Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
File: ER2JVJLtS2nVqm7aX3Av52Oie6A.mft (raw, json)
Hash identifier: B1IBr9q7a3MEkjgQ+j+DLrAJ2yGZ6Q5As1AD9QTHkaI=
Subject key identifier: CF:65:96:B9:BD:97:74:EE:F9:E2:83:F5:60:00:E5:47:8C:09:E4:0C
Authority key identifier: 11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0
Certificate issuer: /CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0
Certificate serial: 01A1445FD02773A1B5D75F9E0C2C22D1C399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
Manifest number: 1AA9
Signing time: Fri 16 Oct 2026 11:01:32 +0000
Manifest this update: Fri 16 Oct 2026 11:01:32 +0000
Manifest next update: Sat 17 Oct 2026 11:01:32 +0000
Files and hashes: 1: E2AOd0Jh_dYbYDRq_Fys0q9Nt0w.roa (hash: yqgah2GA26MOXyfwuZn4WBUcims7Z93O2Dzh5WOdCaA=)
2: ER2JVJLtS2nVqm7aX3Av52Oie6A.crl (hash: pJPVX4BVoLoH9u8lEIuE6JvP9Il7QvxQjNRB/AFH72M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:5f:d0:27:73:a1:b5:d7:5f:9e:0c:2c:22:d1:c3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0
Validity
Not Before: Oct 16 11:01:32 2026 GMT
Not After : Oct 17 11:01:32 2026 GMT
Subject: CN=cf6596b9bd9774eef9e283f56000e5478c09e40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a3:2f:39:ef:71:87:1b:45:bd:54:bd:aa:04:
69:78:4d:d5:1d:c5:9b:16:ef:ee:e7:92:a1:00:7f:
d6:70:c5:d9:08:80:0f:7b:29:98:5c:e0:d7:10:a7:
ad:93:ca:02:db:df:90:e6:59:8d:8b:14:43:a5:cd:
de:dc:2d:4c:57:48:18:cb:2a:3e:3f:77:5a:3b:28:
38:4b:54:16:0f:33:c8:d6:39:10:e0:da:07:d8:97:
fe:96:70:11:76:de:81:c6:8a:97:94:fd:c5:fa:33:
57:44:52:46:4c:2c:b8:93:de:60:2e:33:19:2b:25:
3e:e3:1e:e9:85:d3:1f:8f:80:c5:fe:42:9a:22:b0:
3b:62:d6:72:f7:37:c7:23:3d:fb:0f:57:94:54:4b:
8c:4b:9c:a5:16:e1:57:b4:89:fa:ea:31:0d:52:d1:
ea:3f:bc:51:c7:f8:9a:6e:4b:10:c1:03:20:5f:de:
e6:e1:60:87:ab:cf:27:9a:c5:c2:8e:b6:52:b1:dd:
9f:eb:39:17:b1:6d:86:b9:fa:27:ec:4e:6f:49:a8:
6e:ff:fe:11:e6:31:7c:ee:bf:58:9b:03:bc:c2:16:
ef:3f:de:71:64:8e:a8:55:e8:2c:d0:cf:de:46:ca:
30:89:ca:8e:bf:1e:58:47:1f:76:f5:82:c7:59:20:
3e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:65:96:B9:BD:97:74:EE:F9:E2:83:F5:60:00:E5:47:8C:09:E4:0C
X509v3 Authority Key Identifier:
keyid:11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:9b:51:53:c9:da:2d:2a:f9:74:33:6f:78:e0:3f:b5:cf:4d:
17:0e:8a:6a:d1:d8:8c:6c:30:15:3e:d3:7d:b4:f4:b8:81:ff:
41:71:a1:13:0a:4a:4e:6a:94:77:34:c4:45:0e:65:71:fc:23:
46:c6:64:13:3c:6a:d3:31:80:2d:c2:cb:4a:21:18:51:6b:6b:
2a:07:dc:9d:1e:84:5a:f3:41:a1:0f:b2:7b:38:b1:ad:35:cf:
cc:2b:ba:78:9e:af:0a:fb:07:e0:91:bd:27:c5:b7:1e:83:85:
a1:54:27:b2:5c:cf:4d:44:68:ec:79:cd:9d:4b:9c:2c:4a:0f:
ed:32:c2:51:91:e7:cc:58:88:b7:ca:18:4c:dc:4c:aa:db:db:
3e:c4:08:70:68:95:a3:22:e2:a5:8d:91:4e:3b:16:80:79:74:
bb:f1:51:db:6d:f3:eb:91:1e:43:ce:d6:58:d5:bb:cb:96:e7:
ef:09:d0:0e:82:22:15:58:22:c7:db:80:95:65:8f:4e:a5:ea:
53:01:e7:25:fa:f3:11:5e:85:1d:4e:47:a8:17:59:3c:a9:1d:
bc:53:99:d6:77:b6:0e:77:b9:65:a5:e5:05:e0:d9:24:28:51:
70:ac:38:32:57:cb:14:4c:68:0f:33:72:8f:27:eb:71:89:69:
eb:d2:f7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 14:47:22 2026 by rpki-client