Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
File: ERxtryd8JzXN7koMheNshcJdPD0.mft (raw, json)
Hash identifier: jVS3H1wO5PTORihF6gJZOlvTeAL24I8zC5OlhnUFRmk=
Subject key identifier: 27:0A:A5:89:71:7D:EB:7D:0D:16:21:88:87:8A:24:7A:23:72:28:92
Authority key identifier: 11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
Certificate issuer: /CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Certificate serial: 01A0D83C004F0F6DC1B328D16C3C421E4FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
Manifest number: 0627
Signing time: Fri 25 Sep 2026 11:03:25 +0000
Manifest this update: Fri 25 Sep 2026 11:03:25 +0000
Manifest next update: Sat 26 Sep 2026 11:03:25 +0000
Files and hashes: 1: 630LgHaZLmK9ap31ZvpR1GPzzqg.roa (hash: YQBSu1OM6liETQJDGjOpqHrROGN5J8OImUtJolzoJik=)
2: ERxtryd8JzXN7koMheNshcJdPD0.crl (hash: EO0GHlzZ9qcQXbQU561d8gIJGXQVWCxWD31X+5L5bUU=)
3: _4M4oq0S8mIZa0V69_lse01j-Sk.roa (hash: NZU7UkxZ6lsoZXHjmmCZKMcfUdhd7kq2mJZpnareMGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3c:00:4f:0f:6d:c1:b3:28:d1:6c:3c:42:1e:4f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Validity
Not Before: Sep 25 11:03:25 2026 GMT
Not After : Sep 26 11:03:25 2026 GMT
Subject: CN=270aa589717deb7d0d162188878a247a23722892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:92:2e:30:22:b0:44:e3:82:97:ed:e4:04:eb:
bf:bf:97:5d:66:35:6e:68:d8:b6:dd:9a:0f:38:15:
0c:ee:54:3e:e6:6b:33:5f:0e:89:9a:06:e6:90:90:
7a:02:78:5e:e5:5d:2f:05:7d:93:4d:39:3a:98:04:
bc:df:6b:b2:75:a5:9f:f8:9a:ba:93:91:11:a4:1b:
10:52:ba:5c:bd:82:a4:fd:d4:af:f1:19:23:7b:a6:
11:74:d6:3b:62:21:85:35:9d:66:66:20:af:02:25:
10:61:64:25:04:14:28:c9:a4:65:b0:53:98:e8:85:
8d:8b:e3:b8:58:5c:89:fb:17:5d:b8:7d:30:4d:10:
2a:8f:3e:de:14:79:62:1c:a3:8d:9c:c2:a7:20:94:
dd:77:8f:39:e2:e4:6c:62:6b:3c:01:fc:c7:7d:c4:
00:49:53:d3:38:23:21:5b:21:35:c8:bf:88:bc:c8:
88:47:18:d4:af:5b:41:51:b5:92:0a:fa:fd:db:95:
59:9d:5d:61:0a:e0:d0:5b:5a:cf:fc:fd:5d:26:5e:
a2:5a:11:c7:d5:e5:a5:f5:e2:4d:90:9a:7b:90:47:
d9:29:f2:ff:6e:ef:5e:1b:f4:d8:59:19:e6:ac:ae:
4c:aa:ca:59:4c:5c:e0:1f:be:e0:24:e2:17:c4:72:
9a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0A:A5:89:71:7D:EB:7D:0D:16:21:88:87:8A:24:7A:23:72:28:92
X509v3 Authority Key Identifier:
keyid:11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:30:06:e2:92:99:dd:cc:3c:17:78:58:9c:ac:b3:f6:b7:59:
f4:23:83:3a:62:f4:3a:69:9d:c9:c1:92:45:f9:94:4c:b1:91:
6c:b2:56:ef:e7:5e:38:0f:1a:7a:34:44:09:53:0b:dd:86:01:
21:06:37:fd:1c:2d:e3:9f:b8:c6:a3:d0:6f:a5:36:d4:80:32:
9f:ee:00:96:cd:07:f8:2e:8e:43:78:3b:0b:5e:b3:2a:22:d5:
c4:1c:11:90:d5:25:9a:e7:e7:2b:e6:35:87:fa:6d:a3:67:bf:
1d:f9:58:98:74:4c:8a:07:f5:44:68:97:e3:39:1f:10:f5:3d:
4d:f0:fd:96:0c:4b:13:66:29:67:18:dc:3c:d0:64:d0:81:1b:
dc:71:3e:d9:00:00:96:3d:b6:6a:7c:c4:ed:3c:65:e4:ee:ba:
ca:ec:54:42:e5:b3:86:ea:f0:48:ef:09:5b:1c:c4:0c:7d:59:
72:29:d8:2f:09:da:66:2d:92:ef:90:3f:b2:83:1a:a3:25:08:
cd:5d:11:75:7b:0f:b6:64:e1:ab:7a:8c:b9:09:c3:30:d0:5d:
80:35:a8:7d:de:23:68:38:e5:28:39:da:01:67:b5:f7:05:8c:
31:6a:d7:59:c9:49:05:27:ed:16:c1:5a:7e:f9:3b:88:a8:77:
b5:ff:81:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:49:51 2026 by rpki-client