Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
File: 3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft (raw, json)
Hash identifier: m4Jzl/pvKdysRk9doP/5RhLvRU0PLVEeA/czH81aWsk=
Subject key identifier: 03:68:FC:CE:BD:E4:8A:04:9C:80:3A:2A:FA:E6:96:B9:08:26:1E:A8
Authority key identifier: DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E
Certificate issuer: /CN=dff1113bfc892d1df49a166047cb8c2aaeca768e
Certificate serial: 019D37C065464AABA12DF52B519BCCF57439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
Manifest number: 0C9B
Signing time: Sun 29 Mar 2026 04:00:48 +0000
Manifest this update: Sun 29 Mar 2026 04:00:48 +0000
Manifest next update: Mon 30 Mar 2026 04:00:48 +0000
Files and hashes: 1: 3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl (hash: ZxDP1uhfOLJk+Ul5eYYouVHgKXHGXAjW9qWInuyKrj0=)
2: GXnGpYod3sIRj2DMZbF5tAJesT0.roa (hash: ZtCsrGCpMtyAhdCuPQhn0qrE9kXND0Yasrdo9pYbklE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:65:46:4a:ab:a1:2d:f5:2b:51:9b:cc:f5:74:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff1113bfc892d1df49a166047cb8c2aaeca768e
Validity
Not Before: Mar 29 04:00:48 2026 GMT
Not After : Mar 30 04:00:48 2026 GMT
Subject: CN=0368fccebde48a049c803a2afae696b908261ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fa:56:22:c9:2e:92:3d:8f:76:6c:e9:b3:30:
8e:ea:f4:fd:19:da:16:27:43:98:ac:fe:24:c8:fa:
05:56:4e:ac:32:17:4a:78:4b:71:07:a8:dc:25:61:
74:18:a2:97:f4:10:b4:25:4d:c8:06:e2:6b:74:02:
fa:3f:30:6e:48:f4:dc:0b:39:0c:c8:e2:fd:70:9e:
b2:0b:ca:00:7a:c8:f3:d0:85:ba:e7:ba:96:5d:b6:
7a:3f:c8:bd:a9:cc:1b:de:15:09:f1:a7:a3:1f:75:
72:32:01:e1:6b:cc:02:ca:e7:17:dd:f4:c5:10:db:
56:e1:3c:a6:61:bb:db:d7:f8:db:ae:9a:1d:4f:0c:
6b:44:1a:88:67:27:79:5d:a5:f1:92:bc:8b:6c:16:
8f:97:27:0d:71:44:6a:47:90:ed:a8:26:b1:b7:e0:
35:eb:11:e9:a1:b0:67:2f:3b:08:cc:fb:58:59:af:
32:78:63:38:d4:27:d6:81:32:16:61:9d:da:f6:a8:
92:44:53:f7:b1:0d:41:ce:e4:55:6b:e7:4b:52:02:
c0:4d:dc:5c:61:20:f6:21:00:2f:34:a0:49:f7:77:
15:28:4c:2c:08:29:ba:cb:a2:96:74:5a:b9:74:e5:
19:5e:20:a6:36:4d:08:96:4e:c2:b6:d1:05:51:59:
bd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:68:FC:CE:BD:E4:8A:04:9C:80:3A:2A:FA:E6:96:B9:08:26:1E:A8
X509v3 Authority Key Identifier:
keyid:DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:14:ed:f3:36:50:5a:e4:06:76:9e:d3:27:9a:f2:2c:01:4b:
7f:89:93:78:ef:8d:c7:9f:9b:86:a4:e3:9f:70:03:04:80:6d:
1f:7d:0f:15:09:bf:c7:72:39:75:d1:83:a9:05:80:34:b0:04:
99:42:7c:a8:ee:ec:62:99:db:f3:91:07:09:0b:cc:d6:b6:75:
18:59:dc:f5:39:b9:5d:54:2d:46:23:0d:40:35:fa:f0:6d:31:
59:0c:eb:51:00:bb:bd:c7:c4:09:7d:42:63:9e:5a:f3:a4:17:
0f:4c:b0:ef:28:bd:f4:98:c7:48:d4:5f:eb:0d:45:74:2a:bf:
9e:1c:31:7f:6e:29:2d:a5:26:68:01:85:02:74:91:dc:d8:c1:
3f:47:b8:0a:db:9c:7a:73:61:0e:6e:9f:73:c6:b5:23:50:b7:
d4:24:77:5c:8a:d2:33:2b:02:25:cc:1c:84:55:ed:8c:2f:59:
51:e4:79:54:0b:b4:c2:7c:f7:da:4d:d5:e5:37:47:4d:b4:e5:
ba:88:35:66:8c:b4:50:2f:7d:60:42:15:ee:3f:9b:e7:1c:9a:
38:de:83:0c:d9:3d:26:bc:76:43:35:9c:ea:1c:a5:72:bd:c5:
33:ba:73:fc:87:58:74:f2:94:7a:16:df:36:7f:d0:b9:45:e9:
ff:77:88:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:29 2026 by rpki-client