Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
File: lER-sxl6ox5-aEnxavVaslMB-oI.mft (raw, json)
Hash identifier: 7BGsFIj8adlc3tDZHgyleJNw7mDZEYUwOq4ZhRp2OfQ=
Subject key identifier: D3:16:22:84:8F:91:2A:EB:B9:0D:8C:A9:93:ED:31:C4:66:BA:76:7E
Authority key identifier: 94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82
Certificate issuer: /CN=94447eb3197aa31e7e6849f16af55ab25301fa82
Certificate serial: 01A19E10CC656976F0871396F4E7CE6E5691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
Manifest number: 0A4F
Signing time: Mon 02 Nov 2026 21:01:03 +0000
Manifest this update: Mon 02 Nov 2026 21:01:03 +0000
Manifest next update: Tue 03 Nov 2026 21:01:03 +0000
Files and hashes: 1: DQ38TRCVnXEsSBsusAK4wA5cM7E.roa (hash: LYfpTTUhsNjJzAKWOxzbHYKnI3ctEnoDEml27mltRUs=)
2: lER-sxl6ox5-aEnxavVaslMB-oI.crl (hash: Xj/eCNoPRKnixqpCPlcI5+X1zoVwFmEXeBs2lu8K/U8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9e:10:cc:65:69:76:f0:87:13:96:f4:e7:ce:6e:56:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94447eb3197aa31e7e6849f16af55ab25301fa82
Validity
Not Before: Nov 2 21:01:03 2026 GMT
Not After : Nov 3 21:01:03 2026 GMT
Subject: CN=d31622848f912aebb90d8ca993ed31c466ba767e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:73:00:99:1c:d8:1f:ff:7b:9d:49:21:1f:94:
dc:f0:38:cb:73:25:68:09:2f:82:e5:05:3e:2d:3d:
17:0a:e8:32:d7:df:ce:90:68:72:68:d3:6a:c0:99:
6c:0b:8c:af:63:42:03:2f:a0:2d:c7:ab:66:8e:60:
7a:c4:ad:f6:fb:3a:37:a4:d2:9a:47:e5:a5:a9:b9:
4c:b5:0d:33:ff:9c:02:f1:9b:89:31:b6:cf:f7:f2:
64:b7:40:59:ab:17:50:2f:70:27:bd:52:ab:31:b6:
cf:aa:e2:f4:a4:a9:3e:c9:25:37:30:51:88:6c:0d:
9d:eb:64:2b:de:ab:e5:b6:f7:4a:95:e4:a0:85:02:
cb:20:2f:c8:11:4e:23:ea:b3:28:a0:7c:8d:bc:20:
04:4f:15:dd:cc:2c:2f:8d:01:fb:69:92:ec:68:f1:
ef:58:d8:0a:5e:a5:05:8e:69:df:ca:e8:df:22:6c:
51:7d:c4:a7:06:18:47:5d:d7:77:5c:92:c0:e8:d2:
6b:45:d1:4f:bd:dc:c8:de:32:c1:57:b2:e2:08:3d:
3f:2c:fc:36:9b:59:ca:d7:c8:f6:47:69:39:e4:1f:
45:a8:92:0d:ae:f7:75:ab:49:37:38:61:a0:3b:f3:
97:0a:b9:22:ac:69:ba:cd:7d:51:44:af:8b:1c:bd:
5d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:16:22:84:8F:91:2A:EB:B9:0D:8C:A9:93:ED:31:C4:66:BA:76:7E
X509v3 Authority Key Identifier:
keyid:94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:f0:9f:2d:75:59:2a:31:a4:9f:01:cb:ce:4f:c4:7c:53:b5:
3e:43:d4:61:37:ae:b9:40:a6:b9:95:b3:8e:1e:b5:8e:a5:b8:
6d:72:94:d0:99:89:64:1f:27:d4:49:f4:33:35:15:3c:69:53:
72:9b:02:5d:ac:4a:7f:84:a7:5e:04:26:75:76:09:43:18:04:
03:0a:be:32:69:da:2a:9a:9d:b1:d2:d1:31:02:0d:3f:6d:7b:
30:ba:94:c2:e6:4d:94:96:79:24:da:1f:a8:7c:74:b4:bb:c1:
11:58:f6:f1:87:5b:14:87:55:50:12:4b:5f:34:15:56:2d:cb:
55:7c:5e:cd:5f:cc:14:bb:b4:7a:75:7f:2f:e2:e5:36:02:ba:
1f:1e:ae:36:83:c3:d8:f9:56:41:a8:5c:ac:b5:2d:04:b8:05:
ee:6b:1d:9a:25:87:17:be:d2:7c:7f:2e:9d:7b:6f:9f:7f:bf:
38:1f:7e:c7:1e:da:ba:53:32:97:4b:34:cf:7c:b8:52:bf:9d:
47:e0:3e:07:95:8a:b4:99:dd:16:77:14:a0:c3:87:a0:68:cb:
4c:5d:36:35:31:c6:cb:4c:32:e9:8e:12:53:8b:f6:6d:1e:f9:
e2:22:0f:fc:35:03:50:f5:2e:14:32:99:a4:07:90:d5:7f:a2:
b5:78:b3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 03:51:10 2026 by rpki-client