Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
File: ERxtryd8JzXN7koMheNshcJdPD0.mft (raw, json)
Hash identifier: iAPPJXxdQkDyl7tW4KnemBtfFiOUxWXN2MPwANzMXMM=
Subject key identifier: ED:53:89:7C:60:78:FD:27:D7:C5:8F:E7:32:79:CC:32:44:1B:21:32
Authority key identifier: 11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
Certificate issuer: /CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Certificate serial: 019D9DE3B2E409CDC0A8D7632FD0F27EC360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
Manifest number: 047B
Signing time: Sat 18 Apr 2026 00:00:38 +0000
Manifest this update: Sat 18 Apr 2026 00:00:38 +0000
Manifest next update: Sun 19 Apr 2026 00:00:38 +0000
Files and hashes: 1: ERxtryd8JzXN7koMheNshcJdPD0.crl (hash: SZPCQZHSjWLipvugW3BnzojXctcsZeS9kjpNsRqYVAY=)
2: _4M4oq0S8mIZa0V69_lse01j-Sk.roa (hash: NZU7UkxZ6lsoZXHjmmCZKMcfUdhd7kq2mJZpnareMGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:e3:b2:e4:09:cd:c0:a8:d7:63:2f:d0:f2:7e:c3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Validity
Not Before: Apr 18 00:00:38 2026 GMT
Not After : Apr 19 00:00:38 2026 GMT
Subject: CN=ed53897c6078fd27d7c58fe73279cc32441b2132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:e1:50:c2:75:99:4b:4c:c3:33:a3:e2:84:
e4:3f:63:47:15:c4:16:c1:ad:45:c1:92:8e:ed:15:
d1:c0:c7:4c:40:d7:c8:b7:5e:b3:f4:6c:c6:20:5b:
24:83:37:0d:5a:8b:40:16:b1:5b:e4:c7:4a:b6:32:
29:dc:a9:b7:89:3b:1e:27:ae:b8:e2:61:fe:5c:fc:
ec:8c:b9:af:03:ab:34:a2:14:ef:bb:b9:49:37:e7:
5c:ce:a4:6b:56:a9:7f:05:52:75:b7:87:39:82:1f:
6b:64:ab:50:f8:51:b1:3a:2f:7d:6f:11:95:71:4d:
f3:59:d0:71:f5:5c:18:e2:3b:8b:4c:b7:1d:66:71:
23:52:6b:6b:91:06:d2:b1:e9:84:5f:83:37:ee:5c:
05:55:21:47:e0:67:44:ad:33:cf:9d:35:b7:39:b7:
b2:a9:ca:b5:b4:63:c9:92:91:6b:9a:60:92:1c:b6:
e0:9a:52:68:52:ac:12:61:f2:39:6a:06:25:50:b6:
b2:b9:ab:38:c9:3a:75:d7:72:c8:18:9a:4d:7e:ff:
6e:cb:a0:b0:95:43:db:fb:db:b2:e6:ff:7a:63:4e:
2a:6f:f4:0a:e8:0b:86:c3:39:8a:af:c9:4d:93:fc:
fb:aa:ea:28:b7:d7:2a:b8:d8:c4:3d:b2:ba:9c:fe:
dc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:53:89:7C:60:78:FD:27:D7:C5:8F:E7:32:79:CC:32:44:1B:21:32
X509v3 Authority Key Identifier:
keyid:11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:37:01:34:c4:f2:44:8d:be:27:4c:d8:37:a1:7a:d8:9c:e1:
2f:c1:91:e8:82:4f:e4:f4:dd:ac:f3:5f:d7:4d:cc:72:ae:53:
