Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
File: ERxtryd8JzXN7koMheNshcJdPD0.mft (raw, json)
Hash identifier: 2gpiyWWxaES96unBsXO+O/ASB2t3OrBzZbQvYFFbJ0A=
Subject key identifier: B6:BD:5A:AF:1F:80:61:F7:38:E2:57:26:1E:B9:92:C0:C7:89:09:C7
Authority key identifier: 11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
Certificate issuer: /CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Certificate serial: 019FAAF5CA9313509E23DCCE057D0E548E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
Manifest number: 058B
Signing time: Tue 28 Jul 2026 23:01:02 +0000
Manifest this update: Tue 28 Jul 2026 23:01:02 +0000
Manifest next update: Wed 29 Jul 2026 23:01:02 +0000
Files and hashes: 1: 630LgHaZLmK9ap31ZvpR1GPzzqg.roa (hash: YQBSu1OM6liETQJDGjOpqHrROGN5J8OImUtJolzoJik=)
2: ERxtryd8JzXN7koMheNshcJdPD0.crl (hash: z2dWL2wyi/wi26HgnqyYDTvHDZ7iA7CGYFi34T6OQH0=)
3: _4M4oq0S8mIZa0V69_lse01j-Sk.roa (hash: NZU7UkxZ6lsoZXHjmmCZKMcfUdhd7kq2mJZpnareMGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:ca:93:13:50:9e:23:dc:ce:05:7d:0e:54:8e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Validity
Not Before: Jul 28 23:01:02 2026 GMT
Not After : Jul 29 23:01:02 2026 GMT
Subject: CN=b6bd5aaf1f8061f738e257261eb992c0c78909c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:01:28:41:86:7d:e4:28:f2:b8:e0:da:11:78:
5e:58:47:40:f5:15:86:56:dc:94:dd:64:52:6c:14:
9d:93:e8:73:18:5c:5a:a0:41:bd:bf:f6:7e:a9:da:
fb:b8:ba:cd:2a:94:18:73:d5:47:e3:39:7f:f6:21:
aa:ac:ca:af:ad:2c:e8:70:8d:ee:44:f0:d5:4b:61:
7c:5f:65:3d:e8:f0:16:63:ad:69:39:4f:1d:28:e5:
54:c5:f1:8d:3f:a3:99:58:cd:6b:02:8e:c2:dc:3f:
f5:14:a2:54:19:40:d7:43:de:88:f2:48:e2:ef:b9:
69:ac:0f:11:e1:3c:39:8f:3e:9d:bb:8f:d5:48:79:
b4:5e:9e:8d:75:be:77:4e:38:01:1b:c3:18:bf:4b:
c2:a5:16:1e:99:5c:5f:21:6a:3b:9e:b0:f9:69:ae:
92:60:f9:96:7c:6c:02:d3:bf:6a:a1:7f:f4:d4:19:
79:f4:1b:9b:4a:c7:6a:61:a6:75:a6:be:ca:56:38:
06:42:19:05:ef:57:be:3f:9a:06:2d:71:c9:70:38:
5f:ff:72:f0:71:98:f6:03:31:6c:41:79:b8:9d:82:
2a:b4:cf:d1:da:8f:e4:a4:ba:25:91:97:b7:06:f9:
a6:71:c7:f6:af:f5:67:5b:c9:ee:da:63:15:51:5e:
79:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BD:5A:AF:1F:80:61:F7:38:E2:57:26:1E:B9:92:C0:C7:89:09:C7
X509v3 Authority Key Identifier:
keyid:11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f4:a1:89:d2:0f:cc:6f:2f:44:71:4d:bb:f9:c3:b3:43:73:
