Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
File: eRP4wTuoKQ9g2mO6iek1snWJOts.mft (raw, json)
Hash identifier: gCLQf8l5firkn3qooKDpMUJbw+PQtETP3HdrT6tYCxQ=
Subject key identifier: DF:8A:DA:67:B7:D6:8E:43:45:70:97:9C:CC:83:2A:27:A4:F6:C3:0E
Authority key identifier: 79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
Certificate issuer: /CN=7913f8c13ba8290f60da63ba89e935b275893adb
Certificate serial: 01A123F8F1A668C247D57A5ED73E002AD672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
Manifest number: 093E
Signing time: Sat 10 Oct 2026 04:01:19 +0000
Manifest this update: Sat 10 Oct 2026 04:01:19 +0000
Manifest next update: Sun 11 Oct 2026 04:01:19 +0000
Files and hashes: 1: eRP4wTuoKQ9g2mO6iek1snWJOts.crl (hash: kL+LZD2u1XaR6rasOrqAETh1MSJ8xKtN6v/UrZo/qVc=)
2: qXkw0QfrHcnGQSy5HSSgU96t89k.roa (hash: 0wRXU7/knPguYz2PH2GBKtyb9XdxaFy8E6VNNqtVEPw=)
3: tF9YKOONiKk1CscCM98zlB8EJLs.roa (hash: 6wUmwqGkAOvn8GZ/bao7dMUtyUHLPWG5h6PlJNzejcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:f8:f1:a6:68:c2:47:d5:7a:5e:d7:3e:00:2a:d6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7913f8c13ba8290f60da63ba89e935b275893adb
Validity
Not Before: Oct 10 04:01:19 2026 GMT
Not After : Oct 11 04:01:19 2026 GMT
Subject: CN=df8ada67b7d68e434570979ccc832a27a4f6c30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a7:d4:d1:e7:62:06:1c:7e:ec:29:1f:cb:56:
4c:38:32:3e:92:0b:1e:c3:7c:6c:53:74:a8:7b:68:
5b:7d:99:f0:9d:ec:29:3b:e4:2a:1c:bb:5a:67:5d:
86:26:29:14:d1:92:a5:be:12:52:40:02:3e:75:8b:
ec:ac:2a:4d:10:a1:fc:79:15:54:29:24:88:b3:10:
a5:1d:fc:d0:be:af:a9:88:5f:1f:04:38:d8:9d:fc:
d3:a3:df:b7:68:c0:65:4c:79:5e:c5:8e:be:38:d8:
b1:57:77:ff:d5:af:9b:83:2d:83:ab:2a:48:9b:ed:
60:f9:2b:59:9f:a4:dd:1b:42:4d:ae:c0:eb:41:75:
f7:9d:f2:94:81:ad:aa:96:ce:d6:63:8d:0d:ac:ec:
09:85:23:08:48:68:a2:4c:08:5c:1f:64:5f:f5:d4:
2c:da:18:89:4b:61:b6:33:80:f6:f0:07:72:32:9c:
b4:25:d5:48:17:43:d1:8d:ee:93:72:5e:d7:e6:29:
27:89:5a:32:85:e0:85:e6:f3:c2:90:e1:bf:57:d1:
45:94:98:d6:91:50:52:dd:52:bb:28:ae:f0:17:5e:
1d:5c:a9:1e:9c:e3:b9:3c:c0:0d:4e:72:16:7a:d8:
2a:f4:c8:59:17:ba:a3:ce:2e:4f:7d:5c:c4:f1:f3:
92:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8A:DA:67:B7:D6:8E:43:45:70:97:9C:CC:83:2A:27:A4:F6:C3:0E
X509v3 Authority Key Identifier:
keyid:79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:dc:82:e6:12:fe:82:8f:36:09:db:7a:d8:f0:d3:8a:e4:25:
01:15:f0:94:50:e3:b6:c5:d4:c8:71:9a:fb:bf:93:fc:da:63:
c9:12:ad:8d:e3:7e:07:56:bd:a2:f6:c1:42:56:23:f7:7a:0c:
e4:c8:fc:17:35:9c:0f:9e:48:cf:d2:d9:30:d4:f8:c2:55:c2:
9d:1a:8c:46:ed:bc:8a:04:4d:a1:98:df:1a:af:b6:c1:2d:0c:
4e:a0:de:12:eb:73:7d:b2:eb:39:66:8f:5e:3d:8b:8f:86:de:
5a:87:d3:76:da:80:3e:4d:a4:c6:cf:9b:bd:a4:80:87:85:59:
fa:40:ce:da:c9:61:49:85:04:01:12:84:62:d0:df:8e:e7:eb:
2b:1e:dc:b8:e0:c8:f6:5b:b8:25:73:94:db:fc:9e:1d:d9:d7:
2c:7c:5c:39:b2:88:68:e1:45:64:50:77:63:68:6c:17:e1:3d:
ae:0f:49:03:49:2d:55:50:bc:07:69:cf:3c:c6:80:47:dd:0c:
8b:3f:d5:9a:67:7c:03:f3:07:bf:4c:8b:c1:c2:e7:04:b0:df:
b6:84:1d:40:f7:f5:f8:b0:05:9b:19:00:b6:3e:01:44:25:5b:
7e:a7:75:6d:9d:ec:29:f6:1d:2a:69:f3:b2:c1:cf:ff:4d:59:
23:cd:fd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:17:30 2026 by rpki-client