Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
File: lER-sxl6ox5-aEnxavVaslMB-oI.mft (raw, json)
Hash identifier: mjRYtazr1gE7V0OkNvqU6gxQ1/VoJQdWbI3dKEd+e4A=
Subject key identifier: C9:5F:9F:F7:69:92:F4:0E:F8:95:05:B3:4A:54:D5:FA:F1:9A:D5:9B
Authority key identifier: 94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82
Certificate issuer: /CN=94447eb3197aa31e7e6849f16af55ab25301fa82
Certificate serial: 019EC0363C457F56687BEB2FCE32A55A32F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
Manifest number: 08D3
Signing time: Sat 13 Jun 2026 09:00:40 +0000
Manifest this update: Sat 13 Jun 2026 09:00:40 +0000
Manifest next update: Sun 14 Jun 2026 09:00:40 +0000
Files and hashes: 1: DQ38TRCVnXEsSBsusAK4wA5cM7E.roa (hash: LYfpTTUhsNjJzAKWOxzbHYKnI3ctEnoDEml27mltRUs=)
2: lER-sxl6ox5-aEnxavVaslMB-oI.crl (hash: yYoZAR8tz5rXx2bFRvnSECPBh9hLYVlqId3x9BhjQtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:3c:45:7f:56:68:7b:eb:2f:ce:32:a5:5a:32:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94447eb3197aa31e7e6849f16af55ab25301fa82
Validity
Not Before: Jun 13 09:00:40 2026 GMT
Not After : Jun 14 09:00:40 2026 GMT
Subject: CN=c95f9ff76992f40ef89505b34a54d5faf19ad59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f2:45:fd:25:03:35:0a:92:7a:8d:7b:6d:74:
f1:b9:ea:89:d1:6e:38:90:47:db:72:dd:56:73:b1:
f9:d3:54:56:cc:10:dd:0e:9d:2b:96:76:ba:57:be:
b4:2a:94:42:00:30:a9:92:db:87:1b:bf:73:33:8c:
be:74:e6:e0:6f:6e:00:5c:e1:69:6f:67:07:ed:4b:
da:94:0f:d1:24:ed:78:37:0d:a2:6c:52:36:e5:fa:
ac:e5:38:89:c0:02:18:27:22:6f:14:2b:d9:53:6b:
77:72:10:ba:ff:22:65:81:bd:93:25:77:85:a8:8b:
a5:14:62:8d:d3:37:91:f8:17:30:d7:b4:22:91:4c:
c2:f5:7a:b7:02:a7:5d:52:6c:00:96:8e:b6:15:ae:
0e:78:35:21:94:6c:f8:f9:8e:18:8f:80:da:d1:f0:
b7:0e:db:36:fb:1f:ed:1a:f5:53:3c:1c:62:41:1d:
3f:ca:f0:e7:ea:5e:4f:b0:cc:0d:a1:00:ac:ff:c4:
68:27:28:fa:1a:19:b9:57:b1:ec:b4:3e:73:b2:4a:
3b:85:72:6e:d2:ed:2e:98:5d:fc:c6:cc:e1:3d:10:
91:fc:c0:5e:43:70:d4:80:5d:b5:a6:e0:e8:96:56:
16:4a:03:30:ba:14:9a:2a:cc:27:25:ff:50:01:f9:
3f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5F:9F:F7:69:92:F4:0E:F8:95:05:B3:4A:54:D5:FA:F1:9A:D5:9B
X509v3 Authority Key Identifier:
keyid:94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:8e:4d:d9:b3:80:f0:11:03:2e:df:aa:39:63:53:3f:06:a2:
95:54:d6:d2:b0:f3:40:34:59:b5:e6:44:af:c2:db:79:69:8d:
d1:fb:92:b7:e2:ba:66:fb:ac:ed:a1:b8:39:6a:78:8a:73:de:
e4:87:92:64:13:a4:88:f5:8c:ae:57:61:f3:8d:f7:aa:0b:a5:
2d:b9:2a:68:8f:76:8b:32:09:80:15:23:5c:ff:3a:88:32:73:
bb:37:90:16:65:ec:fb:80:8d:1f:69:f3:a9:79:c7:33:62:d5:
ee:f0:5d:17:de:03:6a:dd:93:15:73:3c:36:e3:69:de:7d:eb:
f3:48:6f:2f:9a:ac:cd:91:f5:8f:aa:59:15:11:87:e2:4a:06:
21:c6:fa:64:c2:4c:7d:80:30:77:56:42:5a:c9:3a:8e:0a:63:
9c:6f:60:d9:5a:8e:11:e8:21:22:ff:c1:df:9f:d6:10:1b:0b:
26:5f:73:8d:58:af:01:ff:d3:17:46:e8:3c:11:04:85:4d:fd:
8b:e8:51:c9:7c:17:1b:f8:06:47:d8:73:d1:b8:c9:8d:f3:79:
12:e1:7d:78:eb:8c:77:22:0a:13:70:4a:ea:61:c0:10:4f:55:
da:c0:a8:1e:bb:c0:8e:a1:54:ee:1d:49:f8:28:b4:ff:3d:20:
d0:6b:60:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:28:20 2026 by rpki-client