Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
File: eRP4wTuoKQ9g2mO6iek1snWJOts.mft (raw, json)
Hash identifier: mOcIpdeaX/kLdnyOiXyqNROI0Jc14vgoWjQavdXSclc=
Subject key identifier: CA:6A:E2:88:F4:DA:DE:0A:BC:A0:A0:3D:94:04:F1:E1:8F:C5:00:32
Authority key identifier: 79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
Certificate issuer: /CN=7913f8c13ba8290f60da63ba89e935b275893adb
Certificate serial: 019D284E5F8B0132AFB1A067A78C6F4271D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
Manifest number: 072E
Signing time: Thu 26 Mar 2026 04:01:58 +0000
Manifest this update: Thu 26 Mar 2026 04:01:58 +0000
Manifest next update: Fri 27 Mar 2026 04:01:58 +0000
Files and hashes: 1: eRP4wTuoKQ9g2mO6iek1snWJOts.crl (hash: TQ47lCryuViIuyp1mmySFoFbw5C+le1vi6+ZJYZoGq4=)
2: qXkw0QfrHcnGQSy5HSSgU96t89k.roa (hash: 0wRXU7/knPguYz2PH2GBKtyb9XdxaFy8E6VNNqtVEPw=)
3: tF9YKOONiKk1CscCM98zlB8EJLs.roa (hash: 6wUmwqGkAOvn8GZ/bao7dMUtyUHLPWG5h6PlJNzejcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:5f:8b:01:32:af:b1:a0:67:a7:8c:6f:42:71:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7913f8c13ba8290f60da63ba89e935b275893adb
Validity
Not Before: Mar 26 04:01:58 2026 GMT
Not After : Mar 27 04:01:58 2026 GMT
Subject: CN=ca6ae288f4dade0abca0a03d9404f1e18fc50032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9f:7d:1f:63:84:ec:57:4d:39:93:9b:52:59:
97:bb:87:34:08:21:0b:a1:a0:65:91:10:d7:c0:f2:
1b:ac:bb:d9:e7:1a:9a:68:8d:dd:c1:9c:5a:f8:f9:
18:b4:1c:5c:c6:20:af:86:83:74:39:b2:df:d4:bd:
49:6b:3f:4e:f8:24:54:cd:9c:76:68:b2:6c:97:29:
bd:d4:56:b3:cb:6f:1b:e7:4e:b9:d0:93:64:2c:55:
61:1c:64:c8:ea:c0:92:d0:1f:25:14:12:c3:7b:62:
e9:31:90:dd:6d:d8:4d:99:87:5a:29:93:69:e1:68:
96:26:a9:69:28:c7:5d:33:82:78:24:c5:28:c7:8a:
9f:a9:e7:4a:a3:56:78:eb:9b:e7:27:6e:bc:e2:40:
05:7d:8e:92:ec:19:83:a1:d3:ff:76:0b:cb:99:4b:
a6:18:fe:b7:e9:cd:ae:f1:ce:d8:ce:e8:9f:b8:43:
59:af:1e:be:63:86:9a:b7:63:7c:5a:b1:05:06:36:
5c:79:b8:c6:0c:15:1f:1e:17:54:ca:e3:c5:47:15:
1d:05:5b:82:ee:c9:15:02:af:bf:f4:37:a4:45:b3:
29:8c:41:eb:f3:95:07:a5:7d:51:a1:e6:f9:cf:4b:
5e:ad:29:01:1d:9e:a0:99:f7:41:26:43:94:b9:a2:
2f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6A:E2:88:F4:DA:DE:0A:BC:A0:A0:3D:94:04:F1:E1:8F:C5:00:32
X509v3 Authority Key Identifier:
keyid:79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:8d:dd:6a:ce:20:e3:79:e0:39:d1:1d:bf:27:cc:85:4c:09:
bf:51:70:cf:cb:ac:ab:79:6c:82:15:1d:f3:d8:21:b1:9e:08:
63:96:c6:bc:92:38:31:94:b1:e5:20:4e:b2:30:33:0e:44:9e:
c2:41:fa:3d:a9:eb:6a:96:ee:0b:8c:87:e3:a6:1d:14:44:ad:
dd:f3:3a:04:0d:b8:f8:c2:a1:b7:5d:53:c3:82:56:91:c7:27:
13:fc:c5:53:af:10:41:b9:a0:5e:31:21:33:d0:75:e5:7c:5f:
7c:0a:77:10:19:8e:b1:7f:ad:22:4a:a7:51:c8:c3:46:36:d3:
3d:e7:c1:bf:d4:11:75:8e:68:8d:1e:a7:d4:be:47:f9:c9:13:
d1:a7:27:65:6c:79:be:7c:18:f7:32:f8:29:e2:6e:ce:05:fd:
20:cb:13:a0:b6:44:db:02:5e:6c:16:d2:3e:a6:99:23:35:2f:
42:c4:40:7b:27:64:ac:0b:e0:c5:11:c8:af:62:4f:ed:c7:11:
b0:68:e4:cb:53:04:a8:46:19:19:ce:47:4d:1a:e5:5f:f6:a5:
a1:6f:b3:48:e9:d6:90:ea:15:df:7f:1c:f8:3e:5f:5e:c1:ce:
8f:a4:8c:d1:90:22:f3:0c:31:36:fd:2a:a2:b7:a6:d8:4a:d3:
e6:9b:ce:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:08:40 2026 by rpki-client