Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
File: lER-sxl6ox5-aEnxavVaslMB-oI.mft (raw, json)
Hash identifier: 9On4CMkAWwYsuvm8N2Srj4qyrDlaWMtcqC0Hkc6koYQ=
Subject key identifier: 86:64:F5:1A:44:64:F2:77:C8:C2:BA:7D:50:A9:DC:E5:E9:17:E3:32
Authority key identifier: 94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82
Certificate issuer: /CN=94447eb3197aa31e7e6849f16af55ab25301fa82
Certificate serial: 019F92B66A86FBAE4864A409F5234ADD837F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
Manifest number: 0940
Signing time: Fri 24 Jul 2026 06:00:55 +0000
Manifest this update: Fri 24 Jul 2026 06:00:55 +0000
Manifest next update: Sat 25 Jul 2026 06:00:55 +0000
Files and hashes: 1: DQ38TRCVnXEsSBsusAK4wA5cM7E.roa (hash: LYfpTTUhsNjJzAKWOxzbHYKnI3ctEnoDEml27mltRUs=)
2: lER-sxl6ox5-aEnxavVaslMB-oI.crl (hash: x/AvkaN0/sYrURFss9j+nV+Q2gxD8+ouKuEbFRMcPYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:6a:86:fb:ae:48:64:a4:09:f5:23:4a:dd:83:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94447eb3197aa31e7e6849f16af55ab25301fa82
Validity
Not Before: Jul 24 06:00:55 2026 GMT
Not After : Jul 25 06:00:55 2026 GMT
Subject: CN=8664f51a4464f277c8c2ba7d50a9dce5e917e332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4c:b4:4e:0b:df:17:be:4a:ab:7b:c6:79:82:
3d:52:22:4b:9d:7c:95:dc:3f:25:1e:91:00:7e:bb:
57:c4:b5:07:0e:45:f2:a3:e3:be:37:06:c0:58:17:
78:d4:e5:b1:9f:b1:40:9c:2e:a0:b8:0f:87:22:87:
68:a6:13:f6:b2:6b:74:96:bb:6e:66:2b:c2:32:5b:
85:dd:dc:68:5f:df:18:27:4f:54:dd:dd:71:1d:93:
8c:74:2f:de:f3:13:53:71:5b:9d:24:bb:f5:87:d0:
5f:13:63:87:cb:a3:20:95:f3:d2:d7:92:77:8e:a0:
44:37:10:00:0e:40:71:5d:40:d7:a4:7d:fe:ea:32:
45:f3:3d:27:d0:bc:e6:bd:4f:7e:07:9b:8c:fd:22:
51:60:57:08:0e:45:6f:e0:1a:83:c9:25:52:80:e6:
01:b6:5b:a4:52:58:2c:52:73:12:47:cf:01:b0:00:
63:dd:56:21:b6:79:f7:82:ab:0c:0a:cb:e0:20:6a:
a3:48:ad:ec:53:ba:16:28:12:5a:0b:a6:33:06:97:
cb:a8:f0:9a:3b:f5:da:ac:1b:40:92:f0:14:39:85:
1f:d6:7b:70:96:1c:bd:33:35:db:09:74:13:49:df:
b5:84:42:d3:85:28:91:d2:0d:a1:2a:1a:fe:a4:e8:
1f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:64:F5:1A:44:64:F2:77:C8:C2:BA:7D:50:A9:DC:E5:E9:17:E3:32
X509v3 Authority Key Identifier:
keyid:94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a5:62:43:59:4a:1e:15:b1:26:d8:43:3b:4f:7f:a5:77:ed:
b3:67:4c:f1:b2:ad:de:a0:93:24:70:03:38:08:cb:e9:89:30:
ae:6e:fb:49:51:61:01:88:ed:19:75:6b:98:5e:01:98:47:e8:
c6:64:8f:d7:8d:5a:f6:39:ac:2f:d7:81:c7:b2:6d:3f:e7:f7:
67:0c:cb:cd:34:ec:21:e5:37:4b:64:49:f5:d3:e8:37:ee:06:
a1:7d:1f:06:83:5c:a8:1a:46:0b:bc:f7:0f:a0:61:15:f6:70:
93:13:c1:78:38:3a:aa:41:2c:f0:3f:8f:2b:fe:d9:de:4f:3c:
8d:f9:ee:df:e6:91:a7:4f:54:6d:36:90:78:95:dc:05:8e:cf:
a6:11:ac:e5:61:c8:f1:4c:bb:7b:7a:12:52:f5:3f:14:93:56:
d0:ec:68:bb:da:6f:04:06:9e:23:7e:26:d7:d9:c2:73:d1:dc:
23:d9:7f:dd:c1:86:ce:44:18:98:54:91:63:cf:74:32:d1:b2:
f7:fb:89:78:bd:43:f8:77:3a:89:b3:97:df:d4:56:77:6f:42:
39:65:71:e6:b3:e4:aa:69:cb:3a:dc:0c:98:99:f0:34:e9:e0:
fb:8f:39:7f:31:59:80:a5:41:7c:3e:02:77:e6:aa:e6:38:aa:
44:80:76:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:48:12 2026 by rpki-client