Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
File: 3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft (raw, json)
Hash identifier: 3ndyVIAMEJ8ggwiOBviSgFm7vznOd/BeeVlhp3x1f+o=
Subject key identifier: 0E:0C:D3:1C:C4:ED:BD:E8:EB:99:41:FF:80:09:43:17:FD:D2:DF:32
Authority key identifier: DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E
Certificate issuer: /CN=dff1113bfc892d1df49a166047cb8c2aaeca768e
Certificate serial: 019E1D90449FAC2E655F3CDB815137B5B8F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
Manifest number: 0D12
Signing time: Tue 12 May 2026 19:00:54 +0000
Manifest this update: Tue 12 May 2026 19:00:54 +0000
Manifest next update: Wed 13 May 2026 19:00:54 +0000
Files and hashes: 1: 3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl (hash: CfzXClSHvZYEj2EC+BxP29n1GBRUWvhE8x/M/lRxZZM=)
2: GXnGpYod3sIRj2DMZbF5tAJesT0.roa (hash: ZtCsrGCpMtyAhdCuPQhn0qrE9kXND0Yasrdo9pYbklE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:44:9f:ac:2e:65:5f:3c:db:81:51:37:b5:b8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff1113bfc892d1df49a166047cb8c2aaeca768e
Validity
Not Before: May 12 19:00:54 2026 GMT
Not After : May 13 19:00:54 2026 GMT
Subject: CN=0e0cd31cc4edbde8eb9941ff80094317fdd2df32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bd:b3:1c:18:e9:f8:c4:5c:be:bd:8d:22:00:
31:c9:80:15:81:9b:f4:ba:b4:61:71:a0:ba:62:84:
05:e2:46:b8:b2:e6:51:13:e9:52:58:3d:89:ff:e6:
31:e4:58:58:11:41:8d:f9:e0:2b:3e:fa:1b:76:e3:
19:96:61:5f:eb:04:5b:2d:59:11:03:28:34:18:5d:
c5:c3:b3:fe:c8:58:0a:0d:f1:fc:55:2e:9e:75:0d:
eb:bd:4e:c1:c8:ab:16:ee:71:8b:68:df:08:2e:6d:
c9:79:12:39:aa:3c:e3:5d:8e:ab:d2:a2:ac:ed:12:
3a:99:53:3d:9f:a4:c1:0d:ae:f6:c7:24:b0:00:63:
cb:9c:8f:e7:2a:0b:ff:bd:93:19:6a:98:b5:ee:a5:
cd:5d:8e:2d:98:8c:78:3d:f6:ba:67:33:b8:87:3b:
ff:a3:8c:52:5e:f3:0b:cc:93:dc:0f:15:fc:fe:f8:
ba:d4:92:f9:d0:31:c7:6e:82:f0:80:02:33:ad:41:
7e:1b:2d:ed:a8:68:a9:55:af:cb:65:41:9e:c4:52:
52:84:74:4e:0c:c1:42:3f:8a:20:76:c1:48:87:5c:
8a:d7:4b:d9:aa:ba:35:4b:d9:75:86:aa:0c:3f:d2:
4f:36:32:64:c8:a9:5f:22:7c:ea:4c:a7:70:8d:30:
db:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0C:D3:1C:C4:ED:BD:E8:EB:99:41:FF:80:09:43:17:FD:D2:DF:32
X509v3 Authority Key Identifier:
keyid:DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f1:d8:9c:47:af:c3:5a:fd:50:a3:2d:f2:ce:ee:22:cb:b4:
af:14:f6:3d:c0:18:5c:00:c7:56:04:6a:71:ca:c9:19:93:3a:
97:6d:4c:16:5b:b5:aa:e4:b1:f7:d8:18:5f:24:1a:48:20:e9:
28:9a:bc:fa:f7:85:69:f0:e6:9e:ed:50:70:79:35:98:e3:68:
dd:26:3f:47:e8:be:70:85:18:eb:6a:fc:28:90:ef:a3:ea:b5:
5c:11:91:5f:46:66:05:dd:d2:78:75:e2:b2:22:5d:ef:7f:9d:
c5:29:19:16:15:d8:5f:bd:ba:0a:37:36:88:62:86:db:26:c1:
e5:ed:10:45:3e:c7:fa:7f:ed:5a:1e:02:91:05:fa:28:b5:14:
9c:d1:aa:e8:1b:b8:3a:b9:38:7b:83:7d:0c:bc:e6:b1:0f:18:
ae:7e:49:a8:6a:a2:eb:85:55:fc:25:d8:88:ed:c8:2c:05:0b:
10:1a:32:5d:fd:52:81:7c:35:5f:f7:23:b1:05:cf:e2:b7:65:
35:dc:1a:06:04:78:ee:55:47:ca:9d:89:24:c1:dc:0c:09:e3:
73:27:45:9d:40:8c:70:b8:1c:2d:4c:7c:41:de:a5:9e:95:37:
7b:4a:1a:2c:c3:79:1c:cd:0f:8e:76:e0:fd:ad:01:35:2b:f2:
96:46:e1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:31:24 2026 by rpki-client