Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
File: ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft (raw, json)
Hash identifier: 3y05AEf+hWbDLlvy2Hj4ZztgzRPHLUFeIhX3PZkGFgc=
Subject key identifier: FD:D2:4B:0A:9D:C3:94:C3:85:94:46:04:4E:B9:AE:43:83:BF:5D:1B
Authority key identifier: 11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
Certificate issuer: /CN=111b09710acdb72086d658e90d8f025fa6a111b1
Certificate serial: 01A0024A8712ECDC39DC4307A2E2E50247CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
Manifest number: 0CA0
Signing time: Fri 14 Aug 2026 22:00:33 +0000
Manifest this update: Fri 14 Aug 2026 22:00:33 +0000
Manifest next update: Sat 15 Aug 2026 22:00:33 +0000
Files and hashes: 1: 185JWtL1nJVygOFr95-RQtms_58.roa (hash: KasP2muj3cS9GbttmeKweMSTbVCW9PhTnMbBxoVVNls=)
2: ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl (hash: mSxpetieppK1TlamAiuaDH/W97McufP4jOh7dizeoxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:87:12:ec:dc:39:dc:43:07:a2:e2:e5:02:47:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111b09710acdb72086d658e90d8f025fa6a111b1
Validity
Not Before: Aug 14 22:00:33 2026 GMT
Not After : Aug 15 22:00:33 2026 GMT
Subject: CN=fdd24b0a9dc394c3859446044eb9ae4383bf5d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1b:ac:75:f6:57:3d:04:b5:c1:5f:c9:57:e8:
70:7a:1b:73:18:36:02:a6:f3:08:84:4e:98:da:68:
7a:b9:7d:4d:1e:03:2a:fb:a7:42:97:35:dc:9f:7b:
66:26:6c:fd:4e:a3:fd:0d:74:6b:49:1b:24:39:03:
cd:f5:bb:2c:c0:28:03:e5:f0:ea:17:73:7b:30:59:
64:46:f4:b3:bd:a4:20:cd:ee:42:9b:e6:48:23:b5:
90:db:df:8c:31:60:1b:e6:44:6e:95:c1:9b:e1:a3:
a1:79:0c:52:82:1b:99:c7:bb:77:a3:97:31:93:7d:
fa:63:b2:f5:04:9a:25:48:81:c0:f2:24:60:a9:a8:
06:16:02:cc:47:2f:a3:87:14:f5:99:aa:f3:55:45:
9b:6d:d7:fe:fc:f2:b9:68:c1:7e:3a:fb:7f:c9:c5:
a7:0a:a9:70:91:d4:e2:5c:4b:4d:79:f2:9d:bc:ca:
c5:35:58:37:44:af:89:4f:b8:7e:2b:f0:70:7e:f7:
7b:09:ed:86:7a:a5:52:17:cb:59:d6:cb:c4:bf:fe:
2e:c9:75:2b:51:7a:eb:dd:cb:8b:1b:cf:be:c9:8a:
36:ea:96:c3:ec:84:1a:c3:fb:a9:bd:43:f8:30:99:
76:51:ea:37:d8:f0:bd:02:26:05:ec:3f:8f:e9:97:
91:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D2:4B:0A:9D:C3:94:C3:85:94:46:04:4E:B9:AE:43:83:BF:5D:1B
X509v3 Authority Key Identifier:
keyid:11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9f:09:e0:b5:4b:b9:73:d2:9b:86:2e:f2:29:ff:f8:db:e1:
8c:2d:6b:0c:e7:48:69:c9:1f:f5:d0:e2:05:2e:8d:ff:36:3e:
16:bd:d5:29:e1:0d:a9:64:e6:f0:aa:17:3d:96:6f:d3:f7:d9:
bc:ca:f9:a1:99:8f:eb:8d:36:ed:af:36:a2:f9:ec:01:f0:48:
e5:04:5c:af:a5:89:4d:6b:52:91:ba:5e:95:96:c4:81:2b:2d:
6e:d8:78:27:2e:bd:4b:84:11:65:7e:b1:fe:dc:6f:fe:2d:1f:
b6:79:5e:73:96:ae:57:35:74:22:32:37:33:1b:9a:3c:06:b3:
2e:16:b6:4c:ad:68:94:12:d6:bd:91:53:5c:ca:30:d2:2c:e4:
24:db:b3:4c:2a:5c:c2:5b:e5:b8:79:5a:ca:d4:1c:51:d1:54:
eb:da:73:6c:f7:ee:c6:c8:3f:5e:15:34:bc:03:f8:83:5b:23:
ad:21:49:d1:78:34:5b:31:d0:f8:75:9c:21:7e:0e:db:4a:06:
50:e7:9c:fc:3e:9e:67:71:cc:d0:c5:f6:fe:b9:c4:c0:10:fa:
f8:1d:d5:55:44:45:ae:f1:36:19:13:16:9d:74:1b:ba:81:d6:
81:0f:d0:9e:29:0f:b0:35:e0:f8:32:a9:07:87:f7:a1:b1:ca:
be:f5:98:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACSocS7Nw53EMHouLlAkfOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMWIwOTcxMGFjZGI3MjA4NmQ2NThlOTBkOGYwMjVmYTZh
MTExYjEwHhcNMjYwODE0MjIwMDMzWhcNMjYwODE1MjIwMDMzWjAzMTEwLwYDVQQD
EyhmZGQyNGIwYTlkYzM5NGMzODU5NDQ2MDQ0ZWI5YWU0MzgzYmY1ZDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBusdfZXPQS1wV/JV+hwehtzGDYC
pvMIhE6Y2mh6uX1NHgMq+6dClzXcn3tmJmz9TqP9DXRrSRskOQPN9bsswCgD5fDq
F3N7MFlkRvSzvaQgze5Cm+ZII7WQ29+MMWAb5kRulcGb4aOheQxSghuZx7t3o5cx
k336Y7L1BJolSIHA8iRgqagGFgLMRy+jhxT1marzVUWbbdf+/PK5aMF+Ovt/ycWn
CqlwkdTiXEtNefKdvMrFNVg3RK+JT7h+K/Bwfvd7Ce2GeqVSF8tZ1svEv/4uyXUr
UXrr3cuLG8++yYo26pbD7IQaw/upvUP4MJl2Ueo32PC9AiYF7D+P6ZeRPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3SSwqdw5TDhZRGBE65rkODv10bMB8GA1UdIwQY
MBaAFBEbCXEKzbcghtZY6Q2PAl+moRGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjkt
N2JmMDM1NmE2YmFiLzEvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjktN2JmMDM1NmE2YmFi
LzEvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJ8J4LVL
uXPSm4Yu8in/+NvhjC1rDOdIackf9dDiBS6N/zY+Fr3VKeENqWTm8KoXPZZv0/fZ
vMr5oZmP64027a82ovnsAfBI5QRcr6WJTWtSkbpelZbEgSstbth4Jy69S4QRZX6x
/txv/i0ftnlec5auVzV0IjI3MxuaPAazLha2TK1olBLWvZFTXMow0izkJNuzTCpc
wlvluHlaytQcUdFU69pzbPfuxsg/XhU0vAP4g1sjrSFJ0Xg0WzHQ+HWcIX4O20oG
UOec/D6eZ3HM0MX2/rnEwBD6+B3VVURFrvE2GRMWnXQbuoHWgQ/QnikPsDXg+DKp
B4f3obHKvvWYnA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 01:12:03 2026 by rpki-client