
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
File: 3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft (raw, json)
Hash identifier: VZZjNv3t+glJWVJqTKhldxXeTg0Vo4Rdjdyyz/gc0/c=
Subject key identifier: 08:97:11:6A:92:D4:36:53:D1:42:06:AA:7A:70:F1:89:FC:31:70:82
Authority key identifier: DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E
Certificate issuer: /CN=dff1113bfc892d1df49a166047cb8c2aaeca768e
Certificate serial: 019F9059FDB20072A4E35302E20D2584E5FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
Manifest number: 0DD2
Signing time: Thu 23 Jul 2026 19:00:44 +0000
Manifest this update: Thu 23 Jul 2026 19:00:44 +0000
Manifest next update: Fri 24 Jul 2026 19:00:44 +0000
Files and hashes: 1: 3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl (hash: jwL7EGS0kfL+zihnP/GoMs0lXzo6P/G6eFg1i5AcRY4=)
2: GXnGpYod3sIRj2DMZbF5tAJesT0.roa (hash: ZtCsrGCpMtyAhdCuPQhn0qrE9kXND0Yasrdo9pYbklE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:fd:b2:00:72:a4:e3:53:02:e2:0d:25:84:e5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff1113bfc892d1df49a166047cb8c2aaeca768e
Validity
Not Before: Jul 23 19:00:44 2026 GMT
Not After : Jul 24 19:00:44 2026 GMT
Subject: CN=0897116a92d43653d14206aa7a70f189fc317082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:53:08:e4:ba:40:f0:2a:66:33:a5:ac:e7:
8a:8a:bd:36:d9:a9:c2:28:22:9b:65:fc:83:86:48:
be:b9:55:d3:19:1f:15:39:91:a5:08:00:64:4a:11:
fc:f2:a2:ee:90:e2:21:18:f3:2d:b5:5e:91:ea:9d:
03:9d:f9:7e:21:7a:75:dc:85:c0:61:75:84:60:13:
90:60:7d:38:12:62:58:80:83:3e:8f:30:c5:de:75:
63:93:a9:2a:9e:bb:ba:ec:ac:49:40:30:0b:8b:47:
a7:ee:39:a1:8d:8e:0b:1b:85:5a:07:32:19:d9:73:
91:45:a8:2a:5b:ad:01:45:96:af:e6:d5:ee:bd:96:
8e:f5:6a:91:df:29:e8:d1:09:9c:3a:4b:c8:d8:5a:
2f:f1:6e:0a:61:ba:66:5b:9f:ab:6d:d0:b6:65:eb:
6e:77:0f:0f:32:7f:b4:5d:db:3f:c5:f2:25:ef:84:
36:3b:87:08:c8:0d:93:7d:0e:84:5e:ff:72:e1:44:
38:72:0f:92:99:a3:fd:fb:e8:2f:bf:f3:31:6e:af:
97:f4:76:8b:dd:24:49:13:bb:32:76:66:f6:ad:59:
13:a4:14:68:08:6f:62:bf:7f:f0:e0:1c:7e:b4:52:
62:5f:68:cd:40:71:ca:3e:35:95:90:e7:ce:1f:1e:
c7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:97:11:6A:92:D4:36:53:D1:42:06:AA:7A:70:F1:89:FC:31:70:82
X509v3 Authority Key Identifier:
keyid:DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:3f:78:41:62:2c:ec:9b:b4:c2:a2:13:4b:d3:a8:7e:af:49:
bc:2d:6e:45:7c:d2:6b:c9:64:2c:d8:0b:6a:ca:f4:3a:30:df:
a0:7d:73:82:35:e8:2e:ab:13:1d:5e:23:e8:1e:1a:cb:97:ea:
0d:58:1d:de:17:a5:d3:e4:7e:36:9c:32:09:61:99:9a:27:3a:
f8:1c:ee:b8:5a:29:0a:d1:e8:de:aa:68:15:a1:bd:57:1b:2c:
d6:21:33:da:0b:69:bd:05:45:e2:4b:11:81:db:a1:70:bf:01:
44:2f:79:dd:5a:08:8e:c4:d6:62:df:75:0a:ff:fc:b4:de:ba:
da:19:11:39:26:61:a0:2c:ef:39:a0:d1:0a:42:49:31:74:22:
6c:0f:e5:10:62:fd:b5:ad:5d:33:13:df:ab:24:97:c0:68:b1:
82:b7:ec:97:02:21:90:59:a8:f9:76:94:fd:45:73:61:1b:9e:
00:5e:79:8c:8c:d0:64:7e:f3:60:ee:c1:0c:13:ce:97:72:be:
ec:58:3c:6b:d4:54:a3:26:63:73:15:eb:bf:2a:73:c6:5b:0c:
69:a8:c6:bd:86:24:51:10:3c:cb:31:a1:fe:09:52:c6:c9:df:
30:f4:d7:50:ea:85:19:83:b6:b0:39:d5:26:aa:41:b1:dd:11:
f9:fb:e8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:23:18 2026 by rpki-client