Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
File: ERxtryd8JzXN7koMheNshcJdPD0.mft (raw, json)
Hash identifier: lEUG36Nz6nQeAkDvg3DgqxBFBXmkNk1D7b8nUyYwFbs=
Subject key identifier: AF:3C:92:9A:7D:64:79:AD:08:56:AD:9E:CF:0A:E4:B5:CA:CA:60:AC
Authority key identifier: 11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
Certificate issuer: /CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Certificate serial: 019D26287A0EA303B89EC2F3BC954FB37846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
Manifest number: 043D
Signing time: Wed 25 Mar 2026 18:01:19 +0000
Manifest this update: Wed 25 Mar 2026 18:01:19 +0000
Manifest next update: Thu 26 Mar 2026 18:01:19 +0000
Files and hashes: 1: ERxtryd8JzXN7koMheNshcJdPD0.crl (hash: uv8MMtT5mWYNbKDIblWx1RBLj3RnqV+Qoj2Qula8W3I=)
2: _4M4oq0S8mIZa0V69_lse01j-Sk.roa (hash: NZU7UkxZ6lsoZXHjmmCZKMcfUdhd7kq2mJZpnareMGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:7a:0e:a3:03:b8:9e:c2:f3:bc:95:4f:b3:78:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Validity
Not Before: Mar 25 18:01:19 2026 GMT
Not After : Mar 26 18:01:19 2026 GMT
Subject: CN=af3c929a7d6479ad0856ad9ecf0ae4b5caca60ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a3:c3:3a:85:00:e1:04:e7:a5:f2:c1:f2:83:
5c:93:0c:3d:86:50:a1:48:8c:2c:34:f9:06:c1:82:
96:70:65:dd:d5:49:05:0e:5c:28:f3:ff:83:6c:5b:
b2:f7:d7:28:f5:ad:f0:4e:dc:93:28:ae:ba:52:3e:
c1:99:5b:ce:61:01:a1:a1:da:0f:df:4e:0f:c8:2f:
91:ca:3e:21:fd:23:dc:46:f9:96:41:57:1d:72:23:
96:13:ed:b9:42:df:ca:78:8f:0f:c1:b7:e8:0e:b5:
54:3f:71:fd:2f:60:b0:2a:12:4f:6d:1e:d8:18:2c:
34:76:29:f4:d5:81:d3:90:9f:a8:39:8e:5b:a6:25:
de:be:58:7f:14:d4:23:17:60:35:c7:e6:1c:bd:3a:
be:db:8d:11:5d:32:4c:56:1c:47:4d:46:1f:ff:49:
a6:95:ac:21:cb:33:5e:e0:11:88:50:0d:6b:b1:7c:
12:f7:1e:49:6b:31:54:f9:52:a6:4b:c8:20:bc:7e:
a5:37:03:5c:1b:e6:a6:61:3e:f4:ed:47:d8:a0:33:
1c:c4:e1:9a:f3:68:4f:86:cb:22:f4:e0:e6:6a:6e:
46:34:45:b7:f4:5e:df:72:7e:b7:5c:fb:ca:62:15:
89:fc:7c:50:95:a3:4c:c7:be:ed:e3:64:08:ff:04:
9d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3C:92:9A:7D:64:79:AD:08:56:AD:9E:CF:0A:E4:B5:CA:CA:60:AC
X509v3 Authority Key Identifier:
keyid:11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:33:85:cf:7b:64:26:53:d1:c0:f6:79:92:de:6b:4a:88:02:
f5:3a:e5:cc:af:ed:ce:ad:7b:46:a1:ce:84:ba:a7:3a:b7:62:
5c:4b:6f:6f:cc:b3:e1:9c:1b:c3:09:27:43:82:45:4d:6b:8c:
1e:1e:5e:43:4a:62:a0:72:ff:00:cd:d6:f2:18:2b:29:c9:a4:
78:10:6c:28:50:f2:df:46:1c:82:c5:3a:fd:37:08:d2:d7:65:
f2:b1:00:c5:60:57:64:b3:88:cd:c0:5e:aa:82:8d:64:e5:ce:
94:02:e8:90:d1:fa:68:73:27:69:3d:56:5b:3b:5a:42:8a:20:
23:ea:9a:56:77:12:ff:ca:2a:34:d0:02:cf:05:65:1c:56:68:
c6:26:d6:45:61:b4:6f:80:46:e9:4a:1c:83:65:b7:e3:f5:a2:
db:6b:02:ba:25:1d:a3:ca:4d:17:42:2d:90:6a:3c:13:89:8d:
9e:5a:19:99:5e:46:a4:bc:44:dc:f1:56:c4:5f:6e:fd:e6:85:
d9:48:d5:ce:e9:d9:17:29:67:38:31:4b:df:3c:1c:e5:76:07:
c3:ee:a4:6e:37:90:66:71:fc:dd:56:f4:7a:a8:02:25:60:86:
74:51:a7:87:5a:fe:bf:e0:76:18:c8:47:c9:fb:f8:81:98:a9:
c9:11:b8:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKHoOowO4nsLzvJVPs3hGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMWM2ZGFmMjc3YzI3MzVjZGVlNGEwYzg1ZTM2Yzg1YzI1
ZDNjM2QwHhcNMjYwMzI1MTgwMTE5WhcNMjYwMzI2MTgwMTE5WjAzMTEwLwYDVQQD
EyhhZjNjOTI5YTdkNjQ3OWFkMDg1NmFkOWVjZjBhZTRiNWNhY2E2MGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qPDOoUA4QTnpfLB8oNckww9hlCh
SIwsNPkGwYKWcGXd1UkFDlwo8/+DbFuy99co9a3wTtyTKK66Uj7BmVvOYQGhodoP
304PyC+Ryj4h/SPcRvmWQVcdciOWE+25Qt/KeI8PwbfoDrVUP3H9L2CwKhJPbR7Y
GCw0din01YHTkJ+oOY5bpiXevlh/FNQjF2A1x+YcvTq+240RXTJMVhxHTUYf/0mm
lawhyzNe4BGIUA1rsXwS9x5JazFU+VKmS8ggvH6lNwNcG+amYT707UfYoDMcxOGa
82hPhssi9ODmam5GNEW39F7fcn63XPvKYhWJ/HxQlaNMx77t42QI/wSdqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK88kpp9ZHmtCFatns8K5LXKymCsMB8GA1UdIwQY
MBaAFBEcba8nfCc1ze5KDIXjbIXCXTw9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJ4dHJ5ZDhKelhON2tvTWhlTnNoY0pkUEQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iYTQ3NjYtN2IzZi00ZTU3LTgzZGUt
MzdiZmNiODBmNjE4LzEvRVJ4dHJ5ZDhKelhON2tvTWhlTnNoY0pkUEQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9iYTQ3NjYtN2IzZi00ZTU3LTgzZGUtMzdiZmNiODBmNjE4
LzEvRVJ4dHJ5ZDhKelhON2tvTWhlTnNoY0pkUEQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZDOFz3tk
JlPRwPZ5kt5rSogC9TrlzK/tzq17RqHOhLqnOrdiXEtvb8yz4ZwbwwknQ4JFTWuM
Hh5eQ0pioHL/AM3W8hgrKcmkeBBsKFDy30YcgsU6/TcI0tdl8rEAxWBXZLOIzcBe
qoKNZOXOlALokNH6aHMnaT1WWztaQoogI+qaVncS/8oqNNACzwVlHFZoxibWRWG0
b4BG6Uocg2W34/Wi22sCuiUdo8pNF0ItkGo8E4mNnloZmV5GpLxE3PFWxF9u/eaF
2UjVzunZFylnODFL3zwc5XYHw+6kbjeQZnH83Vb0eqgCJWCGdFGnh1r+v+B2GMhH
yfv4gZipyRG4vw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:56:59 2026 by rpki-client