5d:62:44:cd:d5:a4:6a:14:b4:ec:1d:27:29:a8:94:da:27:07:
cc:bf:ab:31:99:f5:b1:8d:c4:5e:db:ea:b6:5f:43:f6:e1:50:
bb:11:c3:96:32:96:3a:66:22:29:06:c6:01:70:8d:26:8a:fa:
a4:f1:14:04:c4:4b:a9:5e:54:53:a6:e3:8e:1a:1a:f0:e0:4f:
de:05:7c:4b:4e:87:13:25:34:33:fd:4b:5b:0a:28:c4:27:c8:
92:45:f5:3e:c7:7c:f1:b3:bd:bb:28:30:47:17:d9:65:ae:47:
50:d0:ec:e6:77:cd:fc:1e:ec:fe:8e:2d:ab:58:91:42:b0:5a:
97:ad:13:d1:6a:39:23:ad:76:ab:72:db:f8:11:cb:0e:ed:66:
61:da:ac:52:13:15:10:bb:cc:26:37:09:52:ba:e6:1e:3d:48:
b1:5a:6d:c4:9b:5d:4b:68:2a:e4:ce:48:0e:a3:ff:a2:99:63:
66:46:31:fe:54:5d:b3:15:61:bd:56:50:c8:5e:05:b2:a1:b3:
ac:b9:c5:48:91:5e:59:b9:47:55:42:46:05:76:46:26:aa:75:
53:7e:f3:14:aa:50:8f:d7:b1:5e:73:9f:e1:de:0a:54:f5:3e:
17:8c:a4:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9cqTE1CeI9zOBX0OVI58MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMWM2ZGFmMjc3YzI3MzVjZGVlNGEwYzg1ZTM2Yzg1YzI1
ZDNjM2QwHhcNMjYwNzI4MjMwMTAyWhcNMjYwNzI5MjMwMTAyWjAzMTEwLwYDVQQD
EyhiNmJkNWFhZjFmODA2MWY3MzhlMjU3MjYxZWI5OTJjMGM3ODkwOWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gEoQYZ95CjyuODaEXheWEdA9RWG
VtyU3WRSbBSdk+hzGFxaoEG9v/Z+qdr7uLrNKpQYc9VH4zl/9iGqrMqvrSzocI3u
RPDVS2F8X2U96PAWY61pOU8dKOVUxfGNP6OZWM1rAo7C3D/1FKJUGUDXQ96I8kji
77lprA8R4Tw5jz6du4/VSHm0Xp6Ndb53TjgBG8MYv0vCpRYemVxfIWo7nrD5aa6S
YPmWfGwC079qoX/01Bl59BubSsdqYaZ1pr7KVjgGQhkF71e+P5oGLXHJcDhf/3Lw
cZj2AzFsQXm4nYIqtM/R2o/kpLolkZe3Bvmmccf2r/VnW8nu2mMVUV55YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLa9Wq8fgGH3OOJXJh65ksDHiQnHMB8GA1UdIwQY
MBaAFBEcba8nfCc1ze5KDIXjbIXCXTw9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJ4dHJ5ZDhKelhON2tvTWhlTnNoY0pkUEQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iYTQ3NjYtN2IzZi00ZTU3LTgzZGUt
MzdiZmNiODBmNjE4LzEvRVJ4dHJ5ZDhKelhON2tvTWhlTnNoY0pkUEQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9iYTQ3NjYtN2IzZi00ZTU3LTgzZGUtMzdiZmNiODBmNjE4
LzEvRVJ4dHJ5ZDhKelhON2tvTWhlTnNoY0pkUEQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/ShidIP
zG8vRHFNu/nDs0NzXWJEzdWkahS07B0nKaiU2icHzL+rMZn1sY3EXtvqtl9D9uFQ
uxHDljKWOmYiKQbGAXCNJor6pPEUBMRLqV5UU6bjjhoa8OBP3gV8S06HEyU0M/1L
WwooxCfIkkX1Psd88bO9uygwRxfZZa5HUNDs5nfN/B7s/o4tq1iRQrBal60T0Wo5
I612q3Lb+BHLDu1mYdqsUhMVELvMJjcJUrrmHj1IsVptxJtdS2gq5M5IDqP/oplj
ZkYx/lRdsxVhvVZQyF4FsqGzrLnFSJFeWblHVUJGBXZGJqp1U37zFKpQj9exXnOf
4d4KVPU+F4yk1w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:20:29 2026 by rpki-client