Sep 27 19:01:30 2026 GMT
Not After : Sep 28 19:01:30 2026 GMT
Subject: CN=a47c41e46fd66a28f5dff82f6a8d0d30dcdaa07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:cd:30:c7:ae:18:bc:4e:30:a9:87:47:11:4d:
61:cd:c4:03:c3:84:6a:6a:37:33:9f:8c:38:2e:6a:
01:1a:f9:2c:5f:30:b6:9b:32:2e:99:03:95:f9:08:
76:a1:65:c6:91:54:a1:67:6a:a1:51:d7:33:02:e6:
a2:6c:2f:0d:5e:c5:60:af:e6:4e:b6:c3:c5:08:16:
92:49:23:34:32:3e:42:be:ef:97:3a:5b:80:ea:18:
63:d7:66:3a:92:24:db:c8:5c:47:81:2d:f7:93:88:
aa:19:9a:31:92:0e:c4:73:fb:ea:f8:bc:85:f7:6a:
cb:b3:cb:98:5e:61:44:6c:54:15:05:0f:55:aa:10:
4d:9d:21:f0:b9:ae:e5:e0:4b:96:39:cf:38:2a:d4:
a8:d6:d4:f4:38:87:7e:2e:d8:46:52:a8:4f:0b:e9:
fc:5f:2d:8c:67:20:d1:f7:8a:83:9e:48:07:24:34:
1b:84:bb:b3:56:be:ea:bb:29:ee:66:fd:ab:e9:d9:
b3:5a:0e:ea:5c:89:06:ab:59:fe:31:06:43:8d:43:
ea:a2:e5:56:f4:07:3c:ef:f9:84:2c:f1:61:33:cb:
a3:bc:e3:6e:d9:6c:aa:9b:4e:5e:44:d0:ab:a9:04:
c5:7b:a2:4d:da:5b:93:d0:d8:45:36:df:8b:e0:86:
ca:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7C:41:E4:6F:D6:6A:28:F5:DF:F8:2F:6A:8D:0D:30:DC:DA:A0:7E
X509v3 Authority Key Identifier:
keyid:11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:61:0b:8d:60:54:9e:4b:c8:5c:9b:c4:29:07:7f:c9:e5:2e:
22:a6:0b:ad:c5:6e:ab:5b:cf:c6:d2:59:b2:cc:97:13:b5:aa:
bc:51:8b:b1:e0:3e:53:03:e6:ba:24:49:8b:22:ab:5c:5e:65:
36:34:5d:0d:ea:3b:ab:e6:42:49:84:ba:b3:1e:0a:49:0d:96:
27:c9:32:2e:c4:d3:98:5f:f6:71:bb:a4:a2:59:db:b0:d4:06:
ec:24:cd:9a:c2:b2:86:cc:b3:ff:36:1f:71:1b:7d:34:43:63:
6d:14:94:0b:07:4b:d2:77:04:e1:dc:2b:7c:c3:f7:3a:46:63:
5c:29:6e:1b:42:89:33:0f:5c:97:3d:75:43:3d:a5:18:ff:66:
04:d6:ac:2b:1e:d9:f6:61:c8:81:b4:7b:33:48:46:3d:4b:c7:
cd:0e:26:aa:d2:89:3d:44:50:e7:dc:7a:9c:2e:2a:22:3a:7c:
24:4a:56:ad:c5:9d:44:fc:9b:ad:34:30:0c:00:59:4d:41:ae:
28:4f:8a:a3:74:ea:30:3b:f9:bf:05:b0:de:8a:e2:e8:96:dd:
39:d9:7c:76:8e:55:a4:9c:80:c2:00:5e:7d:6f:f2:4c:85:20:
af:d2:37:fa:9c:05:c2:74:96:9b:0f:45:3f:76:44:0e:c7:ce:
5a:8d:1f:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDkPmnryjDoYtce7JvpJ22ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMWIwOTcxMGFjZGI3MjA4NmQ2NThlOTBkOGYwMjVmYTZh
MTExYjEwHhcNMjYwOTI3MTkwMTMwWhcNMjYwOTI4MTkwMTMwWjAzMTEwLwYDVQQD
EyhhNDdjNDFlNDZmZDY2YTI4ZjVkZmY4MmY2YThkMGQzMGRjZGFhMDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+80wx64YvE4wqYdHEU1hzcQDw4Rq
ajczn4w4LmoBGvksXzC2mzIumQOV+Qh2oWXGkVShZ2qhUdczAuaibC8NXsVgr+ZO
tsPFCBaSSSM0Mj5Cvu+XOluA6hhj12Y6kiTbyFxHgS33k4iqGZoxkg7Ec/vq+LyF
92rLs8uYXmFEbFQVBQ9VqhBNnSHwua7l4EuWOc84KtSo1tT0OId+LthGUqhPC+n8
Xy2MZyDR94qDnkgHJDQbhLuzVr7quynuZv2r6dmzWg7qXIkGq1n+MQZDjUPqouVW
9Ac87/mELPFhM8ujvONu2Wyqm05eRNCrqQTFe6JN2luT0NhFNt+L4IbKyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKR8QeRv1moo9d/4L2qNDTDc2qB+MB8GA1UdIwQY
MBaAFBEbCXEKzbcghtZY6Q2PAl+moRGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjkt
N2JmMDM1NmE2YmFiLzEvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjktN2JmMDM1NmE2YmFi
LzEvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJGELjWBU
nkvIXJvEKQd/yeUuIqYLrcVuq1vPxtJZssyXE7WqvFGLseA+UwPmuiRJiyKrXF5l
NjRdDeo7q+ZCSYS6sx4KSQ2WJ8kyLsTTmF/2cbukolnbsNQG7CTNmsKyhsyz/zYf
cRt9NENjbRSUCwdL0ncE4dwrfMP3OkZjXCluG0KJMw9clz11Qz2lGP9mBNasKx7Z
9mHIgbR7M0hGPUvHzQ4mqtKJPURQ59x6nC4qIjp8JEpWrcWdRPybrTQwDABZTUGu
KE+Ko3TqMDv5vwWw3ori6JbdOdl8do5VpJyAwgBefW/yTIUgr9I3+pwFwnSWmw9F
P3ZEDsfOWo0fAQ==
-----END CERTIFICATE-----
Generated at Mon Sep 28 00:13:23 2026 by rpki-client