Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
File: lER-sxl6ox5-aEnxavVaslMB-oI.mft (raw, json)
Hash identifier: u6twuKJ7SvYR97+bO3/x8W0d3CFUq0M92XMOIsWetZI=
Subject key identifier: E7:5A:12:88:11:2A:F1:6E:13:C1:CF:D3:55:D3:6D:D3:5A:C6:39:65
Authority key identifier: 94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82
Certificate issuer: /CN=94447eb3197aa31e7e6849f16af55ab25301fa82
Certificate serial: 019D382E826281CC5AAA3FBDAC7BDE06B040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
Manifest number: 0808
Signing time: Sun 29 Mar 2026 06:01:05 +0000
Manifest this update: Sun 29 Mar 2026 06:01:05 +0000
Manifest next update: Mon 30 Mar 2026 06:01:05 +0000
Files and hashes: 1: DQ38TRCVnXEsSBsusAK4wA5cM7E.roa (hash: LYfpTTUhsNjJzAKWOxzbHYKnI3ctEnoDEml27mltRUs=)
2: lER-sxl6ox5-aEnxavVaslMB-oI.crl (hash: 8FkUhMOPQMbsqM4ENhW4D9hCr5ARrPA5lL3ImSbeJH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:82:62:81:cc:5a:aa:3f:bd:ac:7b:de:06:b0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94447eb3197aa31e7e6849f16af55ab25301fa82
Validity
Not Before: Mar 29 06:01:05 2026 GMT
Not After : Mar 30 06:01:05 2026 GMT
Subject: CN=e75a1288112af16e13c1cfd355d36dd35ac63965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:82:3d:f8:42:98:3b:60:42:a0:7e:b0:9b:d4:
76:83:8e:b4:51:ba:b7:22:1d:59:c6:19:b2:5d:a3:
a8:b3:ca:62:02:25:e3:18:3a:d6:5d:3a:f8:1b:96:
66:08:d1:07:35:e1:6a:8f:dc:7f:57:a7:b5:22:43:
8a:f9:c5:08:f0:6f:d0:30:12:b6:ed:9a:12:ab:6a:
85:4a:e6:0e:2c:b5:69:13:b8:26:be:d2:60:ec:f4:
cb:6e:83:e9:e1:ec:eb:b5:a9:03:33:0e:07:6a:01:
c1:d6:44:17:93:53:ec:83:8c:63:fe:7c:13:b6:11:
f0:7c:fb:f6:c4:1d:0e:46:12:d5:3a:d0:25:bc:97:
64:40:45:78:04:1a:dc:af:5f:25:df:e8:54:31:f1:
d9:9a:a0:78:28:67:b7:9b:4e:83:f5:89:2e:fb:b4:
63:ef:5d:b5:bb:1c:d1:2e:3b:da:b0:49:a3:95:d9:
bf:89:3b:07:f3:42:31:ad:1b:95:1e:80:94:a4:59:
09:b4:4d:a0:38:76:f8:2a:7c:77:6b:ac:62:a4:b5:
49:9a:f2:fd:0a:60:8d:e1:a5:eb:95:cc:c7:fe:4f:
bf:19:e7:37:5d:c0:1d:27:5c:55:5f:0e:26:f6:de:
28:32:c1:76:cf:05:1d:2e:d1:a0:68:74:b8:89:fc:
06:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5A:12:88:11:2A:F1:6E:13:C1:CF:D3:55:D3:6D:D3:5A:C6:39:65
X509v3 Authority Key Identifier:
keyid:94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c4:18:13:fb:ce:c8:7a:05:0a:52:22:5d:95:9a:4e:06:b1:
9b:5e:ca:13:85:21:68:2c:1e:c4:b1:30:bb:e1:35:8b:9a:08:
