Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
File: ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft (raw, json)
Hash identifier: +zckxZ91Iga7ztu72sNze1XPL9p5FHiXMdjuuUJAQFE=
Subject key identifier: B7:6F:B8:C0:7B:BF:9B:D5:CB:08:A5:81:C9:C0:BB:C7:7B:C2:8B:70
Authority key identifier: 11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
Certificate issuer: /CN=111b09710acdb72086d658e90d8f025fa6a111b1
Certificate serial: 019D37BFF5A281605BD9E3000389DD43BEE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
Manifest number: 0B2E
Signing time: Sun 29 Mar 2026 04:00:20 +0000
Manifest this update: Sun 29 Mar 2026 04:00:20 +0000
Manifest next update: Mon 30 Mar 2026 04:00:20 +0000
Files and hashes: 1: 185JWtL1nJVygOFr95-RQtms_58.roa (hash: KasP2muj3cS9GbttmeKweMSTbVCW9PhTnMbBxoVVNls=)
2: ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl (hash: XUOu3GH5qtMnuyYBh9lYC2EuDWV/cH7hFbJPTQRgMHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:f5:a2:81:60:5b:d9:e3:00:03:89:dd:43:be:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111b09710acdb72086d658e90d8f025fa6a111b1
Validity
Not Before: Mar 29 04:00:20 2026 GMT
Not After : Mar 30 04:00:20 2026 GMT
Subject: CN=b76fb8c07bbf9bd5cb08a581c9c0bbc77bc28b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bf:26:20:07:6b:da:67:d2:ec:b8:0e:93:9c:
7f:c3:26:47:fa:78:02:43:75:07:a3:7d:f8:07:52:
ab:14:3a:33:16:fe:71:fb:a1:d8:ba:c8:6d:a4:ef:
48:5e:9d:d3:7e:44:04:5c:98:6a:46:33:3a:c6:c5:
ef:fe:49:01:a1:11:b9:b7:4d:50:79:d9:8a:1d:69:
78:38:0c:80:a9:cd:19:25:c8:f6:83:0b:ac:8c:21:
bf:d6:85:38:48:bb:14:95:08:06:55:89:db:0f:e5:
63:92:dd:71:78:ed:80:e3:0f:59:f9:7c:74:78:df:
71:b9:72:de:40:a4:cb:0a:50:b6:18:da:a2:4e:6b:
65:eb:bd:45:fe:61:13:2a:eb:4d:04:54:bb:39:74:
8c:69:b6:ca:60:80:fb:a6:4e:e3:59:6f:46:33:10:
87:20:7f:e0:a0:85:4c:54:21:7e:aa:ad:34:47:65:
ae:4f:3a:a5:8c:e5:ce:37:9a:43:7b:c3:09:d3:66:
dd:b8:e6:d9:a8:83:90:f3:ef:b2:ff:c1:2e:a9:bb:
a2:cc:b6:02:68:6b:db:86:ce:70:ea:01:7a:c2:92:
cc:18:c0:d2:44:c4:8f:6f:ae:c6:c4:2b:a0:2a:82:
ca:76:8a:8a:b4:2b:93:77:13:75:a8:14:6b:b3:9d:
7d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6F:B8:C0:7B:BF:9B:D5:CB:08:A5:81:C9:C0:BB:C7:7B:C2:8B:70
X509v3 Authority Key Identifier:
keyid:11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:4c:71:1f:f2:9c:80:cc:05:65:ea:cb:92:84:33:b6:1b:a7:
0f:35:1c:df:f2:66:39:f2:d4:34:9f:cd:89:98:50:3f:4f:37:
12:e3:e4:15:17:0c:10:a0:57:4f:7f:8f:59:61:97:c8:32:33:
71:58:84:d0:69:d0:54:26:c5:ea:9d:0c:a7:13:f6:68:a8:da:
2a:f0:4e:98:66:b5:a5:b9:98:36:91:06:31:b8:e9:89:6b:0b:
45:16:2e:5d:fe:02:03:e0:61:4d:7d:3e:7b:70:e4:4d:b8:21:
92:a4:b4:69:ae:3b:dc:a3:67:6c:fc:cf:7e:bf:67:66:ff:34:
a7:16:7a:35:2d:aa:b1:d8:9c:de:c5:59:99:4d:f3:5e:82:db:
a9:14:8f:c3:32:4d:1a:b9:77:ab:68:2a:1d:e0:b7:08:5e:aa:
5d:bb:63:77:a0:5d:f4:a7:c8:8a:53:32:c3:56:9b:6a:f3:6d:
33:8b:19:19:bf:20:bd:91:cd:58:6e:e2:6b:e4:a8:d8:8c:b2:
f9:4a:be:13:f6:51:c4:a8:5b:ea:7b:1e:80:b8:6d:5f:ed:aa:
b6:dd:b7:67:40:f7:00:75:41:89:73:ff:13:02:78:06:89:e7:
37:be:a1:eb:8d:2d:06:7a:69:ff:fd:f8:a2:a6:69:3e:41:0e:
8b:51:f5:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03v/WigWBb2eMAA4ndQ77iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMWIwOTcxMGFjZGI3MjA4NmQ2NThlOTBkOGYwMjVmYTZh
MTExYjEwHhcNMjYwMzI5MDQwMDIwWhcNMjYwMzMwMDQwMDIwWjAzMTEwLwYDVQQD
EyhiNzZmYjhjMDdiYmY5YmQ1Y2IwOGE1ODFjOWMwYmJjNzdiYzI4YjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz78mIAdr2mfS7LgOk5x/wyZH+ngC
Q3UHo334B1KrFDozFv5x+6HYushtpO9IXp3TfkQEXJhqRjM6xsXv/kkBoRG5t01Q
edmKHWl4OAyAqc0ZJcj2gwusjCG/1oU4SLsUlQgGVYnbD+Vjkt1xeO2A4w9Z+Xx0
eN9xuXLeQKTLClC2GNqiTmtl671F/mETKutNBFS7OXSMabbKYID7pk7jWW9GMxCH
IH/goIVMVCF+qq00R2WuTzqljOXON5pDe8MJ02bduObZqIOQ8++y/8EuqbuizLYC
aGvbhs5w6gF6wpLMGMDSRMSPb67GxCugKoLKdoqKtCuTdxN1qBRrs519VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLdvuMB7v5vVywilgcnAu8d7wotwMB8GA1UdIwQY
MBaAFBEbCXEKzbcghtZY6Q2PAl+moRGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjkt
N2JmMDM1NmE2YmFiLzEvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjktN2JmMDM1NmE2YmFi
LzEvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckxxH/Kc
gMwFZerLkoQzthunDzUc3/JmOfLUNJ/NiZhQP083EuPkFRcMEKBXT3+PWWGXyDIz
cViE0GnQVCbF6p0MpxP2aKjaKvBOmGa1pbmYNpEGMbjpiWsLRRYuXf4CA+BhTX0+
e3DkTbghkqS0aa473KNnbPzPfr9nZv80pxZ6NS2qsdic3sVZmU3zXoLbqRSPwzJN
Grl3q2gqHeC3CF6qXbtjd6Bd9KfIilMyw1abavNtM4sZGb8gvZHNWG7ia+So2Iyy
+Uq+E/ZRxKhb6nsegLhtX+2qtt23Z0D3AHVBiXP/EwJ4BonnN76h640tBnpp//34
oqZpPkEOi1H1Tw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:30 2026 by rpki-client