Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
File: ER2JVJLtS2nVqm7aX3Av52Oie6A.mft (raw, json)
Hash identifier: tt7iIy2Z6JvYnxZOq/+R+GY3MM6ZS7tsPBbr2sEaFKk=
Subject key identifier: 2E:98:4F:1F:DB:B9:34:FF:86:DA:6F:16:4C:1F:6D:58:F4:AF:C7:27
Authority key identifier: 11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0
Certificate issuer: /CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0
Certificate serial: 019D27DFDB11EA0EAF66D87A515A9E1C5B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 02:01:15 +0000
Manifest this update: Thu 26 Mar 2026 02:01:15 +0000
Manifest next update: Fri 27 Mar 2026 02:01:15 +0000
Files and hashes: 1: E2AOd0Jh_dYbYDRq_Fys0q9Nt0w.roa (hash: yqgah2GA26MOXyfwuZn4WBUcims7Z93O2Dzh5WOdCaA=)
2: ER2JVJLtS2nVqm7aX3Av52Oie6A.crl (hash: IBeJ6v2Jd4UF40ldS0HrD/4ph9iF3hW6ZD8Rg2R4p/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:db:11:ea:0e:af:66:d8:7a:51:5a:9e:1c:5b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0
Validity
Not Before: Mar 26 02:01:15 2026 GMT
Not After : Mar 27 02:01:15 2026 GMT
Subject: CN=2e984f1fdbb934ff86da6f164c1f6d58f4afc727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:57:d7:da:d0:26:12:41:74:30:9f:86:6c:5f:
e1:ac:94:d2:74:10:a1:be:95:77:af:be:b1:e2:13:
34:ac:ec:e7:1f:43:c9:af:11:de:40:9d:0e:12:e1:
ac:a7:8d:fa:34:53:b8:c3:c0:79:cd:d3:02:e1:6d:
f0:7a:9d:64:e9:f8:d3:d5:4a:5a:9d:90:0a:55:93:
75:7b:df:bb:cf:98:62:be:8f:c6:39:39:f3:8f:81:
50:60:ad:5f:e4:14:bd:fe:34:a8:25:c7:02:f5:70:
41:96:3b:03:ef:79:06:1e:fa:b6:48:de:21:2a:39:
c9:be:d8:90:31:96:4f:87:f0:4e:4c:2a:8f:b3:0a:
b2:d5:8f:a4:a5:f1:f2:9b:40:6c:40:bb:e6:36:4b:
a2:10:2c:d2:68:73:a5:68:f5:62:11:3a:0d:61:eb:
c7:09:8e:26:89:d6:39:6f:ce:ba:ac:dc:61:be:81:
6f:0b:49:3f:3c:e2:ea:74:93:44:58:d8:15:86:e2:
e2:01:3c:f0:b1:63:f4:ad:ac:6a:f6:a7:2a:1f:d7:
32:d7:99:a0:f9:be:ef:61:11:a2:b0:6c:36:7b:01:
0f:ba:43:ca:f1:44:0f:61:9f:77:16:3f:e4:3a:22:
f2:85:a2:5a:a8:0d:6f:af:58:ea:cf:03:79:82:ea:
75:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:98:4F:1F:DB:B9:34:FF:86:DA:6F:16:4C:1F:6D:58:F4:AF:C7:27
X509v3 Authority Key Identifier:
keyid:11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:fe:98:b6:57:b6:f2:1d:ca:8e:58:e0:94:1b:24:1b:fb:5d:
a7:f0:53:59:fa:de:f0:5f:8e:a4:da:e2:de:8a:a9:59:5c:81:
52:06:0a:8d:6c:c9:11:18:9c:83:c0:a5:f3:b7:20:db:22:ac:
c8:d8:07:8f:cd:c9:15:1b:b0:3d:68:b4:6d:48:3a:8f:c4:75:
4b:03:9e:1c:5b:c9:db:7c:c0:7b:5a:fe:02:f2:0b:5b:21:a2:
04:ff:5a:f5:ac:82:f3:d2:2a:de:76:e3:20:2e:10:cb:70:44:
58:ff:8a:fc:70:10:29:9e:43:3b:1e:b8:9a:d6:b3:3b:fe:01:
fe:74:6d:2f:96:e4:28:5d:c8:e0:f5:20:59:90:e9:21:fb:72:
7f:b7:05:9d:d6:24:aa:e6:c2:ca:b1:35:a1:a9:f6:0a:bd:fd:
bc:19:c8:b2:46:8d:6a:4e:a5:18:b2:62:97:c8:b3:8f:d5:4f:
65:5b:d1:cf:c6:fc:3a:1d:0f:0d:a5:77:18:4a:32:9e:25:39:
cc:ac:2a:c7:f9:0f:3c:c4:fc:fa:18:12:63:18:fc:97:78:d5:
12:15:2b:f8:29:7a:6e:17:6f:6f:15:da:91:6f:a9:34:3e:67:
75:36:52:39:2e:c3:44:03:ce:ac:bf:07:7f:07:79:a8:33:34:
02:f2:a6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:54:43 2026 by rpki-client