Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
File: lER-sxl6ox5-aEnxavVaslMB-oI.mft (raw, json)
Hash identifier: 7y5AAwMOVFGBnv/4moYO0NZex0rpsa1lWZQSxwwjduA=
Subject key identifier: C7:63:1D:7F:9C:A2:99:DA:4B:9B:A9:2E:40:94:38:60:B4:1C:02:3B
Authority key identifier: 94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82
Certificate issuer: /CN=94447eb3197aa31e7e6849f16af55ab25301fa82
Certificate serial: 019F90C80587D43BAF2F3C72686681DD4A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
Manifest number: 093F
Signing time: Thu 23 Jul 2026 21:00:55 +0000
Manifest this update: Thu 23 Jul 2026 21:00:55 +0000
Manifest next update: Fri 24 Jul 2026 21:00:55 +0000
Files and hashes: 1: DQ38TRCVnXEsSBsusAK4wA5cM7E.roa (hash: LYfpTTUhsNjJzAKWOxzbHYKnI3ctEnoDEml27mltRUs=)
2: lER-sxl6ox5-aEnxavVaslMB-oI.crl (hash: EJ+mQe6Ox9ceWlpKW3Fquiv4I8LQMrbkv0cxmlTkD0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:05:87:d4:3b:af:2f:3c:72:68:66:81:dd:4a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94447eb3197aa31e7e6849f16af55ab25301fa82
Validity
Not Before: Jul 23 21:00:55 2026 GMT
Not After : Jul 24 21:00:55 2026 GMT
Subject: CN=c7631d7f9ca299da4b9ba92e40943860b41c023b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:65:e0:6e:9a:43:72:1c:dd:f2:36:60:25:d4:
6d:a5:ec:4e:f0:9f:d2:ac:c6:89:6e:23:6c:36:66:
83:f6:82:9b:02:87:c9:a6:47:70:46:2c:6f:4d:8c:
64:94:4f:71:16:81:67:b0:62:f1:4d:b8:dd:04:20:
1f:ff:b8:4b:a0:67:5b:5b:52:99:11:61:b3:75:87:
1e:1c:4c:f4:fd:05:a1:2f:24:a5:18:7f:c2:58:ee:
91:b4:64:b5:05:1e:41:69:45:c1:95:80:f9:a8:2e:
18:fc:5e:c0:a9:9b:67:ea:76:dd:fb:09:8a:d5:5b:
c2:2d:59:8f:c0:d8:5f:c3:bf:ab:a3:c6:a1:6e:7b:
9b:10:62:b3:5a:9c:81:f1:09:17:59:aa:e5:8a:c4:
a4:91:d4:17:23:3d:8f:d6:2a:66:f7:16:f2:03:c8:
ec:d1:ac:69:2c:0c:c6:91:a1:c1:58:dd:d4:d6:69:
6e:55:62:8c:a3:e6:85:ae:dc:b5:15:e4:79:a6:58:
c5:0e:3b:34:72:94:79:a5:d6:6a:70:87:99:49:0c:
3c:7a:42:3c:6b:db:1c:4b:92:f2:91:1f:20:dc:fd:
b9:d2:37:2e:9c:e7:04:a6:20:49:ee:3f:fa:54:53:
b1:d8:ed:7c:f2:79:fe:99:28:a5:93:cd:7a:42:e7:
d5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:63:1D:7F:9C:A2:99:DA:4B:9B:A9:2E:40:94:38:60:B4:1C:02:3B
X509v3 Authority Key Identifier:
keyid:94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:db:a9:f5:36:be:e6:6d:01:15:fd:ca:89:bb:2e:29:c2:6e:
b0:e3:ce:61:e2:8b:1e:9a:ad:a3:83:b7:62:0e:9b:08:d9:89:
8c:17:94:87:bd:b2:fe:c8:9f:ec:2d:2b:31:33:63:ae:f3:d5:
10:5a:2a:d6:f7:6c:bb:70:cd:66:fb:6e:77:74:0a:76:2b:9b:
33:0f:24:23:3f:fc:8c:8d:b7:08:50:86:3b:c0:61:83:3f:e1:
a0:83:5c:69:20:2e:4a:d6:ef:3b:3a:07:2e:53:b5:b6:9d:10:
f5:1f:40:9c:34:ad:87:0e:c6:2f:74:ad:0a:d5:18:bb:0f:dc:
15:2c:cf:4c:31:7b:d4:fd:5a:ff:94:46:bf:3e:b3:f0:6d:7c:
94:dc:8e:e2:7c:76:35:c7:94:ab:cb:b5:16:ea:32:36:a3:0f:
31:17:38:f9:ef:2b:f7:fc:6e:54:8a:6a:bf:11:75:aa:07:70:
91:7b:da:6d:c6:40:c7:a6:4d:1f:1a:7b:58:5c:03:77:ce:bf:
ad:02:ca:52:bc:b6:05:3b:b2:a4:7f:dc:53:63:61:a9:c6:ce:
97:e3:be:40:5d:d5:72:f6:fe:88:2a:e9:78:42:07:08:6f:de:
41:b8:b4:2e:31:6c:51:cf:5b:33:cd:9a:9b:5d:fe:2c:70:b6:
12:9b:b6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:09:34 2026 by rpki-client