Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
File: lER-sxl6ox5-aEnxavVaslMB-oI.mft (raw, json)
Hash identifier: ckIjI6vsL18sUm/o9zsiFbUQX0A0V+OYDvQqRUOYMKo=
Subject key identifier: 85:DB:DB:C5:68:AC:80:3E:FC:E6:60:C5:EF:CB:FB:B6:33:83:E8:6F
Authority key identifier: 94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82
Certificate issuer: /CN=94447eb3197aa31e7e6849f16af55ab25301fa82
Certificate serial: 019FA9E2F2DB352C2A56260DE93BA20CDBBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
Manifest number: 094C
Signing time: Tue 28 Jul 2026 18:00:50 +0000
Manifest this update: Tue 28 Jul 2026 18:00:50 +0000
Manifest next update: Wed 29 Jul 2026 18:00:50 +0000
Files and hashes: 1: DQ38TRCVnXEsSBsusAK4wA5cM7E.roa (hash: LYfpTTUhsNjJzAKWOxzbHYKnI3ctEnoDEml27mltRUs=)
2: lER-sxl6ox5-aEnxavVaslMB-oI.crl (hash: D+mAmbRY6t9HJcI0DC1JRbadLG3QM1z2qfAe1lZLiMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:f2:db:35:2c:2a:56:26:0d:e9:3b:a2:0c:db:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94447eb3197aa31e7e6849f16af55ab25301fa82
Validity
Not Before: Jul 28 18:00:50 2026 GMT
Not After : Jul 29 18:00:50 2026 GMT
Subject: CN=85dbdbc568ac803efce660c5efcbfbb63383e86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:72:e2:c6:b8:c7:b6:c2:5e:b5:11:bf:16:c3:
78:55:69:dd:f8:ff:ed:f8:66:fd:ad:89:69:30:08:
23:c6:f6:b1:66:48:36:16:dc:45:cd:59:eb:f9:f7:
75:98:53:11:48:39:64:2b:fb:ae:f6:4d:44:b7:ec:
d2:01:a8:ad:41:13:04:df:1b:68:18:6b:ac:5a:36:
22:d9:9c:45:11:f2:ac:18:aa:88:07:7e:9d:08:61:
ca:60:83:3c:83:81:be:18:27:96:88:26:de:49:3e:
ce:f8:c5:f7:c4:7f:cd:9c:13:1d:af:66:27:89:41:
57:74:9b:e8:14:ae:b6:db:33:f3:a0:2e:ac:15:42:
df:55:d7:46:fa:69:16:57:95:05:db:46:e7:26:4e:
2a:c8:a2:de:d7:bf:d8:83:4f:74:7a:60:6d:22:53:
d6:80:3d:07:f4:8d:e9:9b:85:df:f3:0f:34:a9:e0:
50:df:37:75:4f:92:a8:14:43:57:22:98:e6:e8:83:
3b:dd:36:6c:1c:07:63:a6:4f:da:12:10:31:ba:9c:
7b:ea:7a:ff:d5:17:f5:24:74:4e:57:5d:a6:c7:9c:
16:0c:0f:c7:8e:87:79:a8:fa:d3:53:93:c3:06:7a:
ea:f5:13:d1:c7:a3:5e:55:f4:be:14:14:c5:ad:24:
1c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DB:DB:C5:68:AC:80:3E:FC:E6:60:C5:EF:CB:FB:B6:33:83:E8:6F
X509v3 Authority Key Identifier:
keyid:94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c5:97:db:2f:d1:ec:22:cd:f7:f2:49:6b:3d:a9:dc:86:5e:
ba:0c:bc:e0:e9:51:b7:e7:99:0a:42:dd:e4:d6:55:30:be:01:
