Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
File: 3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft (raw, json)
Hash identifier: qMESTvfUL1Q/i/hwpWMTfnc5J81AcRcvmFe+TEwRe0U=
Subject key identifier: 4B:EC:DD:43:35:B3:9F:B4:60:3E:21:22:F6:D7:15:5B:0D:CF:6E:4B
Authority key identifier: DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E
Certificate issuer: /CN=dff1113bfc892d1df49a166047cb8c2aaeca768e
Certificate serial: 019D284D4896001139E7D3FC8401E6FE54DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
Manifest number: 0C93
Signing time: Thu 26 Mar 2026 04:00:46 +0000
Manifest this update: Thu 26 Mar 2026 04:00:46 +0000
Manifest next update: Fri 27 Mar 2026 04:00:46 +0000
Files and hashes: 1: 3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl (hash: JxIwaQ7uKMVX5l41LAeRrWQZKScUDH8IHf96Ibzdixo=)
2: GXnGpYod3sIRj2DMZbF5tAJesT0.roa (hash: ZtCsrGCpMtyAhdCuPQhn0qrE9kXND0Yasrdo9pYbklE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:48:96:00:11:39:e7:d3:fc:84:01:e6:fe:54:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff1113bfc892d1df49a166047cb8c2aaeca768e
Validity
Not Before: Mar 26 04:00:46 2026 GMT
Not After : Mar 27 04:00:46 2026 GMT
Subject: CN=4becdd4335b39fb4603e2122f6d7155b0dcf6e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1c:41:d7:ab:49:b8:18:48:c4:1d:f8:60:31:
2d:60:b5:b8:ba:bf:f1:d8:2a:a9:c8:20:b3:08:79:
7f:0c:e9:73:8f:28:41:87:f2:d6:ef:ad:b9:7d:16:
96:df:48:c3:86:a6:ee:ae:85:cd:fe:4e:c0:03:0e:
18:8e:26:76:38:6e:42:25:f1:6b:70:0e:d4:48:e4:
d3:4d:c0:c5:9a:80:61:e3:90:d4:13:00:ce:d6:58:
c9:30:ef:cd:b6:bb:45:86:73:34:f9:28:4d:14:f4:
97:e4:95:ff:b4:e3:e1:13:40:f2:26:62:3f:60:4d:
a3:67:cd:54:a4:85:41:0b:97:0d:05:0c:76:cf:1a:
16:14:31:34:db:94:ff:d9:ed:07:5a:88:69:63:ca:
eb:dd:45:a4:7c:1b:91:bd:02:b0:41:f0:4f:8e:39:
9a:e6:86:1e:ad:ba:77:72:b8:2d:9a:f4:2e:a8:eb:
ec:ef:aa:7d:b3:48:7b:90:85:87:b2:ae:b5:01:46:
2d:d5:36:f8:52:9d:3d:3d:7f:4f:d8:6e:b6:ee:5b:
70:e5:b9:33:23:56:47:df:33:45:13:4f:cb:17:33:
96:00:99:89:a2:71:fb:24:ec:24:68:54:bb:56:5d:
99:9f:c3:96:32:eb:c2:80:19:e4:f5:17:59:70:54:
ae:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EC:DD:43:35:B3:9F:B4:60:3E:21:22:F6:D7:15:5B:0D:CF:6E:4B
X509v3 Authority Key Identifier:
keyid:DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:5b:16:10:e0:71:8f:4a:56:2a:b9:54:e1:a2:ae:51:46:bb:
4a:f9:79:3d:42:c2:f3:12:0d:0a:12:7f:d2:5e:99:ef:19:23:
58:ca:c9:2f:3f:18:4d:f4:77:64:da:a3:b6:79:13:88:c9:86:
99:e1:84:c3:59:61:d5:5d:6e:e3:7e:83:e4:08:13:a7:04:3f:
7e:40:7a:20:6c:73:16:db:85:db:60:e7:59:17:4f:80:82:18:
bc:d1:a6:ce:85:29:56:25:26:55:b1:64:a5:59:bd:a9:4a:1d:
94:7a:a4:de:70:f2:8d:83:a9:19:94:5a:59:b7:8b:6b:74:cd:
b9:c5:3b:48:f8:de:fc:45:13:66:78:ae:b9:eb:71:e4:d7:65:
92:5c:c7:58:04:eb:00:bf:14:8b:68:06:17:1b:94:7a:98:b3:
6a:84:d5:5d:00:08:16:d5:a4:5c:af:ba:35:98:a5:e8:ad:35:
d7:db:1d:67:53:e6:f3:45:2b:fd:3f:6a:66:11:f5:26:62:31:
4a:ea:b8:d7:9b:13:f4:3e:d1:1d:d3:3a:e5:c5:96:5c:b1:c3:
38:de:c5:2f:93:b9:98:98:7a:20:de:6b:00:8d:18:bd:81:95:
05:fe:9f:3d:da:5e:fd:84:99:40:08:cf:69:24:6a:d1:7f:91:
f0:68:e8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:49 2026 by rpki-client