Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
File: eRP4wTuoKQ9g2mO6iek1snWJOts.mft (raw, json)
Hash identifier: rtA1J8N8S/yDcvDvP7dbsi3mLYyV2i0AWwhawzaoHtY=
Subject key identifier: AA:7C:80:89:21:35:C0:5A:B0:30:DA:A5:E5:00:2F:C9:23:9B:99:40
Authority key identifier: 79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
Certificate issuer: /CN=7913f8c13ba8290f60da63ba89e935b275893adb
Certificate serial: 019F9437346AB04FDED205EDCD407506613C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
Manifest number: 086F
Signing time: Fri 24 Jul 2026 13:01:13 +0000
Manifest this update: Fri 24 Jul 2026 13:01:13 +0000
Manifest next update: Sat 25 Jul 2026 13:01:13 +0000
Files and hashes: 1: eRP4wTuoKQ9g2mO6iek1snWJOts.crl (hash: j4r1RJNQ07g342lS6LUD0Eb/fH0XorTJ68vC9+G2YYo=)
2: qXkw0QfrHcnGQSy5HSSgU96t89k.roa (hash: 0wRXU7/knPguYz2PH2GBKtyb9XdxaFy8E6VNNqtVEPw=)
3: tF9YKOONiKk1CscCM98zlB8EJLs.roa (hash: 6wUmwqGkAOvn8GZ/bao7dMUtyUHLPWG5h6PlJNzejcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:34:6a:b0:4f:de:d2:05:ed:cd:40:75:06:61:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7913f8c13ba8290f60da63ba89e935b275893adb
Validity
Not Before: Jul 24 13:01:13 2026 GMT
Not After : Jul 25 13:01:13 2026 GMT
Subject: CN=aa7c80892135c05ab030daa5e5002fc9239b9940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ab:3e:be:23:f7:9f:ed:e6:f1:f1:1f:0c:ad:
8d:05:7c:b8:39:ad:94:7f:93:fd:a1:eb:4c:ea:47:
10:21:a6:9b:18:83:b3:ca:28:a6:af:24:3a:71:7c:
c9:64:a7:4c:0a:bf:1e:28:21:aa:b9:9f:c0:8e:62:
b6:e2:eb:7a:fe:4b:7f:8c:5b:81:48:e8:0c:da:a1:
d4:2a:a3:bd:e8:bd:41:ea:1a:24:5f:01:de:d6:be:
03:00:a9:ad:ea:02:06:bf:bd:8c:51:ad:f7:8d:c8:
e2:58:12:b6:31:1f:cd:c8:77:c8:3d:54:04:97:c8:
1c:ec:8c:56:3a:30:96:74:a1:a9:51:45:ad:c8:41:
e2:b2:15:db:8e:cb:40:b6:f1:3f:48:46:ed:aa:c7:
e1:63:de:59:11:d7:11:b2:75:57:66:1d:d4:79:2d:
c7:9d:ce:9e:86:bd:ea:8c:6e:a5:00:ea:f8:f6:ce:
5d:ce:d5:07:00:93:2b:3e:5e:93:e3:4b:7a:c1:77:
18:83:2b:18:be:57:56:93:70:19:be:c6:3d:21:32:
7c:4b:0e:d9:02:c4:0d:e3:a9:77:47:d0:e0:70:e5:
ec:c8:c2:45:cc:75:7b:8c:e9:f4:14:0a:f8:c3:20:
62:10:f6:1c:43:72:df:bf:39:28:ac:85:26:54:a8:
4c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7C:80:89:21:35:C0:5A:B0:30:DA:A5:E5:00:2F:C9:23:9B:99:40
X509v3 Authority Key Identifier:
keyid:79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:0a:78:54:6f:7b:c2:6b:c4:d1:e9:a6:d1:ff:9d:25:bd:83:
00:8d:55:dd:47:85:d0:16:79:d9:07:2f:e8:a6:d8:da:db:6f:
13:44:a7:b4:27:51:28:8f:74:e0:af:ba:e5:db:0d:a5:1a:9b:
01:6b:a0:c8:30:37:12:09:cf:f2:aa:6b:9f:4a:a9:b1:c1:ca:
dd:52:b4:21:a0:f3:2e:6e:4b:b8:4a:9a:d7:f8:b4:b7:4e:63:
d2:01:32:bd:79:a9:e7:ec:f7:f7:57:65:7c:ca:94:5d:a0:18:
3c:07:51:12:c7:d2:95:a1:1b:4f:fa:c7:ce:ba:5b:be:4e:76:
62:b9:dc:e2:95:07:e0:e1:85:de:da:3b:42:dd:4b:6d:8d:8f:
d8:5d:84:d7:1f:65:4c:81:1e:2e:3e:e0:87:45:47:c1:87:7e:
e5:dc:b0:89:c8:ea:e7:49:1f:bb:b7:f6:9a:7a:a0:5b:76:48:
b4:14:d1:9d:f3:1b:0a:9d:21:3d:7a:ea:d9:80:07:70:18:8f:
7f:7f:88:47:a1:1f:7e:cc:be:f2:14:92:20:31:dc:70:7a:f3:
34:ab:8f:b2:1b:17:05:94:e2:cb:3c:2f:65:c3:8b:1b:04:f7:
ad:b9:c5:3a:bc:c1:93:ea:c1:75:4c:5b:22:ec:0b:e9:50:52:
45:6f:5c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:27 2026 by rpki-client