Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
File: ERxtryd8JzXN7koMheNshcJdPD0.mft (raw, json)
Hash identifier: 8nIQ6j1ZG8ugi6fAHCDsvb0c+ZHC//2NNw8Wy628V5Q=
Subject key identifier: 15:37:D9:FF:57:76:26:44:B2:6A:2C:0E:D7:B6:BC:1C:3D:CA:5E:47
Authority key identifier: 11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
Certificate issuer: /CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Certificate serial: 019F91DA17A61E68A165E8D0D6E3D8C7E77F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
Manifest number: 057E
Signing time: Fri 24 Jul 2026 02:00:16 +0000
Manifest this update: Fri 24 Jul 2026 02:00:16 +0000
Manifest next update: Sat 25 Jul 2026 02:00:16 +0000
Files and hashes: 1: 630LgHaZLmK9ap31ZvpR1GPzzqg.roa (hash: YQBSu1OM6liETQJDGjOpqHrROGN5J8OImUtJolzoJik=)
2: ERxtryd8JzXN7koMheNshcJdPD0.crl (hash: pu5qlTsVZXMWBylX8ZOfctg/mTMiwJ++cWMdUZ6EZRQ=)
3: _4M4oq0S8mIZa0V69_lse01j-Sk.roa (hash: NZU7UkxZ6lsoZXHjmmCZKMcfUdhd7kq2mJZpnareMGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:17:a6:1e:68:a1:65:e8:d0:d6:e3:d8:c7:e7:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Validity
Not Before: Jul 24 02:00:16 2026 GMT
Not After : Jul 25 02:00:16 2026 GMT
Subject: CN=1537d9ff57762644b26a2c0ed7b6bc1c3dca5e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:85:64:58:56:a4:31:b4:57:3f:92:23:ef:45:
6c:0e:ef:ad:0d:d9:30:4d:a4:ac:2f:a4:8d:52:10:
cf:33:26:9c:66:fb:58:8b:d3:f0:f0:c0:ff:ce:bd:
b8:a2:b7:5f:1a:65:68:ae:57:cb:3a:33:25:e8:a9:
50:b5:cc:15:cd:65:59:cd:02:4d:cb:8c:33:18:21:
c3:d4:a0:ae:be:eb:c1:2d:73:e9:10:fe:9f:61:12:
79:d3:23:60:94:a1:09:cf:22:54:1f:39:95:80:85:
53:96:1d:77:c7:6a:79:22:38:fd:46:c2:74:98:69:
8f:fd:ba:58:07:72:81:25:d6:10:d4:d0:50:0f:a5:
aa:df:fa:6c:04:12:37:ea:18:84:da:6b:9b:19:de:
9d:50:2b:b5:72:7d:4f:e0:2a:35:9f:85:be:ce:8a:
0f:56:43:80:71:73:e7:9f:43:ca:c5:28:b2:b8:36:
09:09:3b:7a:be:f5:cc:95:07:71:2a:64:9b:57:8f:
a1:ef:5d:a9:8f:b4:84:17:cf:6b:70:dd:d4:9e:c3:
16:f7:d7:8e:5c:14:96:a7:e1:c2:dd:58:a2:10:bf:
ca:43:99:2c:26:72:4e:3c:70:8b:25:3b:65:b8:a3:
90:11:59:59:cf:5d:7d:39:03:3d:40:42:95:8c:a3:
3b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:37:D9:FF:57:76:26:44:B2:6A:2C:0E:D7:B6:BC:1C:3D:CA:5E:47
X509v3 Authority Key Identifier:
keyid:11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:82:ff:d9:96:e9:7f:f2:4e:04:8b:66:82:d3:1f:83:0f:b2:
14:c2:1f:82:9a:fe:0a:85:69:43:57:60:04:9e:40:b7:d6:06:
c6:bd:6f:cb:8e:d8:fb:9e:69:51:77:2d:7e:fb:88:9a:37:1a:
5a:ce:93:91:98:e5:ec:b2:5a:eb:e5:bf:25:f3:70:38:62:cd:
3d:0c:11:92:29:11:6d:17:9e:79:06:7e:99:b8:e9:cf:60:e3:
8c:89:7d:2d:d1:86:1a:46:89:f2:fe:fc:0a:25:f1:b4:22:ae:
6a:f0:71:01:1e:85:4e:70:97:ea:bb:26:cd:08:00:aa:19:fe:
aa:04:6a:9e:e0:3c:bd:39:75:40:2a:27:99:d3:cc:ab:4b:f2:
70:3f:d2:d1:1b:71:6b:c2:89:77:9f:0e:2a:f9:81:2d:dc:32:
85:d1:c8:44:91:df:27:b2:6a:b2:ac:2a:e6:8d:ac:54:89:51:
94:66:38:93:ba:f0:df:7b:9b:bb:e4:ee:4a:e8:15:aa:73:27:
5f:6e:b4:3b:6d:b7:f6:2e:a1:76:5c:9c:4e:73:5d:9b:3f:b4:
7a:86:ba:78:71:8f:0f:ea:bb:c9:eb:01:a2:5e:78:b5:c0:72:
20:56:ba:3e:f7:1f:1a:91:65:8d:64:15:65:97:a7:64:33:04:
d0:9a:dc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:47:51 2026 by rpki-client