Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
File: ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft (raw, json)
Hash identifier: f6MiaqcoWN8w8EByiq+RopsdWW0q+sEigM/9FOucmBc=
Subject key identifier: 59:04:0B:17:76:61:30:4A:73:29:73:5E:18:C4:C4:64:0D:6B:87:38
Authority key identifier: 11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
Certificate issuer: /CN=111b09710acdb72086d658e90d8f025fa6a111b1
Certificate serial: 019E30E0656DFFCB7767B03EBBBD4FC61C60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
Manifest number: 0BAF
Signing time: Sat 16 May 2026 13:01:12 +0000
Manifest this update: Sat 16 May 2026 13:01:12 +0000
Manifest next update: Sun 17 May 2026 13:01:12 +0000
Files and hashes: 1: 185JWtL1nJVygOFr95-RQtms_58.roa (hash: KasP2muj3cS9GbttmeKweMSTbVCW9PhTnMbBxoVVNls=)
2: ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl (hash: 4BFvhvGvvmUUhbJvg6LkYE2cKNZ6A0T7vytr7P1f9BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:65:6d:ff:cb:77:67:b0:3e:bb:bd:4f:c6:1c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111b09710acdb72086d658e90d8f025fa6a111b1
Validity
Not Before: May 16 13:01:12 2026 GMT
Not After : May 17 13:01:12 2026 GMT
Subject: CN=59040b177661304a7329735e18c4c4640d6b8738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:81:34:38:52:c2:82:77:96:ac:71:9c:05:0f:
d2:02:3d:e5:3a:44:ca:94:c6:64:6e:6c:28:1b:cf:
55:ca:e3:3f:b8:3e:3e:5d:ee:22:f9:c6:c7:c1:3e:
1e:a5:47:21:ec:0f:e9:ac:bd:b4:17:8f:3a:70:b1:
7d:aa:2e:66:ca:27:f8:9e:0a:1b:09:eb:52:bc:97:
25:a1:05:0f:2a:9e:fb:16:22:e3:6f:5d:fa:f0:47:
e7:69:aa:88:f1:5a:7f:86:de:7c:e0:b3:d2:fc:30:
a7:d0:b4:c2:b1:c9:41:65:2a:30:88:a8:d7:45:d0:
14:c6:e3:8c:bf:f0:66:31:ad:8c:56:7f:cb:5f:be:
99:7c:d3:a1:89:b9:16:4e:7f:3e:1f:53:6b:f5:6d:
8f:cc:02:6d:cd:eb:81:08:33:f8:cd:9e:44:86:f9:
a6:b3:3c:c6:14:da:3b:51:14:8d:f9:13:5d:94:ff:
ca:1a:84:f0:cc:dc:d8:2d:66:74:cb:62:2a:5f:37:
69:32:53:2e:e6:cb:d0:f0:71:a3:6c:4d:08:10:9a:
80:61:c9:ee:a3:4b:a6:08:5b:ef:d6:f7:4b:cd:be:
94:4e:d3:6e:3c:77:f7:13:3d:b1:66:dc:46:5e:87:
c1:f8:79:7a:39:dd:af:2e:02:70:20:9c:e7:17:91:
f2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:04:0B:17:76:61:30:4A:73:29:73:5E:18:C4:C4:64:0D:6B:87:38
X509v3 Authority Key Identifier:
keyid:11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:6f:1c:69:78:40:a7:34:70:c9:1a:0d:41:6d:77:61:4c:99:
b2:23:4d:77:58:eb:1f:3a:48:03:26:e8:70:45:ad:58:28:a6:
a3:14:27:b4:6d:0f:e1:68:8d:4d:d5:7e:b0:6b:6e:4c:3f:e9:
71:6c:a9:e2:c7:64:88:24:17:1f:88:a4:b3:79:64:d3:48:fe:
2c:5e:c7:c2:36:aa:95:85:1c:44:76:38:9d:04:1c:df:1b:ce:
2e:58:c9:1b:61:66:27:95:4a:0e:7b:d9:ba:22:9c:a7:62:bf:
aa:2c:34:26:40:7c:22:dd:5b:29:73:b7:69:31:1b:3a:28:d2:
53:ec:8b:22:52:1d:1c:74:e9:ac:4b:64:77:8d:d5:a0:21:7c:
cc:71:00:54:1a:51:49:61:fc:92:39:eb:52:bc:dd:c0:69:46:
3f:4e:8f:9a:3a:87:ef:c6:76:45:9e:13:94:80:41:5d:c1:56:
64:a6:1e:32:2a:64:1e:68:a3:84:94:8c:b4:47:dc:79:47:04:
01:71:ac:f6:6e:86:d4:fb:c7:c1:08:a5:09:43:cb:8c:31:28:
0e:a4:d0:fb:fc:50:b2:db:26:e2:5f:3e:a1:85:84:ef:b7:e6:
4f:ae:a0:32:29:b4:e0:80:59:40:7d:0a:ff:3a:62:5b:f1:bc:
8c:78:41:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:29 2026 by rpki-client