Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
File: ERxtryd8JzXN7koMheNshcJdPD0.mft (raw, json)
Hash identifier: ISNlao6ceSGlv80Nw9+ULHlPFg4OJq3H3i4QuAwjCpo=
Subject key identifier: 62:02:3C:33:1B:41:FF:9B:8E:B7:C5:EB:A2:EC:7B:AC:B4:E6:53:31
Authority key identifier: 11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
Certificate issuer: /CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Certificate serial: 019FA33C8678013442EC3B941473F17A5BD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
Manifest number: 0587
Signing time: Mon 27 Jul 2026 11:01:20 +0000
Manifest this update: Mon 27 Jul 2026 11:01:20 +0000
Manifest next update: Tue 28 Jul 2026 11:01:20 +0000
Files and hashes: 1: 630LgHaZLmK9ap31ZvpR1GPzzqg.roa (hash: YQBSu1OM6liETQJDGjOpqHrROGN5J8OImUtJolzoJik=)
2: ERxtryd8JzXN7koMheNshcJdPD0.crl (hash: gMJJxAXRGLynt0mfzAKypLDdH6jwtE0FYTEYqXpQe/w=)
3: _4M4oq0S8mIZa0V69_lse01j-Sk.roa (hash: NZU7UkxZ6lsoZXHjmmCZKMcfUdhd7kq2mJZpnareMGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:86:78:01:34:42:ec:3b:94:14:73:f1:7a:5b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Validity
Not Before: Jul 27 11:01:20 2026 GMT
Not After : Jul 28 11:01:20 2026 GMT
Subject: CN=62023c331b41ff9b8eb7c5eba2ec7bacb4e65331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:19:47:5f:33:91:1a:6c:d9:6e:c8:f5:73:88:
13:5e:c8:96:d0:c6:51:02:3a:c1:aa:de:0f:50:f7:
b4:ba:54:8d:30:67:1d:7c:6a:0c:93:3f:2a:3d:eb:
12:d1:de:49:bc:59:3c:98:1a:cf:af:8f:6b:d6:4a:
9a:1c:78:c6:72:ce:eb:fd:37:a8:9c:72:44:0e:3b:
84:7c:aa:d3:c2:ad:23:70:16:69:e2:69:0f:13:25:
e6:0e:26:1d:1a:40:b3:25:61:9b:ef:a5:54:7b:35:
f8:ca:cc:a8:fa:4b:e3:48:12:ff:49:80:01:a0:69:
54:bf:93:79:39:c7:e2:2c:04:c3:78:e6:ed:f6:5c:
d3:ba:84:03:4a:34:74:4c:e6:9b:63:55:3a:48:95:
23:f5:9c:1f:85:82:26:8c:cb:62:71:d7:65:07:b5:
1d:fc:7a:cb:3b:79:81:f2:cf:d5:ea:22:b4:fa:24:
65:72:e9:b5:68:98:b6:76:5a:47:0c:64:05:a3:b2:
2e:07:86:35:8f:f7:83:9a:63:a8:1f:60:69:2f:9b:
87:75:5e:f8:0b:43:e1:bb:ef:55:57:62:89:50:26:
b0:ee:8c:50:8f:ff:33:dc:4a:c9:1d:ec:cd:36:4c:
bb:a2:82:25:fa:ec:f3:e4:34:32:7a:21:31:68:2a:
5c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:02:3C:33:1B:41:FF:9B:8E:B7:C5:EB:A2:EC:7B:AC:B4:E6:53:31
X509v3 Authority Key Identifier:
keyid:11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c1:5f:7a:92:57:e6:58:09:f5:8d:1a:52:97:3f:c8:5e:75:
00:83:cb:f8:29:77:06:87:1b:5e:99:e1:8a:29:36:0f:81:b3:
d7:0c:9d:03:f0:10:a7:1b:87:51:29:fe:5c:58:69:87:4f:f6:
e4:b8:77:84:95:ae:fb:17:b6:42:91:6c:bd:10:8c:a9:a3:58:
67:5e:df:49:b0:7e:9e:db:c7:57:5a:8f:8a:2d:b3:d4:a5:c3:
e7:c4:0d:d3:a2:3f:dd:d4:73:b4:29:03:a9:3e:f1:5a:ea:b6:
9c:b5:e3:aa:ed:95:69:e3:94:31:dd:c1:fd:8d:98:2b:19:c9:
a4:ca:0f:36:99:e1:57:6a:99:16:86:09:37:e4:0c:d5:d5:f7:
ce:7d:4f:ba:c1:46:06:2b:a9:18:9a:60:e5:f0:bc:fd:21:1e:
95:e6:b7:67:02:39:dd:19:3c:c3:0e:71:c8:6b:b5:30:c5:2c:
f9:48:60:4f:ff:8a:5c:75:cb:a2:49:75:cd:75:53:7f:10:eb:
58:19:fa:1d:d3:bc:ff:ac:45:c0:80:1d:af:42:2f:44:6a:d2:
77:fd:75:95:f3:e3:94:c9:21:53:38:e7:fc:d4:0e:d4:bc:8e:
9b:34:79:21:eb:85:a8:f6:a1:f6:3e:92:b9:a6:4c:f4:2b:b4:
c0:3c:6f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:47:12 2026 by rpki-client