Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
File: ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft (raw, json)
Hash identifier: ijc2xL6gvG3M6ACAeUdSkKnNdElrCrVtTGv+oTu9nLA=
Subject key identifier: FF:F1:09:52:87:28:41:F7:AC:B6:C9:86:53:95:2A:2D:2C:66:5A:8D
Authority key identifier: 11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
Certificate issuer: /CN=111b09710acdb72086d658e90d8f025fa6a111b1
Certificate serial: 019CAAC632CF0AE7E7663F897CE93838954C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
Manifest number: 0AE5
Signing time: Sun 01 Mar 2026 19:00:41 +0000
Manifest this update: Sun 01 Mar 2026 19:00:41 +0000
Manifest next update: Mon 02 Mar 2026 19:00:41 +0000
Files and hashes: 1: 185JWtL1nJVygOFr95-RQtms_58.roa (hash: KasP2muj3cS9GbttmeKweMSTbVCW9PhTnMbBxoVVNls=)
2: ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl (hash: Or7DOTAQc/DESes8jJ5eiSQfgkxohNRflVKh1vNMX1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:32:cf:0a:e7:e7:66:3f:89:7c:e9:38:38:95:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111b09710acdb72086d658e90d8f025fa6a111b1
Validity
Not Before: Mar 1 19:00:41 2026 GMT
Not After : Mar 2 19:00:41 2026 GMT
Subject: CN=fff10952872841f7acb6c98653952a2d2c665a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c3:d8:af:ae:08:e0:b4:77:e6:a9:f5:ca:51:
20:f4:e4:56:81:a0:de:50:b5:3a:c8:0e:20:cf:f8:
bc:f4:9a:00:94:6d:6c:1c:cc:5c:e7:f8:3d:b9:e0:
4e:9b:98:85:a6:fe:4e:ef:07:5c:f7:12:b9:b5:70:
a8:db:5d:62:fa:5a:4b:e6:86:7a:a2:e8:16:f1:30:
f9:0c:46:a0:5f:c7:e9:9e:ff:1d:85:2a:25:6f:bc:
b3:69:03:d6:c9:44:3b:be:77:99:fe:93:f3:dd:3d:
54:07:de:71:7f:fb:96:7f:58:03:64:d9:25:10:c0:
18:c7:1e:bb:20:7b:12:48:86:14:74:24:b1:ed:56:
23:57:28:51:e2:37:86:42:55:5e:f0:61:6e:8f:d5:
67:17:79:cc:ae:6c:2e:99:7d:da:23:5d:23:77:9a:
28:4b:35:b0:8b:0d:f2:ad:9a:c0:6d:9a:d1:c3:99:
ee:e4:79:af:56:6a:36:63:99:d3:3b:e8:3e:e0:5c:
67:88:a7:8a:5b:16:0e:1d:b6:a3:e9:e3:79:98:87:
f4:1a:3b:5f:18:00:81:af:b7:12:99:c3:64:f8:2f:
61:a6:81:be:09:6d:61:fb:2c:bd:d8:8b:8a:95:a2:
fd:51:17:59:d6:34:b5:9f:b5:74:60:39:e5:35:01:
71:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F1:09:52:87:28:41:F7:AC:B6:C9:86:53:95:2A:2D:2C:66:5A:8D
X509v3 Authority Key Identifier:
keyid:11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:8b:1c:bf:5e:dc:72:09:f9:b7:3f:77:c8:56:1c:53:0b:aa:
ae:33:ab:89:20:1a:86:d2:73:83:a3:6f:a1:e7:1f:a0:e3:5b:
31:49:28:60:eb:fe:6e:74:54:8c:97:95:fe:fa:70:7e:72:af:
24:f4:f9:a8:33:18:b2:ac:87:1e:3a:6b:b1:62:d9:c0:d1:73:
35:d1:4c:94:1d:55:fd:c6:ef:89:b9:2a:9d:ae:8e:a6:d9:da:
ed:49:af:22:af:e0:53:98:ce:2a:36:88:39:e3:d9:6e:56:14:
31:4d:44:26:7f:36:32:8b:86:ab:c9:09:18:54:d9:07:4d:57:
83:d7:72:01:0b:70:94:79:12:27:37:e3:ad:76:b7:72:53:af:
c6:0c:c6:ed:c8:8b:ca:0d:d2:07:48:01:fd:84:b6:21:74:6f:
75:6d:a4:d7:0a:da:2a:8b:6a:83:11:a7:d3:88:af:31:33:d8:
26:f6:4c:03:9c:d7:ea:d5:ba:a8:87:b0:83:24:c4:3d:c0:15:
5e:b2:fc:60:85:7d:3b:ae:9d:e9:c8:d4:28:40:77:29:bb:27:
be:60:b7:08:6e:55:5b:57:c0:be:1b:91:e3:f1:70:3b:e0:ec:
61:f5:dc:be:08:6b:49:11:90:87:ea:42:67:d2:a2:7c:4e:4e:
bc:b6:da:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:14:03 2026 by rpki-client