Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
File: eRP4wTuoKQ9g2mO6iek1snWJOts.mft (raw, json)
Hash identifier: MKI6vMxLa2s5WRbsGGBX1EqGamMdNtnUSvai7ZLzubc=
Subject key identifier: FE:AF:93:22:9A:BA:C8:99:33:6E:85:D5:49:BD:C9:3A:59:0F:02:F9
Authority key identifier: 79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
Certificate issuer: /CN=7913f8c13ba8290f60da63ba89e935b275893adb
Certificate serial: 019E216D9C220BB6B18129C79CA1070949CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
Manifest number: 07AF
Signing time: Wed 13 May 2026 13:01:31 +0000
Manifest this update: Wed 13 May 2026 13:01:31 +0000
Manifest next update: Thu 14 May 2026 13:01:31 +0000
Files and hashes: 1: eRP4wTuoKQ9g2mO6iek1snWJOts.crl (hash: um1STl4FxaGMZf2SdGuMDNakTz6wO3krYgKT7tkS3BQ=)
2: qXkw0QfrHcnGQSy5HSSgU96t89k.roa (hash: 0wRXU7/knPguYz2PH2GBKtyb9XdxaFy8E6VNNqtVEPw=)
3: tF9YKOONiKk1CscCM98zlB8EJLs.roa (hash: 6wUmwqGkAOvn8GZ/bao7dMUtyUHLPWG5h6PlJNzejcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:9c:22:0b:b6:b1:81:29:c7:9c:a1:07:09:49:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7913f8c13ba8290f60da63ba89e935b275893adb
Validity
Not Before: May 13 13:01:31 2026 GMT
Not After : May 14 13:01:31 2026 GMT
Subject: CN=feaf93229abac899336e85d549bdc93a590f02f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4e:3a:c9:cf:36:57:06:98:80:aa:b1:a3:35:
1a:3a:ad:5d:64:0d:b0:4b:f2:a0:b6:21:c1:5b:58:
25:fd:20:3e:fe:5b:73:f1:35:2c:82:cb:e9:ad:da:
49:33:fc:49:10:1c:f8:f7:a2:25:73:be:f7:7e:2b:
60:ed:2e:29:53:85:ed:8b:df:4b:f0:a4:d6:16:16:
8e:27:7b:c0:53:1c:a0:e8:11:48:27:37:eb:9e:1f:
b2:fb:e0:1b:ee:4e:69:cb:e0:32:b6:c9:79:a6:77:
29:15:03:4f:f4:a1:1e:fe:00:2c:60:32:64:a2:38:
23:a4:d7:0b:20:8a:24:06:d5:96:ab:90:ea:57:04:
d6:a9:db:5e:af:06:58:1f:8f:05:c2:e0:6b:80:1b:
88:55:40:78:9b:0f:73:78:e6:04:5a:91:5b:cd:59:
7a:4b:74:71:07:8d:62:f0:d2:8f:1e:e2:09:49:c0:
5f:7c:57:e2:35:d0:ac:65:61:55:7b:0d:3e:60:33:
f0:c3:cb:d8:84:7d:01:47:c4:84:7d:4d:95:21:d3:
bb:8f:14:31:d2:34:eb:49:6a:60:4a:d0:27:15:1d:
b1:1d:ae:20:6e:4c:5c:25:f0:da:48:dd:2c:3d:77:
9c:7d:60:d5:65:91:f9:b8:8d:2b:58:e8:0f:f4:3b:
b3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AF:93:22:9A:BA:C8:99:33:6E:85:D5:49:BD:C9:3A:59:0F:02:F9
X509v3 Authority Key Identifier:
keyid:79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:4e:b6:9b:30:fd:c9:3c:c7:39:66:ef:e1:1c:04:bd:33:81:
5d:75:c4:1c:64:af:14:c9:53:f2:4f:7d:bb:fe:e3:b4:45:92:
a7:1d:8e:73:7f:27:11:6c:c4:bc:f5:1c:a4:49:6b:ab:d5:f2:
a8:24:16:79:e2:4c:b0:49:ee:12:0e:b7:e9:da:cd:c2:ea:5f:
e7:ee:19:a1:9a:e6:80:45:2d:17:ef:ff:7b:13:4f:0a:fc:db:
8f:80:83:49:0b:53:c2:31:5f:da:17:95:be:f1:88:0f:c8:b2:
d6:e5:91:9d:d1:67:0c:f4:79:a7:65:b0:75:37:f0:9d:c9:74:
3e:27:ec:9b:54:d9:77:f1:36:5f:b1:fb:32:c2:48:0c:4f:86:
4d:12:3c:24:a8:03:86:bd:b7:00:b1:62:be:64:7b:3f:fb:1b:
89:25:84:dc:f9:ec:95:3a:09:90:49:a5:0a:59:2f:75:be:d0:
07:5e:44:06:10:52:34:17:23:d3:ea:56:6f:4e:38:29:d5:70:
54:6b:99:e8:f9:97:f8:39:16:c7:b3:bd:e1:88:4e:08:fe:74:
f7:77:98:e1:03:75:7f:de:9c:80:15:f1:b1:b7:12:8e:64:fb:
b6:9f:8d:65:46:11:15:0e:db:e2:1a:54:da:61:59:d9:69:15:
f1:8d:21:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:38:53 2026 by rpki-client