Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
File: 3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft (raw, json)
Hash identifier: +0IVycIB+Gx++Ciu6PD/eG9W870GswAUJA+bdWbNUHg=
Subject key identifier: 5D:67:69:06:8C:18:BF:D6:1F:77:6A:D1:37:C9:73:6F:C6:4E:28:6A
Authority key identifier: DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E
Certificate issuer: /CN=dff1113bfc892d1df49a166047cb8c2aaeca768e
Certificate serial: 01A13F02921A5A2A19C3E9649343E28A5C0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
Manifest number: 0EB1
Signing time: Thu 15 Oct 2026 10:01:35 +0000
Manifest this update: Thu 15 Oct 2026 10:01:35 +0000
Manifest next update: Fri 16 Oct 2026 10:01:35 +0000
Files and hashes: 1: 3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl (hash: TCHX2xH6qgzZfM/+RCRjhnIe0BVACOUt9CIC9RUF2VM=)
2: GXnGpYod3sIRj2DMZbF5tAJesT0.roa (hash: ZtCsrGCpMtyAhdCuPQhn0qrE9kXND0Yasrdo9pYbklE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:92:1a:5a:2a:19:c3:e9:64:93:43:e2:8a:5c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff1113bfc892d1df49a166047cb8c2aaeca768e
Validity
Not Before: Oct 15 10:01:35 2026 GMT
Not After : Oct 16 10:01:35 2026 GMT
Subject: CN=5d6769068c18bfd61f776ad137c9736fc64e286a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:10:6a:8f:48:48:75:8b:bc:67:ad:7f:67:26:
69:74:81:7e:1e:64:7a:e3:65:2f:81:c1:69:a2:1f:
18:69:ea:66:53:d2:be:20:3d:23:ae:9f:54:c9:98:
11:8d:0e:f2:2d:15:79:c5:bf:e1:b8:f5:bb:ab:d5:
50:54:4c:74:de:10:c7:3f:b7:8b:05:cd:40:c5:19:
99:c0:59:67:a6:84:c0:3b:36:4b:07:65:16:2f:f2:
80:63:2b:04:01:fc:3b:d4:a4:91:87:24:35:31:7f:
b1:91:20:9e:9a:23:b0:2c:52:01:ea:5f:13:ce:23:
26:2c:7e:2c:85:6a:3c:d8:b5:70:d6:2d:68:9a:d1:
1c:6a:6c:a8:dc:d7:b1:9f:ea:9f:43:49:65:98:51:
89:54:4c:d6:13:61:ef:93:50:21:71:c8:c7:77:1d:
7f:66:e5:e6:73:e4:3a:c9:47:e1:bf:39:8e:90:34:
b4:cd:8f:22:c2:d1:ea:d1:c2:15:cd:15:96:e2:99:
26:db:1a:6f:11:d3:33:97:6e:be:33:00:56:31:d7:
5d:56:db:1e:43:dd:4d:bc:16:95:e3:31:95:9a:c5:
09:d6:e2:1f:ff:b9:76:41:ae:2c:02:8e:de:9b:65:
9c:ec:22:6c:0e:59:cc:a3:5f:a9:c7:11:2c:d5:ac:
c1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:67:69:06:8C:18:BF:D6:1F:77:6A:D1:37:C9:73:6F:C6:4E:28:6A
X509v3 Authority Key Identifier:
keyid:DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c8:05:da:80:63:70:d9:a5:48:84:67:b9:67:45:56:fc:2d:
f9:44:c0:7d:d7:1b:6f:db:1a:42:a2:fe:43:3a:7e:a4:09:ed:
3c:e5:ec:78:1b:65:8e:b6:36:ec:b3:c9:a9:7b:89:68:e7:56:
d0:b2:ea:cb:3c:3b:7b:85:cf:f7:f8:36:64:1d:a3:2e:74:28:
d8:a9:1f:98:d6:a3:aa:b9:49:b9:50:7a:da:6f:77:52:7c:e9:
45:b5:4b:76:70:36:1a:8c:7d:83:ed:63:ff:0c:7d:e0:77:ca:
03:6c:97:97:f5:e0:9d:ea:de:5d:2e:fd:c0:8b:f1:5f:cd:81:
e3:f7:e3:cd:b7:cd:4b:ec:96:21:f9:fe:a0:ae:d0:51:cd:aa:
7d:1a:5d:68:b6:00:41:15:1d:53:b2:a2:02:67:d2:b1:37:8e:
60:14:b7:7c:2a:2b:af:28:80:0e:f2:73:ff:12:f4:c0:2a:fb:
bc:07:96:10:d3:6d:5d:c5:5a:16:5c:75:9c:7e:52:c7:7d:6a:
49:1d:c7:3c:14:14:31:9f:d9:5e:61:1e:2e:5d:07:f1:9b:db:
fb:15:bd:b2:86:80:21:43:f5:8c:84:f7:27:24:b4:41:7a:04:
b9:50:8a:95:fa:34:62:99:2e:99:c8:e3:f0:09:9d:22:fe:9a:
18:ec:75:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:24:09 2026 by rpki-client