Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
File: lER-sxl6ox5-aEnxavVaslMB-oI.mft (raw, json)
Hash identifier: fJdiynFJ4aum2fPA8NahbwoXrA0FxDRRNhhzFuEU4AQ=
Subject key identifier: 51:73:BF:40:C6:6A:0F:F1:BD:AF:8B:C9:98:B0:E0:A8:4C:CA:6C:2F
Authority key identifier: 94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82
Certificate issuer: /CN=94447eb3197aa31e7e6849f16af55ab25301fa82
Certificate serial: 019FCE94DE35F3BD5ED1A6D5B0D291B77094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
Manifest number: 095F
Signing time: Tue 04 Aug 2026 21:01:30 +0000
Manifest this update: Tue 04 Aug 2026 21:01:30 +0000
Manifest next update: Wed 05 Aug 2026 21:01:30 +0000
Files and hashes: 1: DQ38TRCVnXEsSBsusAK4wA5cM7E.roa (hash: LYfpTTUhsNjJzAKWOxzbHYKnI3ctEnoDEml27mltRUs=)
2: lER-sxl6ox5-aEnxavVaslMB-oI.crl (hash: QXkuHYyFwws3E4CKGP0RO12NLB+/DIRwxFPUDzTOZvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ce:94:de:35:f3:bd:5e:d1:a6:d5:b0:d2:91:b7:70:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94447eb3197aa31e7e6849f16af55ab25301fa82
Validity
Not Before: Aug 4 21:01:30 2026 GMT
Not After : Aug 5 21:01:30 2026 GMT
Subject: CN=5173bf40c66a0ff1bdaf8bc998b0e0a84cca6c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:45:20:23:44:1e:9f:d8:cb:26:3e:49:37:23:
4f:86:7e:b1:b6:f1:40:dd:d0:3c:83:de:8c:30:f4:
db:df:95:14:7a:84:4d:2f:ef:4a:02:93:da:00:e6:
4f:9c:6a:a5:5b:16:73:2e:36:2e:f6:28:51:de:fc:
46:28:91:b1:87:77:22:cc:20:0f:d7:71:ba:f2:a0:
28:54:7a:7c:3e:81:d7:da:df:f2:87:54:95:b8:c4:
28:c8:10:9f:13:c9:b2:93:72:b7:43:92:48:4e:27:
44:29:74:53:34:28:b2:c0:81:37:c2:87:73:90:a8:
cb:01:cc:79:22:62:bf:8c:34:6a:d6:d6:a7:36:e9:
ed:de:36:fc:2a:f5:dc:37:b6:73:5b:d7:6a:fd:ed:
db:6b:6a:cc:29:d6:ce:15:46:7e:eb:ca:2d:8b:09:
4f:e2:6c:6c:e7:6c:58:4b:2d:de:73:af:1a:c9:96:
96:88:38:08:eb:56:63:00:31:52:82:58:29:68:16:
2b:54:ea:c5:f5:0d:c5:7d:f9:1c:81:ee:91:32:4b:
2a:ea:0a:e8:e6:8d:25:5a:1a:53:cd:45:13:cb:e0:
98:e8:31:b5:07:dd:e8:d0:40:4a:10:cc:4f:53:19:
25:de:d2:48:f9:22:fe:c2:17:0d:6a:4c:d4:f9:6a:
f5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:73:BF:40:C6:6A:0F:F1:BD:AF:8B:C9:98:B0:E0:A8:4C:CA:6C:2F
X509v3 Authority Key Identifier:
keyid:94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b6:5a:21:73:96:2e:fe:09:c1:38:86:19:19:fb:24:9a:2f:
d4:83:92:cf:d2:d1:c6:72:f0:13:46:90:de:3d:9f:39:2f:28:
5b:13:56:b0:7d:78:0f:7f:dd:fd:a1:f2:5c:dd:a3:c0:47:a5:
c3:a4:f0:eb:f1:c3:d0:1b:02:68:a4:42:95:40:94:37:d2:c4:
b2:49:05:51:f7:50:2d:7e:0b:40:0c:33:60:80:11:39:9a:ad:
fb:75:71:52:71:c4:63:96:11:b2:80:75:40:1c:98:30:8f:93:
dd:e9:ca:52:7d:ef:62:f6:d8:1f:ef:d1:0f:53:40:71:2b:32:
85:a8:78:1b:5f:d8:3e:c9:aa:39:0b:97:2f:6d:a2:b5:7c:96:
e2:3a:1e:93:b8:ef:ab:39:1d:ff:a7:ad:28:50:cc:9e:45:b0:
e0:9b:97:2d:b0:95:06:0c:aa:bd:c4:4d:1c:16:fd:9f:55:fb:
01:66:97:68:66:1f:4e:14:4c:fe:39:59:62:50:74:8e:09:51:
9f:a1:5b:dc:22:8e:e5:58:e2:21:d5:11:0a:ad:3e:4f:b3:97:
a0:71:3c:48:fd:7b:7b:09:3b:02:6b:9a:3a:ca:1b:0e:22:25:
62:ed:5e:af:e6:c7:e7:56:58:06:49:0c:7f:0b:ec:de:f8:a2:
d1:db:9f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 22:51:27 2026 by rpki-client