Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
File: ERAUzorTjRU1AJbVSe4cWAXQncg.mft (raw, json)
Hash identifier: sljTAz1LNAoL+yrHn0bPYU94av9/nTHETs2HH9Jr0aA=
Subject key identifier: 42:61:1F:71:8B:02:CB:B4:AE:9C:44:72:48:D0:36:27:CF:76:AE:53
Authority key identifier: 11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8
Certificate issuer: /CN=111014ce8ad38d15350096d549ee1c5805d09dc8
Certificate serial: 019F93FF75ADFBD193A3ADB64D99F14B50E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 12:00:20 +0000
Manifest this update: Fri 24 Jul 2026 12:00:20 +0000
Manifest next update: Sat 25 Jul 2026 12:00:20 +0000
Files and hashes: 1: ERAUzorTjRU1AJbVSe4cWAXQncg.crl (hash: ax/ADqWuQT8oK6L86Cx0Z10e3Y7iGhnGnoCZx3fdjIg=)
2: ZPA0yTEgbeGTPx3uVMlT6oTLbXM.roa (hash: 1cNaYSmAVMmYxCmd/+BHA+BklNBA0EPt0mpd9OexoGk=)
3: eZKM8TJMYeLWEyu920Ld75NcinM.roa (hash: tmv3AASNUdy6CqfMaQz0xtQC6GhRK7nXqdtlIL9UhUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:75:ad:fb:d1:93:a3:ad:b6:4d:99:f1:4b:50:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111014ce8ad38d15350096d549ee1c5805d09dc8
Validity
Not Before: Jul 24 12:00:20 2026 GMT
Not After : Jul 25 12:00:20 2026 GMT
Subject: CN=42611f718b02cbb4ae9c447248d03627cf76ae53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f4:ff:b7:c5:cb:f1:2f:73:38:2e:9c:a8:3e:
6c:89:f0:5f:9e:8a:a4:80:4c:ee:30:7d:ae:79:ee:
50:8b:c4:53:dc:d8:02:1c:76:4b:0b:24:16:09:52:
42:16:71:8d:ba:b7:d4:be:d9:6f:a7:6e:9d:9b:90:
95:54:8e:93:0b:8e:3e:ef:a1:63:e5:c4:7a:f2:d2:
f6:01:96:69:6a:98:76:d3:08:c2:f4:5b:48:29:47:
d5:47:b4:25:c7:cc:92:7f:f1:62:46:31:fe:fe:d6:
7e:4a:04:83:8a:9b:f6:36:b1:7d:23:62:2b:ad:a3:
01:3e:c8:aa:ec:03:31:25:85:b8:5c:66:10:08:85:
1b:5c:db:20:bb:e8:c1:61:75:64:47:c8:1b:95:7a:
58:dc:cd:d8:23:4c:60:68:e9:65:b3:ab:98:b4:28:
76:90:3a:e3:f4:e7:08:67:22:a7:86:fa:93:73:12:
51:72:47:49:de:c4:bd:0c:03:f6:ff:ec:d7:4a:e1:
e7:e1:dd:3a:a3:57:7d:97:67:71:80:8c:65:a6:f8:
af:38:c1:57:44:90:8d:1f:02:41:3a:92:43:44:67:
91:5b:95:fd:91:af:67:c9:62:c0:c9:49:63:7e:a3:
19:6b:45:7d:a0:2f:62:dd:32:f5:7d:30:c6:ad:f1:
ee:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:61:1F:71:8B:02:CB:B4:AE:9C:44:72:48:D0:36:27:CF:76:AE:53
X509v3 Authority Key Identifier:
keyid:11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:5d:5e:63:04:18:8b:31:f6:26:67:2d:66:51:02:d0:8e:7e:
8f:df:e9:7d:59:ff:38:a7:9a:a9:63:a5:a9:02:af:fb:7d:b0:
