Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
File: eRP4wTuoKQ9g2mO6iek1snWJOts.mft (raw, json)
Hash identifier: ya8EEVlG6nmCYt5nV3XDkKXQfQ5SKKXUxw0iVgLagx0=
Subject key identifier: 97:57:0A:F1:86:31:82:80:BC:2D:12:B6:D9:FA:C1:43:DB:09:56:4A
Authority key identifier: 79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
Certificate issuer: /CN=7913f8c13ba8290f60da63ba89e935b275893adb
Certificate serial: 019FAB63FA28453DA8E0F2881ED3F0FF2642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
Manifest number: 087B
Signing time: Wed 29 Jul 2026 01:01:23 +0000
Manifest this update: Wed 29 Jul 2026 01:01:23 +0000
Manifest next update: Thu 30 Jul 2026 01:01:23 +0000
Files and hashes: 1: eRP4wTuoKQ9g2mO6iek1snWJOts.crl (hash: PFIROgEtLMwDxiLvu2SsjbYY6wWMda0KiVgxXv0sNZI=)
2: qXkw0QfrHcnGQSy5HSSgU96t89k.roa (hash: 0wRXU7/knPguYz2PH2GBKtyb9XdxaFy8E6VNNqtVEPw=)
3: tF9YKOONiKk1CscCM98zlB8EJLs.roa (hash: 6wUmwqGkAOvn8GZ/bao7dMUtyUHLPWG5h6PlJNzejcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:fa:28:45:3d:a8:e0:f2:88:1e:d3:f0:ff:26:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7913f8c13ba8290f60da63ba89e935b275893adb
Validity
Not Before: Jul 29 01:01:23 2026 GMT
Not After : Jul 30 01:01:23 2026 GMT
Subject: CN=97570af186318280bc2d12b6d9fac143db09564a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:de:49:df:e9:72:81:fe:66:fd:a1:30:ad:57:
af:df:fa:a9:3a:e4:e5:b5:e9:1e:30:2e:d9:6d:22:
19:7c:c2:f8:90:54:7e:55:0c:a8:e2:58:e1:02:56:
3a:f7:10:86:fb:36:61:46:b1:87:24:34:06:c2:18:
55:93:1b:5b:97:26:00:0e:18:4e:0d:e2:b5:7b:a8:
63:70:58:31:9d:bf:77:a3:16:8e:0c:88:0f:10:72:
75:1b:23:38:98:a3:e3:7a:d5:00:9d:58:3a:c6:57:
c5:91:b3:b6:89:dd:96:8a:a1:a5:49:12:e9:85:36:
90:84:fe:63:ca:2a:d1:63:73:bd:08:d0:73:09:d6:
65:59:ea:b0:a4:29:e6:14:96:e4:f0:a6:7c:c5:96:
0b:59:88:f9:39:45:2a:f5:a8:c1:ad:9b:35:56:9e:
08:1f:a7:78:60:7d:7f:b7:39:2a:4a:16:79:50:28:
a5:1b:e2:d4:87:7b:ce:b1:a5:ff:fa:26:17:43:c7:
07:08:ed:f7:70:eb:00:7b:75:2d:ba:44:a9:ef:0f:
68:c8:19:2a:42:4e:91:48:88:fe:59:80:e5:96:f9:
10:be:ee:f6:5a:bf:d5:1d:1c:23:6e:a8:3e:c5:4f:
94:6a:1b:a2:02:6b:26:c0:eb:38:63:61:03:51:5b:
61:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:57:0A:F1:86:31:82:80:BC:2D:12:B6:D9:FA:C1:43:DB:09:56:4A
X509v3 Authority Key Identifier:
keyid:79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:3f:20:de:1e:b5:bd:fd:98:c9:2c:fb:85:a2:2d:98:40:95:
99:8a:98:fa:a2:39:d7:af:f1:40:77:c1:a0:e3:7c:f2:9d:0d:
9a:43:c3:2b:f8:3e:06:9b:ce:11:0a:1b:d2:f6:0c:81:0b:88:
bf:2e:44:81:6e:10:e8:18:fa:bb:32:87:0f:f4:a7:d0:c6:86:
8b:bc:64:c8:77:b8:44:72:13:54:4e:d3:9d:fa:97:fb:44:a5:
43:f9:86:8b:08:be:eb:4a:d8:67:4e:1c:e0:b1:72:d1:23:e4:
49:10:c7:35:6c:bf:a1:77:4d:35:9d:28:c5:33:9b:d6:85:39:
91:f5:9b:79:7e:cf:29:bb:e1:1c:6b:76:fe:4d:37:3d:3c:2d:
c2:c7:a0:d4:a0:bb:cf:59:66:79:29:a1:ca:d5:62:f3:fb:a5:
5f:83:a4:e8:6b:b3:7e:0a:2d:2d:32:9e:84:59:ca:af:6d:0c:
f6:0e:59:a9:e5:a4:11:0d:38:8b:5b:8f:77:43:43:2e:a7:38:
3e:5a:ef:f2:94:6f:9f:0f:c2:96:6c:89:c3:f8:25:2f:10:a3:
ef:ce:e9:37:d5:72:6d:0c:d7:e5:45:08:7d:41:e0:b5:f9:2a:
fc:01:00:6b:b1:74:c4:cc:16:ec:dd:7a:d7:29:e5:5b:4b:cb:
02:26:1c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:31:40 2026 by rpki-client