Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
File: eRP4wTuoKQ9g2mO6iek1snWJOts.mft (raw, json)
Hash identifier: PSU9RSSKqx4VmV5cK8OWeLvyh5fFT/Z7QT+Mr884tos=
Subject key identifier: 5C:1B:F5:E4:38:41:8A:0C:96:24:F2:47:DF:5D:A8:09:F6:C8:2F:92
Authority key identifier: 79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
Certificate issuer: /CN=7913f8c13ba8290f60da63ba89e935b275893adb
Certificate serial: 01A12F8F8811F11361B670186B18696B478E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
Manifest number: 0944
Signing time: Mon 12 Oct 2026 10:01:37 +0000
Manifest this update: Mon 12 Oct 2026 10:01:37 +0000
Manifest next update: Tue 13 Oct 2026 10:01:37 +0000
Files and hashes: 1: eRP4wTuoKQ9g2mO6iek1snWJOts.crl (hash: S2spujITitClmA7wnJCoWRGQ2/ioTVGLuCTmuoqU4pw=)
2: qXkw0QfrHcnGQSy5HSSgU96t89k.roa (hash: 0wRXU7/knPguYz2PH2GBKtyb9XdxaFy8E6VNNqtVEPw=)
3: tF9YKOONiKk1CscCM98zlB8EJLs.roa (hash: 6wUmwqGkAOvn8GZ/bao7dMUtyUHLPWG5h6PlJNzejcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 10:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:8f:88:11:f1:13:61:b6:70:18:6b:18:69:6b:47:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7913f8c13ba8290f60da63ba89e935b275893adb
Validity
Not Before: Oct 12 10:01:37 2026 GMT
Not After : Oct 13 10:01:37 2026 GMT
Subject: CN=5c1bf5e438418a0c9624f247df5da809f6c82f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:63:27:02:1f:60:22:b3:95:8e:72:54:e7:3b:
7e:63:58:e6:f9:1d:7b:42:7b:46:7f:35:a6:08:cc:
bb:30:88:14:b1:78:0f:80:54:ea:a5:c1:45:6b:a6:
51:15:32:24:de:9a:c3:b5:af:4c:cf:6e:56:96:d2:
df:74:ea:ed:31:33:16:78:bc:ec:c5:63:78:00:cc:
2b:7a:a0:8d:01:ea:63:e5:81:fd:fb:cf:55:e6:0a:
5a:aa:86:b3:f8:85:8e:fd:75:49:47:99:0c:68:9c:
c4:cb:8a:ba:d7:93:1a:8d:aa:a9:fb:b4:b8:3c:a1:
bc:e1:67:e4:32:c6:69:c9:2f:88:21:5f:44:04:39:
66:3a:23:a2:5c:fe:ac:e1:d2:32:81:46:6e:e8:78:
b6:92:ea:e5:de:a4:39:b0:bd:d9:a6:18:35:9d:2f:
7e:6f:a2:98:c4:95:aa:d7:6c:7b:52:da:38:e1:6d:
65:23:7e:6b:20:65:ae:73:bc:16:63:75:45:aa:4b:
0a:a5:6d:7a:fe:63:9e:cf:b9:a4:b5:af:cb:5a:09:
3f:0c:39:22:50:3e:0e:92:63:1c:b6:23:bf:fe:4e:
1e:af:dd:08:07:2c:43:82:3a:5f:61:87:94:ce:27:
d1:c2:51:44:c2:0b:ac:b2:e8:84:c3:c2:28:46:9b:
09:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1B:F5:E4:38:41:8A:0C:96:24:F2:47:DF:5D:A8:09:F6:C8:2F:92
X509v3 Authority Key Identifier:
keyid:79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:f7:cc:a3:18:33:a2:01:56:e7:87:41:d7:3a:f9:2e:25:34:
8f:31:e7:6f:02:c8:6d:33:be:8a:2a:a9:38:4e:04:f3:d1:31:
bd:e2:a0:d6:db:81:f9:a5:ce:5a:9f:39:2c:9c:97:6a:cd:e7:
bf:4f:08:b9:ff:9b:ec:e6:5c:84:61:87:29:12:d3:52:2f:cd:
b0:e0:a4:46:2b:4e:92:bd:53:99:ed:01:f3:78:14:8b:9a:01:
f9:57:63:51:b5:25:3a:ca:5c:08:17:50:06:60:6b:13:5d:d7:
8c:36:45:49:28:67:24:49:c3:88:fd:dd:42:1f:c6:38:df:ce:
f0:4a:dc:6f:2d:a3:44:29:6d:d0:93:b2:be:79:2d:ba:42:8b:
70:7a:5c:04:8a:3a:bd:01:a5:b3:c7:3a:dd:59:1b:ec:42:ed:
e7:cf:64:7e:84:a8:08:03:53:b6:4d:ff:3f:30:0b:65:09:74:
ee:f4:62:95:0d:8f:75:32:9a:8b:77:15:a6:78:c9:01:12:a4:
7f:60:54:98:f7:21:14:f8:c3:57:60:ef:67:92:da:bb:85:ae:
60:3c:d4:c0:f6:e0:15:e0:de:e5:bb:9d:58:fe:73:71:9b:07:
0a:ae:7e:9f:06:bb:64:46:7c:b6:83:29:9d:e3:cb:05:77:4e:
9a:df:d4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:50:07 2026 by rpki-client