Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
File: lER-sxl6ox5-aEnxavVaslMB-oI.mft (raw, json)
Hash identifier: R3FEZHZ6P7KcMKb1rfXPAI9xpjtnL2YLk4TJ4dfblDk=
Subject key identifier: B9:96:07:3B:46:32:0D:E9:7D:EA:55:07:B0:E9:D2:FE:7E:F3:6F:54
Authority key identifier: 94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82
Certificate issuer: /CN=94447eb3197aa31e7e6849f16af55ab25301fa82
Certificate serial: 01A0DCF2C7BC2C2DE0498D470E54187B5281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
Manifest number: 09EB
Signing time: Sat 26 Sep 2026 09:01:33 +0000
Manifest this update: Sat 26 Sep 2026 09:01:33 +0000
Manifest next update: Sun 27 Sep 2026 09:01:33 +0000
Files and hashes: 1: DQ38TRCVnXEsSBsusAK4wA5cM7E.roa (hash: LYfpTTUhsNjJzAKWOxzbHYKnI3ctEnoDEml27mltRUs=)
2: lER-sxl6ox5-aEnxavVaslMB-oI.crl (hash: o/pkhKnRQ1u5XO7u/by40KqN74DgYYX7Vtv+XD2Uy40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:c7:bc:2c:2d:e0:49:8d:47:0e:54:18:7b:52:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94447eb3197aa31e7e6849f16af55ab25301fa82
Validity
Not Before: Sep 26 09:01:33 2026 GMT
Not After : Sep 27 09:01:33 2026 GMT
Subject: CN=b996073b46320de97dea5507b0e9d2fe7ef36f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6b:92:b6:9e:d9:7e:92:d0:3e:4b:83:16:1f:
9e:fc:2b:94:80:ef:bc:e2:2f:cd:26:1b:1b:5a:1c:
46:ff:f7:24:95:a7:b6:67:f0:ee:03:3e:a9:42:00:
4e:eb:cd:f3:c0:7f:75:a5:03:f6:f9:9c:7d:6a:5a:
0c:27:60:b2:aa:0e:6a:aa:95:b2:fe:0a:e9:ea:b5:
e9:75:2b:94:f7:e3:48:5a:20:2d:8d:0d:09:c1:91:
92:a8:68:e7:11:d6:62:09:6c:ec:2f:e4:14:82:aa:
8b:55:4c:a9:24:70:8c:07:4e:08:bd:ee:99:6b:45:
70:0c:30:b2:77:45:db:36:db:dd:b7:dd:a6:b3:ac:
1e:1c:57:b0:2d:51:8f:83:1f:7b:1a:fc:b7:d1:86:
48:e6:f1:d8:79:6c:a6:41:19:cb:b5:b2:1a:16:b6:
11:65:85:68:fe:53:da:cf:03:73:6d:4d:32:5b:ae:
86:aa:28:db:cc:75:2e:18:69:6d:57:40:f3:d1:f7:
1b:8e:63:78:64:7f:10:9c:59:62:86:58:9b:e4:94:
b5:dd:d9:8e:96:42:d8:f8:e3:60:c0:f6:7e:e8:c2:
6f:03:c5:12:a2:f3:c2:d4:31:d4:54:cc:b5:bc:84:
71:cd:42:fa:bf:67:95:f5:6a:54:aa:7d:7a:c8:7f:
b1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:96:07:3B:46:32:0D:E9:7D:EA:55:07:B0:E9:D2:FE:7E:F3:6F:54
X509v3 Authority Key Identifier:
keyid:94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ca:8f:d0:38:59:96:3f:eb:88:3f:9b:9d:1d:21:c4:aa:1e:
39:2b:0d:49:1b:f8:49:fa:eb:37:09:d2:22:8c:a9:49:80:2a:
a3:59:0d:12:82:52:50:ff:54:42:08:5d:44:94:ee:f1:0d:9d:
24:2c:a4:28:59:50:cb:75:96:09:e6:a5:3a:48:d5:73:73:0b:
31:38:13:38:9d:37:22:41:0c:ea:6a:d4:0c:db:52:dd:90:c2:
2a:0a:54:30:55:ab:ea:20:09:4c:14:d1:ea:2d:ad:c8:54:14:
26:cf:af:19:a0:45:26:8e:12:c6:4b:fc:03:e0:17:3e:2b:b5:
7b:46:33:c1:4d:a6:50:af:7a:71:8b:f6:94:f1:2e:1b:11:08:
6b:7b:70:53:da:4d:6d:3e:82:9f:db:77:63:96:f6:24:47:aa:
e7:4f:1c:5b:db:c1:7c:b7:4a:4a:b9:f4:0e:bc:95:8b:bb:b7:
59:7b:eb:e7:8d:0d:1f:9f:11:13:95:4c:38:2e:d0:92:0f:32:
e8:1c:c5:78:4c:a8:5a:01:37:e3:1f:7d:ed:18:59:f3:e6:d7:
f3:d6:b4:71:3b:a6:7b:6a:f2:4d:39:42:2e:62:8c:9d:9d:95:
03:a2:07:1c:75:46:9c:5e:ae:1d:bc:ac:f6:d3:02:39:9d:a6:
5e:c2:32:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:29:15 2026 by rpki-client