Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
File: ERxtryd8JzXN7koMheNshcJdPD0.mft (raw, json)
Hash identifier: F9YD+2VenhBRTA0VGeMrqVqRt/aegA0FlLj0IRPP+HA=
Subject key identifier: D6:3E:D7:7B:24:D4:A5:A0:0E:25:84:41:19:6E:AC:F8:13:2D:35:18
Authority key identifier: 11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
Certificate issuer: /CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Certificate serial: 01A102B6AD6B586F0E42227EFC1AA1B1C4C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
Manifest number: 063D
Signing time: Sat 03 Oct 2026 17:01:28 +0000
Manifest this update: Sat 03 Oct 2026 17:01:28 +0000
Manifest next update: Sun 04 Oct 2026 17:01:28 +0000
Files and hashes: 1: 630LgHaZLmK9ap31ZvpR1GPzzqg.roa (hash: YQBSu1OM6liETQJDGjOpqHrROGN5J8OImUtJolzoJik=)
2: ERxtryd8JzXN7koMheNshcJdPD0.crl (hash: jpdc6rxwu6M8Rq0CQ1XbYXkCsR/byO9RTgbFJKmXVG0=)
3: _4M4oq0S8mIZa0V69_lse01j-Sk.roa (hash: NZU7UkxZ6lsoZXHjmmCZKMcfUdhd7kq2mJZpnareMGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 17:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:b6:ad:6b:58:6f:0e:42:22:7e:fc:1a:a1:b1:c4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Validity
Not Before: Oct 3 17:01:28 2026 GMT
Not After : Oct 4 17:01:28 2026 GMT
Subject: CN=d63ed77b24d4a5a00e258441196eacf8132d3518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:80:1f:c3:99:1a:1d:eb:44:45:09:6c:d5:12:
78:bd:90:a4:11:94:2f:94:00:c5:00:83:83:d9:a9:
96:d0:6c:96:42:d1:66:57:d6:92:41:01:33:d6:55:
eb:df:41:84:5a:5f:af:5b:2f:07:0f:04:dc:c6:ef:
bf:3f:e5:64:e6:e9:43:45:00:91:dc:74:2b:d6:a2:
3a:c9:18:87:9d:ce:55:be:24:af:5f:97:b7:9e:f7:
47:d2:b1:34:af:74:97:44:99:7d:a8:e9:16:5f:cf:
3f:93:14:f9:c6:56:90:2f:f2:fc:83:bb:35:af:66:
f8:57:d0:d2:10:d7:de:ef:03:f7:94:b6:9e:83:c2:
96:51:8c:5a:88:47:9b:7a:f2:6a:88:9e:7e:12:fd:
bc:ce:b9:81:7e:92:7f:4c:60:b5:65:2b:24:17:96:
07:64:10:85:85:6f:1c:92:cf:2d:b7:2d:c0:f7:11:
49:bc:fd:52:80:e1:17:de:d0:85:ba:e8:9c:82:41:
01:82:ae:61:6f:92:05:09:c2:44:42:14:31:75:01:
20:49:1f:3e:15:53:af:1e:18:e7:50:cf:c7:35:ed:
6d:80:1b:64:d3:01:de:e1:52:20:33:05:f9:4a:20:
bf:1b:50:6b:7c:48:81:89:f6:03:4d:d4:0a:56:d0:
b9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3E:D7:7B:24:D4:A5:A0:0E:25:84:41:19:6E:AC:F8:13:2D:35:18
X509v3 Authority Key Identifier:
keyid:11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:13:86:91:e7:29:d9:9a:31:60:19:1b:9a:79:3b:9e:ba:47:
5c:a3:83:37:11:14:68:59:74:ca:b9:db:8d:5c:81:23:29:5a:
73:ea:7b:3a:5e:4f:f6:6f:46:77:c1:e8:98:b3:57:be:81:d3:
2a:51:0a:83:56:d0:c1:1e:cf:5e:85:57:a1:43:06:a0:65:f4:
72:d7:3e:e0:95:f1:a7:45:fe:6d:02:f2:1b:ff:48:38:69:9e:
14:ea:65:f3:85:80:eb:8f:ac:f9:7b:f0:9d:5a:56:20:b8:16:
ed:e9:73:7b:49:c8:95:ed:97:e8:8a:f9:f1:e5:a2:1f:12:8d:
e6:40:6f:c3:99:64:4c:2c:39:56:94:c0:1c:0e:01:74:4b:c4:
7b:7d:70:0e:e9:78:e8:8a:d4:df:6b:80:92:4a:0e:75:eb:14:
68:3b:ef:7b:6a:3c:b6:4d:ca:b7:f0:9b:2e:4b:67:4c:be:cf:
57:5c:6b:9c:b5:ba:48:f7:67:22:65:a7:f8:72:1a:0a:d6:91:
f1:6f:90:57:1d:39:87:48:34:64:84:f3:bb:7a:96:3c:64:2a:
a3:44:49:3b:a0:ea:32:d7:76:9b:52:ab:f8:b9:11:8f:af:80:
91:3d:1d:b2:2b:91:2d:76:76:ed:9b:1f:85:91:52:14:c8:98:
28:b8:31:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:29:50 2026 by rpki-client