Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/D3EroUxCsiiWFXFTV4pt3N7T3DU.mft
File: D3EroUxCsiiWFXFTV4pt3N7T3DU.mft (raw, json)
Hash identifier: yyNd13q4UJvGKT5rTI9OjtzsaOtohr0mmbWVwk6RQvA=
Subject key identifier: E4:FA:81:DF:E4:24:BF:BA:C0:E4:38:03:B8:11:9E:F3:97:2A:41:D8
Authority key identifier: 0F:71:2B:A1:4C:42:B2:28:96:15:71:53:57:8A:6D:DC:DE:D3:DC:35
Certificate issuer: /CN=0f712ba14c42b22896157153578a6ddcded3dc35
Certificate serial: 01A13A49ED9CD936464686A3761A66A6E906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3EroUxCsiiWFXFTV4pt3N7T3DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/D3EroUxCsiiWFXFTV4pt3N7T3DU.mft
Manifest number: 011C
Signing time: Wed 14 Oct 2026 12:01:25 +0000
Manifest this update: Wed 14 Oct 2026 12:01:25 +0000
Manifest next update: Thu 15 Oct 2026 12:01:25 +0000
Files and hashes: 1: D3EroUxCsiiWFXFTV4pt3N7T3DU.crl (hash: KoAOsMehQBWNXg4oS0dqCOKWQObCfPHEHSQ6W5WzZek=)
2: XJeijONfdCexlEZTiQ2-0wtFkjU.roa (hash: QjzatZEcE3yyHHM21yG7Bv904Jd1j3rI9DssFnvI/Ls=)
3: n3lR-lpuGAiXgRrmixMN2OPkEaw.roa (hash: s10of/A82nI3tslY3AoBVKAzN9hCZPMlXpS+Trtgfpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/D3EroUxCsiiWFXFTV4pt3N7T3DU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/D3EroUxCsiiWFXFTV4pt3N7T3DU.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3EroUxCsiiWFXFTV4pt3N7T3DU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 12:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:49:ed:9c:d9:36:46:46:86:a3:76:1a:66:a6:e9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f712ba14c42b22896157153578a6ddcded3dc35
Validity
Not Before: Oct 14 12:01:25 2026 GMT
Not After : Oct 15 12:01:25 2026 GMT
Subject: CN=e4fa81dfe424bfbac0e43803b8119ef3972a41d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:55:b3:f7:60:83:c8:8c:40:34:06:77:f3:f6:
0d:38:76:3c:23:5d:c8:54:83:6d:66:13:19:6a:89:
f9:16:23:3d:db:c2:1d:1f:b6:cc:ca:2c:d8:e5:00:
4c:bc:a9:85:9a:19:09:a1:7c:03:f2:12:0f:23:26:
09:f5:3e:65:5a:a1:c3:e4:2d:dd:3d:08:28:f2:4c:
e8:5d:ca:8f:5f:f1:6a:f4:5f:4c:ec:0d:8f:9d:3e:
49:34:1c:d6:39:15:8e:97:49:40:cf:36:c2:b7:1e:
92:87:ce:fe:32:4f:c8:1d:65:9b:ae:28:d3:cb:9f:
e6:03:2b:c1:f7:71:97:9b:99:71:c1:0f:51:52:d0:
f2:7c:ed:c9:4d:1e:f0:79:bc:9f:89:85:9a:a1:e0:
c4:47:e4:ec:5b:6f:88:cd:96:56:47:77:43:17:53:
4f:c9:71:45:1d:cd:68:04:b5:66:89:45:69:95:85:
8c:0a:f8:eb:e8:2f:ea:88:e9:a2:96:21:aa:d3:e5:
80:e7:ce:83:8d:2b:86:ca:de:5b:90:a7:2e:40:ab:
5c:3b:36:47:b1:f1:c4:ff:13:2c:91:9a:09:5c:00:
9e:e5:ed:68:8a:65:13:f6:4e:90:1b:2b:a3:20:a0:
ae:b7:88:f2:cb:6f:5d:21:a9:bc:9e:f8:33:28:2d:
61:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FA:81:DF:E4:24:BF:BA:C0:E4:38:03:B8:11:9E:F3:97:2A:41:D8
X509v3 Authority Key Identifier:
keyid:0F:71:2B:A1:4C:42:B2:28:96:15:71:53:57:8A:6D:DC:DE:D3:DC:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3EroUxCsiiWFXFTV4pt3N7T3DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/D3EroUxCsiiWFXFTV4pt3N7T3DU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/D3EroUxCsiiWFXFTV4pt3N7T3DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:62:7e:8b:d5:2d:71:46:2f:ae:73:ce:b3:6f:6b:41:15:a4:
e0:83:18:ab:3f:4e:b2:c3:f0:36:fb:70:64:64:be:c4:6c:14:
2c:03:a6:83:08:51:78:36:02:64:8f:6f:a7:2a:f0:7a:ed:e4:
65:37:64:c5:34:b7:39:52:cc:76:e4:4e:56:db:f8:54:93:65:
4c:ff:da:4e:8a:62:2e:78:f6:99:2b:ab:3c:4d:13:81:9a:1a:
c3:1f:f7:ea:3e:33:61:f2:f1:1b:66:5d:30:ef:4b:b0:9f:39:
e0:4c:d7:02:fe:6a:79:d1:26:9b:79:3f:ba:3b:05:12:02:cc:
2c:86:9a:29:72:88:73:09:f8:b1:67:9d:c2:2e:51:b3:3f:d3:
55:8e:ec:b1:7b:85:92:42:8d:d4:bf:f3:56:26:a5:95:20:c3:
1e:18:1f:2f:64:e3:78:4a:19:6a:7c:d0:ee:96:77:11:ca:67:
e7:54:03:46:69:6f:5e:92:1d:fc:21:b5:3c:0d:83:ef:d6:8d:
05:ac:69:8a:da:ac:e6:0e:ec:dd:53:0a:ee:18:ed:9a:27:5c:
36:5e:ca:0a:d3:a2:b3:31:ae:62:3a:3e:16:ad:6a:84:9c:e7:
87:05:98:2a:0c:f3:4f:cd:42:55:33:55:3c:3d:50:77:38:ab:
9b:b8:fd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 16:24:05 2026 by rpki-client