Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
File: eRP4wTuoKQ9g2mO6iek1snWJOts.mft (raw, json)
Hash identifier: Ize0Mrna6Blnb+QpVtBvi8zhgPHs/COAKb7ns3gfWrc=
Subject key identifier: AB:B8:95:39:6B:2F:C4:39:BB:66:60:0D:97:C3:BD:01:54:F7:9B:BE
Authority key identifier: 79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
Certificate issuer: /CN=7913f8c13ba8290f60da63ba89e935b275893adb
Certificate serial: 01A02131095DA843983326DB3A24A3AC0492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
Manifest number: 08B8
Signing time: Thu 20 Aug 2026 22:00:56 +0000
Manifest this update: Thu 20 Aug 2026 22:00:56 +0000
Manifest next update: Fri 21 Aug 2026 22:00:56 +0000
Files and hashes: 1: eRP4wTuoKQ9g2mO6iek1snWJOts.crl (hash: V2ggM9WXe0QHS2deXG95MKiNh0zseE9H9oV3zUEeGK8=)
2: qXkw0QfrHcnGQSy5HSSgU96t89k.roa (hash: 0wRXU7/knPguYz2PH2GBKtyb9XdxaFy8E6VNNqtVEPw=)
3: tF9YKOONiKk1CscCM98zlB8EJLs.roa (hash: 6wUmwqGkAOvn8GZ/bao7dMUtyUHLPWG5h6PlJNzejcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:21:31:09:5d:a8:43:98:33:26:db:3a:24:a3:ac:04:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7913f8c13ba8290f60da63ba89e935b275893adb
Validity
Not Before: Aug 20 22:00:56 2026 GMT
Not After : Aug 21 22:00:56 2026 GMT
Subject: CN=abb895396b2fc439bb66600d97c3bd0154f79bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fa:d5:17:2b:9f:84:f6:66:a8:08:74:62:36:
92:41:06:6c:b6:06:c3:83:ae:35:7c:28:58:5d:53:
91:c2:c8:cd:ad:82:df:7a:0e:51:ac:2b:c5:66:50:
cb:48:3e:c5:9f:de:b5:f5:b0:0c:f9:47:7b:83:33:
c9:42:d4:0b:a1:af:87:60:e7:f4:3c:60:7d:3e:15:
7e:02:17:cb:09:e3:f9:b0:40:ab:d3:1e:6a:74:3b:
be:87:23:8c:fa:17:13:11:48:88:52:78:65:ad:86:
86:b6:74:eb:34:ee:59:49:d4:26:fa:a0:86:be:8f:
3c:3c:54:10:f2:74:99:71:d0:98:91:29:f3:22:71:
a5:b2:3e:f5:9c:4c:b4:ba:bd:81:af:44:4c:94:28:
6f:91:96:88:3c:bd:c2:e2:d0:a8:1a:56:2b:67:5f:
85:68:19:21:b6:ff:89:97:05:fa:46:86:ab:49:58:
c6:e5:29:9a:4e:36:37:81:69:9c:08:7b:ff:6f:88:
e5:5c:64:46:a5:52:8e:06:46:7b:92:03:e0:fd:c6:
71:8f:11:96:8f:56:c9:18:7f:bd:a1:a9:92:dc:40:
96:56:1d:a9:18:6c:8e:2a:c7:8e:19:66:f3:12:8a:
7b:44:6b:12:2c:65:9c:e8:91:5e:f6:9e:a8:23:c0:
78:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B8:95:39:6B:2F:C4:39:BB:66:60:0D:97:C3:BD:01:54:F7:9B:BE
X509v3 Authority Key Identifier:
keyid:79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:69:f7:07:f1:be:a7:86:03:85:9c:df:c0:15:b2:67:8b:f4:
e3:48:d2:0c:ac:8e:8a:2a:a4:15:ff:22:ad:21:12:09:6a:34:
e1:87:f9:a8:50:77:b5:a2:a3:3d:04:c7:34:a9:8e:bb:eb:6a:
84:38:8a:72:11:fa:3d:6b:95:d8:c2:1e:fa:f7:e2:8f:c6:f8:
c7:ba:1b:14:f8:da:34:90:8b:2b:6e:cf:90:79:a1:09:50:ef:
63:da:b1:9c:20:db:80:aa:c6:e5:f7:5a:aa:f3:78:55:30:68:
59:42:0c:91:26:3b:f8:6f:0d:3d:56:a2:d7:57:92:36:7d:ef:
e7:6e:04:71:b8:32:21:0f:af:3b:17:e4:2c:c2:10:47:65:91:
94:f5:7d:f5:10:e4:7f:9a:49:0b:14:cd:d8:56:4a:dc:00:4e:
ee:32:7a:ba:38:e0:3d:b6:f2:55:ea:70:68:91:98:ab:98:2a:
29:43:58:54:9c:1c:ba:67:96:dc:19:6b:f2:a4:f3:d7:dd:0b:
6e:91:e0:eb:dd:38:b5:8f:3c:6d:2d:ba:55:56:26:bf:30:61:
fe:69:f5:1a:66:4a:91:6b:e1:59:00:a3:ae:58:ff:3e:00:2f:
54:80:ff:19:a6:37:e9:e4:cf:72:25:6a:e6:63:27:f0:c3:78:
39:76:61:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:33:20 2026 by rpki-client