Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
File: ERxtryd8JzXN7koMheNshcJdPD0.mft (raw, json)
Hash identifier: 0rdSHcADxm8/KQltiGoKM2SbCZlLl9OR3Y8eLD9Z7kQ=
Subject key identifier: 88:B8:DA:50:C6:12:BF:FF:7E:F7:2F:37:61:88:1E:D4:A9:86:81:1C
Authority key identifier: 11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
Certificate issuer: /CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Certificate serial: 01A140834D54AA8A1D9C73C4D87B34A4F405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
Manifest number: 065D
Signing time: Thu 15 Oct 2026 17:01:49 +0000
Manifest this update: Thu 15 Oct 2026 17:01:49 +0000
Manifest next update: Fri 16 Oct 2026 17:01:49 +0000
Files and hashes: 1: 630LgHaZLmK9ap31ZvpR1GPzzqg.roa (hash: YQBSu1OM6liETQJDGjOpqHrROGN5J8OImUtJolzoJik=)
2: ERxtryd8JzXN7koMheNshcJdPD0.crl (hash: GmfefEx8mMec70SFAvYUipckljVVjHM0tybARfVBI38=)
3: _4M4oq0S8mIZa0V69_lse01j-Sk.roa (hash: NZU7UkxZ6lsoZXHjmmCZKMcfUdhd7kq2mJZpnareMGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:83:4d:54:aa:8a:1d:9c:73:c4:d8:7b:34:a4:f4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Validity
Not Before: Oct 15 17:01:49 2026 GMT
Not After : Oct 16 17:01:49 2026 GMT
Subject: CN=88b8da50c612bfff7ef72f3761881ed4a986811c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b2:fb:65:c9:1f:e6:32:36:81:59:a8:35:78:
75:0d:79:c1:b8:55:76:0e:98:49:3a:2b:30:0f:bd:
87:50:6e:88:f7:8c:49:b3:92:8e:6a:10:32:09:50:
8c:4f:1f:58:79:51:22:90:b4:b0:8e:d6:1e:02:09:
e3:d3:79:9c:72:d6:6a:88:b0:aa:1d:65:75:52:c2:
70:90:6f:49:04:2e:2f:e7:74:78:4d:fa:7b:3d:0e:
05:5f:27:54:4e:8d:e5:ef:fe:d2:6c:3a:7e:c2:f7:
2a:5a:36:a6:32:69:05:db:a3:cb:19:92:3e:ff:42:
d9:d0:20:ce:66:0c:53:e5:52:6e:ae:6a:48:d2:37:
7c:f3:1f:d0:ef:27:16:55:a1:8a:96:a8:e0:28:c9:
ac:a6:57:2c:2e:13:ca:1f:30:9b:bd:8f:9e:97:34:
c4:0c:52:e4:2e:48:fb:ac:66:3b:c1:b6:4e:50:31:
0e:66:ee:02:89:ca:e6:fd:3d:eb:d5:ce:5f:d3:6f:
b3:16:8f:ca:28:13:c8:c4:4a:51:42:de:1b:1e:0f:
e4:4c:5c:86:fc:a1:c5:6b:1a:55:bc:b9:1f:06:f8:
57:d3:a4:6c:d9:f0:3f:17:de:4b:54:f2:86:a7:8d:
8b:2d:30:ae:44:47:43:8d:f5:56:02:f8:dc:57:29:
be:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B8:DA:50:C6:12:BF:FF:7E:F7:2F:37:61:88:1E:D4:A9:86:81:1C
X509v3 Authority Key Identifier:
keyid:11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ff:11:99:a9:5a:5e:fd:00:9f:1d:40:5e:61:a6:e1:51:f0:
2d:4d:2e:78:e4:5a:f8:6e:48:eb:30:9a:83:7b:61:f5:14:c4:
0a:f9:0e:e4:26:e7:17:83:47:ef:46:bf:70:2d:f9:79:52:bb:
19:43:c3:11:4a:c8:3e:49:5e:9e:77:34:ff:b8:d0:90:84:41:
df:d8:c7:5c:a7:f2:7e:24:8b:41:3d:17:8d:aa:eb:fe:a3:90:
f3:66:90:eb:db:ba:5b:3b:9b:c3:95:fa:b7:ec:6d:90:40:fa:
e3:d3:6c:ee:81:b4:44:99:2e:3e:ba:60:76:d7:e3:df:64:ee:
55:56:aa:64:c2:7f:4d:18:bb:b5:69:6e:95:47:1f:2a:e4:99:
34:d8:89:0a:bd:47:04:41:b3:ac:df:3f:07:af:df:c5:46:07:
f0:c1:02:25:50:bf:d7:ca:52:c8:89:82:2d:ae:a9:8b:3b:7e:
63:58:b8:7d:71:78:f1:6f:e9:04:e0:c2:54:6a:20:b0:cb:94:
7f:d3:27:09:cd:b9:8f:96:77:d9:2f:70:de:15:d9:0f:ca:41:
9c:a1:ee:04:0c:5e:c5:bb:22:9a:f2:7f:dd:a4:7d:21:17:4f:
99:b4:e5:2e:0a:da:2d:b3:d0:18:be:93:95:88:65:d7:77:e2:
74:8f:8b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:51:11 2026 by rpki-client