Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
File: eRP4wTuoKQ9g2mO6iek1snWJOts.mft (raw, json)
Hash identifier: LdA+V61ZBN5lpeYxG5NOaD1+n6/NGZyUEdMZsrHkMTw=
Subject key identifier: DE:A7:2D:6D:C6:12:FD:EC:E9:01:50:1C:49:76:D6:4B:14:42:E4:B3
Authority key identifier: 79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
Certificate issuer: /CN=7913f8c13ba8290f60da63ba89e935b275893adb
Certificate serial: 019C7E5BA0FDC3C02402F3A8B47756764A0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
Manifest number: 06D6
Signing time: Sat 21 Feb 2026 04:01:00 +0000
Manifest this update: Sat 21 Feb 2026 04:01:00 +0000
Manifest next update: Sun 22 Feb 2026 04:01:00 +0000
Files and hashes: 1: eRP4wTuoKQ9g2mO6iek1snWJOts.crl (hash: 3iQ50bmGRC1w+QIXer9S13RkdjX3pHpL6ERliQXZt+A=)
2: qXkw0QfrHcnGQSy5HSSgU96t89k.roa (hash: 0wRXU7/knPguYz2PH2GBKtyb9XdxaFy8E6VNNqtVEPw=)
3: tF9YKOONiKk1CscCM98zlB8EJLs.roa (hash: 6wUmwqGkAOvn8GZ/bao7dMUtyUHLPWG5h6PlJNzejcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 00:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7e:5b:a0:fd:c3:c0:24:02:f3:a8:b4:77:56:76:4a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7913f8c13ba8290f60da63ba89e935b275893adb
Validity
Not Before: Feb 21 04:01:00 2026 GMT
Not After : Feb 22 04:01:00 2026 GMT
Subject: CN=dea72d6dc612fdece901501c4976d64b1442e4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6a:c4:65:c0:7c:47:83:61:27:9c:32:1d:33:
62:11:2c:c6:bd:dc:a0:64:11:65:1a:8e:44:c1:8b:
4f:65:1e:c7:df:65:5e:01:df:45:fb:00:e9:8a:d6:
32:e7:e1:33:de:8b:12:bb:c0:10:75:17:a9:e5:f9:
43:d6:85:af:a6:b7:18:17:50:65:28:5e:cb:d8:7f:
14:a8:46:b2:07:8f:ff:2f:a2:d0:28:5e:cb:24:1f:
31:39:33:18:3c:9c:ab:10:d1:07:25:bc:aa:a7:77:
e3:8b:84:f0:f7:82:d9:a3:cc:f8:64:d3:38:d2:76:
f9:45:12:42:3b:ad:60:53:4f:4c:4e:4b:f4:f8:94:
d1:cb:d6:61:86:f7:27:89:5b:85:07:bf:88:19:77:
99:8b:ee:8f:70:02:3f:1c:ac:53:fb:e9:48:48:cd:
24:f0:b5:c8:e9:4b:45:07:3f:24:4d:ec:2b:09:ca:
05:34:f0:54:19:b6:c5:77:0b:d8:db:5b:e4:1d:3b:
84:99:e8:14:8a:ee:ae:b5:db:97:0b:5d:1d:72:ea:
aa:80:b2:a5:61:29:d9:4f:52:b8:75:01:d0:fa:f2:
32:a2:dc:6b:8f:2a:82:76:2f:e0:67:31:0a:d9:09:
a7:90:02:e6:76:35:ec:65:b6:c0:46:93:d2:f0:0c:
ed:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A7:2D:6D:C6:12:FD:EC:E9:01:50:1C:49:76:D6:4B:14:42:E4:B3
X509v3 Authority Key Identifier:
keyid:79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:1b:90:a1:e0:8c:fe:29:5e:50:1c:17:3a:81:a1:ed:93:9e:
46:cd:1c:80:9c:8e:e3:62:36:35:ae:97:52:d0:08:18:95:a7:
df:50:10:73:4b:47:71:cc:cc:da:82:ae:f6:15:95:20:3f:81:
79:c4:9a:41:9e:cd:fd:07:17:e6:24:e7:c6:45:ce:d4:8c:50:
74:5f:18:8d:69:e8:ce:84:7e:0e:f7:1a:5d:a4:e9:e2:6a:81:
b8:ab:98:9f:78:46:f7:63:0e:42:6c:c0:34:74:e5:14:e2:9c:
9b:e8:e4:45:e9:40:90:f6:3f:88:b3:62:42:98:b6:66:e0:ca:
3a:ab:97:48:3e:97:db:1c:69:ce:1f:66:40:df:77:11:e1:7c:
14:de:2f:04:71:50:04:60:a5:fb:a5:a9:f2:a4:a0:49:5b:62:
5c:16:c7:e6:b2:20:a0:b3:62:49:df:56:06:d7:82:f8:05:f1:
ed:79:e3:1a:90:34:50:30:03:0b:64:0c:b1:62:d4:a8:13:04:
d8:bf:17:8b:46:d6:e6:37:bc:02:49:71:89:ca:24:ae:3c:eb:
1a:77:d0:a3:da:fe:94:80:d1:35:6d:cb:55:cc:c4:82:30:b9:
04:a3:fc:0a:ca:a7:1b:81:41:53:fb:41:04:6e:73:cc:82:7e:
cd:30:1e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 06:07:49 2026 by rpki-client