d9:88:70:16:a1:13:43:e5:4d:8c:1d:de:b5:30:df:86:2b:02:
ff:1a:9d:f8:11:1f:7d:b3:41:8f:2f:f9:82:5e:e6:cf:94:63:
7d:5d:7c:c8:c6:6f:57:53:00:8b:3a:5b:3f:bd:86:6a:42:29:
3c:49:00:07:35:bf:e0:b2:25:64:f1:a6:a3:1d:bf:92:e7:43:
d9:ec:28:b5:02:59:a3:fc:e4:f2:a9:71:95:d7:57:d6:44:e0:
8d:ba:3c:c1:d8:5a:72:65:89:67:41:67:6a:78:e4:25:98:54:
99:5a:44:78:fa:2b:f1:73:47:0f:cb:20:bd:bd:23:39:b3:6f:
71:e3:7c:aa:39:09:d0:86:17:66:1a:bc:ee:56:6d:f7:2a:06:
8e:3c:47:06:79:15:84:9a:52:57:70:2e:12:29:05:43:e9:1c:
43:54:2f:31:2f:80:75:f9:55:e1:bc:f7:2f:a2:d4:5f:17:be:
0a:8f:98:c3:d0:c3:ee:12:1e:2d:15:76:91:ce:f4:e2:3d:ef:
c2:23:53:b0:59:42:06:2a:79:e6:6a:e8:f4:64:41:cd:ed:45:
8c:bb:6c:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2d47LkCc3AqNdjL9DyfsNgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMWM2ZGFmMjc3YzI3MzVjZGVlNGEwYzg1ZTM2Yzg1YzI1
ZDNjM2QwHhcNMjYwNDE4MDAwMDM4WhcNMjYwNDE5MDAwMDM4WjAzMTEwLwYDVQQD
EyhlZDUzODk3YzYwNzhmZDI3ZDdjNThmZTczMjc5Y2MzMjQ0MWIyMTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttnhUMJ1mUtMwzOj4oTkP2NHFcQW
wa1FwZKO7RXRwMdMQNfIt16z9GzGIFskgzcNWotAFrFb5MdKtjIp3Km3iTseJ664
4mH+XPzsjLmvA6s0ohTvu7lJN+dczqRrVql/BVJ1t4c5gh9rZKtQ+FGxOi99bxGV
cU3zWdBx9VwY4juLTLcdZnEjUmtrkQbSsemEX4M37lwFVSFH4GdErTPPnTW3Obey
qcq1tGPJkpFrmmCSHLbgmlJoUqwSYfI5agYlULayuas4yTp113LIGJpNfv9uy6Cw
lUPb+9uy5v96Y04qb/QK6AuGwzmKr8lNk/z7quoot9cquNjEPbK6nP7crQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1TiXxgeP0n18WP5zJ5zDJEGyEyMB8GA1UdIwQY
MBaAFBEcba8nfCc1ze5KDIXjbIXCXTw9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJ4dHJ5ZDhKelhON2tvTWhlTnNoY0pkUEQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iYTQ3NjYtN2IzZi00ZTU3LTgzZGUt
MzdiZmNiODBmNjE4LzEvRVJ4dHJ5ZDhKelhON2tvTWhlTnNoY0pkUEQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9iYTQ3NjYtN2IzZi00ZTU3LTgzZGUtMzdiZmNiODBmNjE4
LzEvRVJ4dHJ5ZDhKelhON2tvTWhlTnNoY0pkUEQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjcBNMTy
RI2+J0zYN6F62JzhL8GR6IJP5PTdrPNf103Mcq5T2YhwFqETQ+VNjB3etTDfhisC
/xqd+BEffbNBjy/5gl7mz5RjfV18yMZvV1MAizpbP72GakIpPEkABzW/4LIlZPGm
ox2/kudD2ewotQJZo/zk8qlxlddX1kTgjbo8wdhacmWJZ0FnanjkJZhUmVpEePor
8XNHD8sgvb0jObNvceN8qjkJ0IYXZhq87lZt9yoGjjxHBnkVhJpSV3AuEikFQ+kc
Q1QvMS+AdflV4bz3L6LUXxe+Co+Yw9DD7hIeLRV2kc704j3vwiNTsFlCBip55mro
9GRBze1FjLtscg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:00:41 2026 by rpki-client