da:34:6c:3e:3a:82:27:38:05:bb:40:8d:80:ef:41:00:4d:16:
09:44:cd:b6:2f:e0:c0:1b:1d:aa:3e:13:5a:d2:d1:97:27:ee:
4d:72:c3:67:4f:30:c0:b8:a4:ae:90:0c:90:03:e3:b6:84:01:
b4:27:38:1e:62:b0:88:87:1f:0e:e3:ed:91:60:d1:39:fe:b8:
9a:cf:ed:a3:25:02:2f:f1:00:de:61:f9:a3:53:ab:d5:95:70:
68:e8:e6:97:e1:cf:f7:25:a9:33:3b:26:64:25:ca:48:ba:3e:
33:8f:bb:ef:60:6e:2b:0c:4c:76:4d:30:80:64:cd:84:12:07:
81:47:16:17:37:46:b6:2b:f3:0f:9e:31:00:26:81:66:92:83:
ad:65:cf:59:c9:7b:5a:d1:95:df:e2:6c:d9:2b:f9:29:4e:c3:
8e:8e:01:43:4a:78:22:44:a2:2d:06:bd:fa:42:1a:70:fd:99:
23:08:fc:37:d1:4c:c0:7f:a5:52:1c:97:0a:bd:cf:12:3c:e6:
98:b4:b6:00:60:bb:d4:4d:be:1e:5c:5a:99:47:a9:7e:4e:ba:
33:0c:47:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4vLbNSwqViYN6TuiDNu+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NDQ3ZWIzMTk3YWEzMWU3ZTY4NDlmMTZhZjU1YWIyNTMw
MWZhODIwHhcNMjYwNzI4MTgwMDUwWhcNMjYwNzI5MTgwMDUwWjAzMTEwLwYDVQQD
Eyg4NWRiZGJjNTY4YWM4MDNlZmNlNjYwYzVlZmNiZmJiNjMzODNlODZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HLixrjHtsJetRG/FsN4VWnd+P/t
+Gb9rYlpMAgjxvaxZkg2FtxFzVnr+fd1mFMRSDlkK/uu9k1Et+zSAaitQRME3xto
GGusWjYi2ZxFEfKsGKqIB36dCGHKYIM8g4G+GCeWiCbeST7O+MX3xH/NnBMdr2Yn
iUFXdJvoFK622zPzoC6sFULfVddG+mkWV5UF20bnJk4qyKLe17/Yg090emBtIlPW
gD0H9I3pm4Xf8w80qeBQ3zd1T5KoFENXIpjm6IM73TZsHAdjpk/aEhAxupx76nr/
1Rf1JHROV12mx5wWDA/Hjod5qPrTU5PDBnrq9RPRx6NeVfS+FBTFrSQcFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXb28VorIA+/OZgxe/L+7Yzg+hvMB8GA1UdIwQY
MBaAFJREfrMZeqMefmhJ8Wr1WrJTAfqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEVSLXN4bDZveDUtYUVueGF2VmFzbE1CLW9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84ZDBiMDUtMjYzZi00MDNhLWFiZjQt
MjM4YmRlMGUxZWY3LzEvbEVSLXN4bDZveDUtYUVueGF2VmFzbE1CLW9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC84ZDBiMDUtMjYzZi00MDNhLWFiZjQtMjM4YmRlMGUxZWY3
LzEvbEVSLXN4bDZveDUtYUVueGF2VmFzbE1CLW9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqsWX2y/R
7CLN9/JJaz2p3IZeugy84OlRt+eZCkLd5NZVML4B2jRsPjqCJzgFu0CNgO9BAE0W
CUTNti/gwBsdqj4TWtLRlyfuTXLDZ08wwLikrpAMkAPjtoQBtCc4HmKwiIcfDuPt
kWDROf64ms/toyUCL/EA3mH5o1Or1ZVwaOjml+HP9yWpMzsmZCXKSLo+M4+772Bu
KwxMdk0wgGTNhBIHgUcWFzdGtivzD54xACaBZpKDrWXPWcl7WtGV3+Js2Sv5KU7D
jo4BQ0p4IkSiLQa9+kIacP2ZIwj8N9FMwH+lUhyXCr3PEjzmmLS2AGC71E2+Hlxa
mUepfk66MwxHNg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:34:08 2026 by rpki-client