fb:f6:b6:49:7a:bf:d8:62:a4:70:83:cf:10:d6:e7:ae:38:10:
2d:60:49:ca:d8:5d:70:79:03:48:10:43:c0:7f:e2:13:f4:08:
13:61:ea:6e:d9:0c:7b:9a:1f:8f:6e:38:9b:72:6d:9e:ff:bb:
b2:e4:53:75:8e:54:b1:95:76:88:98:f0:b5:24:a3:5e:63:30:
7f:f7:07:d8:96:33:cc:1e:6f:39:7e:93:b3:03:0d:8d:d6:3b:
60:69:49:ac:28:49:a7:63:ef:06:3f:bc:21:3b:3c:32:11:01:
f2:b5:5f:d5:e6:dd:ea:79:fd:5d:f4:9c:ec:2e:d2:10:ca:21:
5e:ea:92:39:4b:ea:ad:f0:f7:a8:75:a2:6f:15:da:93:1f:58:
53:7e:0b:32:f7:6b:a8:94:bb:aa:69:1f:14:03:fc:2f:2e:bd:
4b:fb:5f:ce:0d:d5:60:86:6d:fa:c2:e8:05:b9:00:3c:47:05:
55:2c:7f:ca:6c:e9:ee:f2:d3:cf:02:2e:b7:0c:26:20:be:d9:
c0:46:2c:21:a9:c7:d5:16:41:c6:c1:e9:0a:0e:9d:d5:5c:62:
d8:94:1c:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LoJigcxaqj+9rHveBrBAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NDQ3ZWIzMTk3YWEzMWU3ZTY4NDlmMTZhZjU1YWIyNTMw
MWZhODIwHhcNMjYwMzI5MDYwMTA1WhcNMjYwMzMwMDYwMTA1WjAzMTEwLwYDVQQD
EyhlNzVhMTI4ODExMmFmMTZlMTNjMWNmZDM1NWQzNmRkMzVhYzYzOTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYI9+EKYO2BCoH6wm9R2g460Ubq3
Ih1ZxhmyXaOos8piAiXjGDrWXTr4G5ZmCNEHNeFqj9x/V6e1IkOK+cUI8G/QMBK2
7ZoSq2qFSuYOLLVpE7gmvtJg7PTLboPp4ezrtakDMw4HagHB1kQXk1Psg4xj/nwT
thHwfPv2xB0ORhLVOtAlvJdkQEV4BBrcr18l3+hUMfHZmqB4KGe3m06D9Yku+7Rj
7121uxzRLjvasEmjldm/iTsH80IxrRuVHoCUpFkJtE2gOHb4Knx3a6xipLVJmvL9
CmCN4aXrlczH/k+/Gec3XcAdJ1xVXw4m9t4oMsF2zwUdLtGgaHS4ifwGIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdaEogRKvFuE8HP01XTbdNaxjllMB8GA1UdIwQY
MBaAFJREfrMZeqMefmhJ8Wr1WrJTAfqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEVSLXN4bDZveDUtYUVueGF2VmFzbE1CLW9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84ZDBiMDUtMjYzZi00MDNhLWFiZjQt
MjM4YmRlMGUxZWY3LzEvbEVSLXN4bDZveDUtYUVueGF2VmFzbE1CLW9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC84ZDBiMDUtMjYzZi00MDNhLWFiZjQtMjM4YmRlMGUxZWY3
LzEvbEVSLXN4bDZveDUtYUVueGF2VmFzbE1CLW9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqsQYE/vO
yHoFClIiXZWaTgaxm17KE4UhaCwexLEwu+E1i5oI+/a2SXq/2GKkcIPPENbnrjgQ
LWBJythdcHkDSBBDwH/iE/QIE2HqbtkMe5ofj244m3Jtnv+7suRTdY5UsZV2iJjw
tSSjXmMwf/cH2JYzzB5vOX6TswMNjdY7YGlJrChJp2PvBj+8ITs8MhEB8rVf1ebd
6nn9XfSc7C7SEMohXuqSOUvqrfD3qHWibxXakx9YU34LMvdrqJS7qmkfFAP8Ly69
S/tfzg3VYIZt+sLoBbkAPEcFVSx/ymzp7vLTzwIutwwmIL7ZwEYsIanH1RZBxsHp
Cg6d1Vxi2JQcPg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:50 2026 by rpki-client