86:3a:08:f8:7e:64:aa:bd:01:ae:c6:db:9d:1e:52:62:21:96:
b2:89:08:06:b7:45:d9:c0:c3:6c:e8:9b:eb:a9:db:4f:86:f3:
9e:51:20:8c:d9:79:41:e1:b0:5e:d0:89:61:e1:8c:d6:de:98:
51:7e:ef:5e:20:9f:11:95:2b:3c:d3:18:fb:fb:56:2a:2a:a8:
ba:f0:1b:1f:69:67:50:dc:fa:72:d1:86:ef:0d:83:9b:a9:84:
a6:20:49:ef:d6:59:d4:f9:bd:e2:b3:ba:1c:b3:0b:56:41:a9:
6a:28:40:61:b9:05:9a:a3:0e:67:87:a4:da:c8:41:56:0e:eb:
d8:03:34:34:81:2e:5b:ff:cd:ba:33:bf:55:5f:46:f0:9a:bd:
63:97:1d:13:fa:6f:6a:73:31:d7:76:96:d4:df:83:e6:39:90:
64:37:96:e9:2c:59:22:10:ed:79:59:ca:79:7d:76:6a:3a:d5:
39:af:74:08:29:3a:3c:f6:ef:1c:a1:33:45:9b:ae:78:a4:64:
bb:5c:86:b9:42:6d:4b:7a:83:b1:59:61:2f:0b:2c:53:39:59:
40:85:68:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+T/3Wt+9GTo622TZnxS1DgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMTAxNGNlOGFkMzhkMTUzNTAwOTZkNTQ5ZWUxYzU4MDVk
MDlkYzgwHhcNMjYwNzI0MTIwMDIwWhcNMjYwNzI1MTIwMDIwWjAzMTEwLwYDVQQD
Eyg0MjYxMWY3MThiMDJjYmI0YWU5YzQ0NzI0OGQwMzYyN2NmNzZhZTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvT/t8XL8S9zOC6cqD5sifBfnoqk
gEzuMH2uee5Qi8RT3NgCHHZLCyQWCVJCFnGNurfUvtlvp26dm5CVVI6TC44+76Fj
5cR68tL2AZZpaph20wjC9FtIKUfVR7Qlx8ySf/FiRjH+/tZ+SgSDipv2NrF9I2Ir
raMBPsiq7AMxJYW4XGYQCIUbXNsgu+jBYXVkR8gblXpY3M3YI0xgaOlls6uYtCh2
kDrj9OcIZyKnhvqTcxJRckdJ3sS9DAP2/+zXSuHn4d06o1d9l2dxgIxlpvivOMFX
RJCNHwJBOpJDRGeRW5X9ka9nyWLAyUljfqMZa0V9oC9i3TL1fTDGrfHuSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJhH3GLAsu0rpxEckjQNifPdq5TMB8GA1UdIwQY
MBaAFBEQFM6K040VNQCW1UnuHFgF0J3IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJBVXpvclRqUlUxQUpiVlNlNGNXQVhRbmNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9kNmM3NTItYWE0Yi00ZmE3LWFiMWYt
OTFhMzk0Njg0NjQ0LzEvRVJBVXpvclRqUlUxQUpiVlNlNGNXQVhRbmNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9kNmM3NTItYWE0Yi00ZmE3LWFiMWYtOTFhMzk0Njg0NjQ0
LzEvRVJBVXpvclRqUlUxQUpiVlNlNGNXQVhRbmNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiF1eYwQY
izH2JmctZlEC0I5+j9/pfVn/OKeaqWOlqQKv+32whjoI+H5kqr0BrsbbnR5SYiGW
sokIBrdF2cDDbOib66nbT4bznlEgjNl5QeGwXtCJYeGM1t6YUX7vXiCfEZUrPNMY
+/tWKiqouvAbH2lnUNz6ctGG7w2Dm6mEpiBJ79ZZ1Pm94rO6HLMLVkGpaihAYbkF
mqMOZ4ek2shBVg7r2AM0NIEuW//NujO/VV9G8Jq9Y5cdE/pvanMx13aW1N+D5jmQ
ZDeW6SxZIhDteVnKeX12ajrVOa90CCk6PPbvHKEzRZuueKRku1yGuUJtS3qDsVlh
LwssUzlZQIVo3g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:01:12 2026 by rpki-client