Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
File: eRP4wTuoKQ9g2mO6iek1snWJOts.mft (raw, json)
Hash identifier: 8qerbkAjjNAMNE9SNS335xyQRptiNtbmbSMZ+n0vHvU=
Subject key identifier: 2C:BA:7D:45:75:37:BB:7E:FA:8E:78:A2:88:8E:C1:A5:D2:58:0A:BC
Authority key identifier: 79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
Certificate issuer: /CN=7913f8c13ba8290f60da63ba89e935b275893adb
Certificate serial: 01A13B257323704D0887297D01F778FDAFCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
Manifest number: 094A
Signing time: Wed 14 Oct 2026 16:01:12 +0000
Manifest this update: Wed 14 Oct 2026 16:01:12 +0000
Manifest next update: Thu 15 Oct 2026 16:01:12 +0000
Files and hashes: 1: eRP4wTuoKQ9g2mO6iek1snWJOts.crl (hash: 4lannSlMAShGvlpq5d0r2HfP751ZmNw4EyFBGKkx48k=)
2: qXkw0QfrHcnGQSy5HSSgU96t89k.roa (hash: 0wRXU7/knPguYz2PH2GBKtyb9XdxaFy8E6VNNqtVEPw=)
3: tF9YKOONiKk1CscCM98zlB8EJLs.roa (hash: 6wUmwqGkAOvn8GZ/bao7dMUtyUHLPWG5h6PlJNzejcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:25:73:23:70:4d:08:87:29:7d:01:f7:78:fd:af:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7913f8c13ba8290f60da63ba89e935b275893adb
Validity
Not Before: Oct 14 16:01:12 2026 GMT
Not After : Oct 15 16:01:12 2026 GMT
Subject: CN=2cba7d457537bb7efa8e78a2888ec1a5d2580abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5c:fd:72:1c:6e:de:22:2f:03:9c:58:57:ec:
c8:90:6a:39:f8:31:f0:8f:b5:29:39:14:11:c0:bf:
1d:ba:22:50:b8:42:11:56:8d:18:ca:34:f3:c6:12:
38:35:be:82:c4:1c:9c:8f:cc:8f:c7:62:90:c1:fe:
6d:cb:d4:5a:04:66:b5:6b:22:50:2f:3e:65:9f:b1:
e5:cd:ad:75:29:97:6c:a9:33:a1:38:8c:f5:88:56:
38:81:d0:99:29:15:af:6c:6e:9e:81:a9:f7:e3:d9:
12:90:70:51:1e:f2:43:d8:a7:88:34:f9:2f:77:b2:
d2:cd:77:5c:69:49:b0:9e:7c:ea:be:b9:60:0b:6a:
de:8c:6d:3d:07:04:bd:b0:f3:80:5d:56:2b:c2:0d:
46:7d:3d:6e:d4:ea:bc:bd:0c:3e:83:09:a6:c6:a2:
f2:fe:64:42:ad:d3:b0:26:ff:f4:46:4d:31:fd:9c:
94:e0:17:a9:4b:d8:28:a7:37:26:de:be:dd:7d:f3:
70:96:93:b5:89:3f:b0:8b:ce:1b:ba:4c:ca:bc:f4:
56:8a:7c:b9:28:06:30:9d:54:b7:dc:50:da:a5:8e:
32:22:0b:d5:1b:92:05:9c:54:1f:f5:8e:97:e8:f2:
ff:13:c2:4f:15:2e:53:49:c5:92:e7:8b:9f:6e:e7:
5d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BA:7D:45:75:37:BB:7E:FA:8E:78:A2:88:8E:C1:A5:D2:58:0A:BC
X509v3 Authority Key Identifier:
keyid:79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:5b:fd:2a:f0:15:b6:18:98:d6:2a:cd:0e:4d:6a:a3:87:cc:
d0:cb:52:78:7c:f4:7d:bd:30:a7:cf:60:d3:4b:98:3e:0b:d0:
e8:97:38:05:8b:0c:8b:32:42:2f:78:47:e9:e6:80:69:ff:87:
15:54:7d:f2:f9:21:cd:1f:28:86:11:35:16:51:a4:52:86:72:
55:f9:bc:c0:52:30:c6:b7:39:02:2b:56:31:b4:76:e7:19:92:
d3:bc:81:7a:ea:f1:f9:78:f8:0b:ec:ca:dc:e1:0b:14:98:e2:
86:5a:9a:cf:8b:72:cb:39:22:e5:29:1e:e3:3f:8f:94:6d:28:
bd:b2:59:52:b9:ad:d0:c0:71:94:97:f3:09:3a:c3:3f:ec:78:
4e:96:3e:14:c3:b8:94:79:a0:62:28:2f:48:31:38:a1:6a:f6:
58:a4:3a:18:46:1e:84:5e:b4:0a:38:33:24:cb:b1:74:11:89:
ba:93:19:f1:e7:09:2b:09:d0:51:a7:32:f4:c8:47:e4:2b:6c:
5f:0a:a7:a3:10:62:98:a3:73:7f:a1:7b:dd:1e:63:27:87:82:
45:20:11:74:8e:4e:0b:5d:62:fa:da:1a:85:3c:f0:c9:38:91:
fb:f0:1e:e4:b3:63:f7:05:62:16:d2:b5:9b:2d:aa:c3:8f:d3:
67:8c:e6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 01:34:54 2026 by rpki-client