
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
File: 3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft (raw, json)
Hash identifier: IrXZqMfFf2+kGt114viHVmiPdsRrnVFggxC7H40KIho=
Subject key identifier: FE:75:75:72:8E:63:DF:F2:1F:F4:8A:CE:9F:C5:6D:A7:2A:74:79:8E
Authority key identifier: DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E
Certificate issuer: /CN=dff1113bfc892d1df49a166047cb8c2aaeca768e
Certificate serial: 01A0C934A55ACD0F3CB6B7F16AC9E5156CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
Manifest number: 0E74
Signing time: Tue 22 Sep 2026 13:01:05 +0000
Manifest this update: Tue 22 Sep 2026 13:01:05 +0000
Manifest next update: Wed 23 Sep 2026 13:01:05 +0000
Files and hashes: 1: 3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl (hash: +RTLg9OoQkWvGx9UIkXyreSKwldf+1xAk6tke5sWgDg=)
2: GXnGpYod3sIRj2DMZbF5tAJesT0.roa (hash: ZtCsrGCpMtyAhdCuPQhn0qrE9kXND0Yasrdo9pYbklE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:34:a5:5a:cd:0f:3c:b6:b7:f1:6a:c9:e5:15:6c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff1113bfc892d1df49a166047cb8c2aaeca768e
Validity
Not Before: Sep 22 13:01:05 2026 GMT
Not After : Sep 23 13:01:05 2026 GMT
Subject: CN=fe7575728e63dff21ff48ace9fc56da72a74798e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1c:12:57:13:af:9c:9d:26:e9:3c:ad:e2:54:
f7:5a:d5:f9:3d:c5:37:d7:c7:97:b4:8d:70:08:e1:
f3:59:45:da:1f:37:75:6b:bf:30:ed:ce:a9:72:53:
7c:d5:06:a8:dc:c5:78:d8:1f:f1:fb:5a:7a:a4:e5:
83:02:ef:b7:b7:4f:40:cf:a5:38:b2:15:20:2b:9c:
6d:cb:5a:94:69:5a:0f:c8:5e:90:93:5f:89:5e:64:
23:f1:c8:50:54:76:ea:e4:be:38:fb:7e:97:21:91:
b5:7a:39:d0:db:9a:29:96:c5:b9:38:97:3d:d5:f5:
20:21:77:39:c1:dc:0a:01:c3:1e:21:6b:3d:4a:99:
6f:79:26:01:f3:36:d1:9d:77:2d:b7:6c:41:d6:99:
fe:3c:83:5d:43:ce:95:b9:11:82:0e:95:76:59:13:
1c:f6:93:84:37:36:35:fb:2b:1e:76:3b:5c:2c:ae:
9b:f7:52:f6:61:fc:d1:86:aa:3c:04:9e:66:af:f5:
6e:80:a5:26:0b:2e:c3:93:e3:24:1f:d1:90:8d:90:
ab:10:5c:64:55:09:26:56:a8:cc:bd:af:62:01:1e:
f8:99:f0:c3:1e:51:51:5b:ba:f5:1d:58:1b:be:2d:
23:35:c4:15:70:d3:b9:8b:b2:42:fe:f0:97:d8:4d:
cc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:75:75:72:8E:63:DF:F2:1F:F4:8A:CE:9F:C5:6D:A7:2A:74:79:8E
X509v3 Authority Key Identifier:
keyid:DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d0:f2:81:5e:7c:60:e1:1a:b3:d6:39:09:74:a0:08:b0:cc:
00:5b:54:84:e1:72:61:02:92:80:5d:17:d7:e7:c1:a7:35:26:
43:80:e1:20:1a:3a:69:47:05:da:de:19:ba:ab:b0:db:29:85:
9f:bd:f9:53:bb:d6:32:d5:c2:b6:69:3a:d9:65:3f:4b:5f:ac:
2e:34:72:65:05:8b:2b:97:f7:c0:34:37:f0:f0:14:2c:82:1a:
dd:9f:b4:34:e1:ba:93:1d:86:a4:f0:f0:0a:32:f6:05:38:38:
cb:0e:78:2a:f1:a5:49:e2:f2:e6:7a:e7:0a:fc:f3:73:6f:2d:
14:f2:e9:2b:d8:70:32:2c:ac:98:a4:aa:75:cb:ae:72:19:76:
fb:f9:8a:b9:95:e5:8e:7f:ff:b8:06:2b:a4:c2:45:3c:86:f2:
63:6d:fb:6d:e3:27:30:36:36:f6:5d:7d:e8:24:ae:59:a5:d8:
3d:e6:fa:be:83:82:bc:2c:fe:c5:3b:3c:4d:c0:56:12:d2:8e:
c2:6e:81:ff:0c:4f:88:bf:43:90:48:61:d5:71:c5:73:68:0d:
86:b2:51:c8:cd:c9:9d:87:d1:d0:07:39:bd:92:5e:26:5a:93:
6a:5f:10:62:cf:00:43:8a:cf:92:71:91:b0:99:f1:32:ae:6e:
c5:7e:1b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:23:59 2026 by rpki-client