Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
File: 3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft (raw, json)
Hash identifier: 1YC9eRcsQrU3lV3VFb+lt70vbTOeQDEtZ65rCHHI6xc=
Subject key identifier: 4B:D8:06:A7:A1:CF:E7:93:89:71:67:02:0C:8F:8A:EF:53:FF:4A:33
Authority key identifier: DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E
Certificate issuer: /CN=dff1113bfc892d1df49a166047cb8c2aaeca768e
Certificate serial: 019F189E40D26FEFCD81A67E8DB1EA66EFE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
Manifest number: 0D94
Signing time: Tue 30 Jun 2026 13:00:51 +0000
Manifest this update: Tue 30 Jun 2026 13:00:51 +0000
Manifest next update: Wed 01 Jul 2026 13:00:51 +0000
Files and hashes: 1: 3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl (hash: 231p6Y+YhdmeNTiLrYQUA2WI9HoFJAeuBz7Qor/fZoU=)
2: GXnGpYod3sIRj2DMZbF5tAJesT0.roa (hash: ZtCsrGCpMtyAhdCuPQhn0qrE9kXND0Yasrdo9pYbklE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:40:d2:6f:ef:cd:81:a6:7e:8d:b1:ea:66:ef:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff1113bfc892d1df49a166047cb8c2aaeca768e
Validity
Not Before: Jun 30 13:00:51 2026 GMT
Not After : Jul 1 13:00:51 2026 GMT
Subject: CN=4bd806a7a1cfe793897167020c8f8aef53ff4a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ce:4a:c1:01:e0:29:8e:a5:65:b4:90:89:ff:
aa:af:66:91:72:2c:f8:ee:7c:82:51:1f:b5:4d:4c:
20:01:2e:ff:45:84:93:e1:22:5c:e0:42:03:44:8d:
ad:b1:56:9d:18:0b:24:b9:76:3e:54:3e:1e:e5:8b:
71:b7:ee:38:86:be:34:51:ae:dd:97:3b:c4:69:b0:
31:f1:7c:a2:70:70:42:5f:39:82:bc:b7:30:c8:81:
0f:d0:df:06:c6:2a:e7:6e:ea:19:bd:b6:f5:67:1b:
ea:69:8b:e2:84:ac:e7:83:78:e5:3a:85:4a:03:d1:
2a:33:29:cd:d0:89:1e:d9:3e:6b:90:d9:b4:5a:0f:
14:6d:9f:0b:7d:28:93:c5:45:1c:08:6c:33:bf:a5:
a2:c9:ea:65:66:2b:cd:8a:e0:52:3e:7e:d6:58:c6:
95:70:f5:cc:62:b8:1a:b3:30:36:bd:0d:97:63:de:
63:a6:df:2a:cd:73:6f:e6:34:f2:cf:ba:38:7f:c7:
fb:27:69:92:18:25:64:ed:d0:d2:64:9f:4b:92:6b:
9d:e0:ea:a2:88:d1:2b:2d:b0:e8:82:f4:69:88:02:
b9:18:26:b2:cd:36:fd:cc:1e:d6:f0:ce:4e:f8:68:
99:dc:a3:ce:28:0e:54:95:35:ca:ec:05:f8:e5:a4:
df:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D8:06:A7:A1:CF:E7:93:89:71:67:02:0C:8F:8A:EF:53:FF:4A:33
X509v3 Authority Key Identifier:
keyid:DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e0:65:9d:07:6d:45:9c:e1:03:a1:39:55:e7:57:a3:c8:94:
4c:d8:1b:cc:0d:22:73:e2:c6:56:12:54:37:a3:28:14:2b:0e:
7f:b4:d7:f6:2d:89:f2:5c:f0:17:9a:d6:80:04:05:f6:c1:f3:
60:e3:15:12:87:00:69:da:82:8a:e6:38:2b:4d:25:8c:4c:1f:
a6:9b:73:47:14:7b:d1:61:d8:e6:57:49:ca:65:dd:0f:50:99:
90:17:48:27:c2:e7:65:2c:12:a9:e9:a0:57:e3:0c:5b:e4:2a:
4b:49:43:b5:f3:a3:25:09:af:b9:1f:0c:91:9f:63:b9:2c:19:
09:5c:8c:ca:3b:12:62:8d:bf:14:fc:d6:34:ae:d1:fe:28:82:
67:48:65:a9:38:ee:af:a1:df:2d:b8:91:e8:ec:ce:55:0e:c2:
45:ea:f2:21:de:5a:e2:70:e6:0b:06:00:92:6c:fd:09:12:3a:
8f:9b:a8:15:d4:d9:21:9f:24:9d:b5:f1:96:04:9a:90:60:31:
5b:bc:10:d6:80:5b:b8:40:5c:b2:93:ee:78:d4:c9:56:3b:44:
1c:10:79:c4:50:74:ec:17:14:32:9a:47:50:14:b0:a3:d6:9f:
31:91:28:73:13:89:3c:ae:ca:1c:f8:10:78:30:b4:a8:3f:19:
b6:66:9d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:40 2026 by rpki-client