Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
File: erFfzubARYnrLLNQp0fDAG9KF9w.mft (raw, json)
Hash identifier: k3/gxi4pxAjJ0HHaVIaAJGwWUPU8ksKkqhJ7kdwid3U=
Subject key identifier: BB:71:C0:3D:5C:BA:41:FC:1F:12:77:B6:55:7B:A7:28:46:33:AA:4E
Authority key identifier: 7A:B1:5F:CE:E6:C0:45:89:EB:2C:B3:50:A7:47:C3:00:6F:4A:17:DC
Certificate issuer: /CN=7ab15fcee6c04589eb2cb350a747c3006f4a17dc
Certificate serial: 019E1C4720D13614C9D617345CE36A636597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
Manifest number: 99
Signing time: Tue 12 May 2026 13:01:23 +0000
Manifest this update: Tue 12 May 2026 13:01:23 +0000
Manifest next update: Wed 13 May 2026 13:01:23 +0000
Files and hashes: 1: QnFaI3ow-cffiwBxqkoWt4mkYpU.roa (hash: L9K99lMlOY7dnsS5zhvNr+thiKNEY4zaYl8mxhYaaJE=)
2: erFfzubARYnrLLNQp0fDAG9KF9w.crl (hash: aRXhtGO2s2DRn2VplhblbXHKnP+u2x+KP2DTHsExvtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:20:d1:36:14:c9:d6:17:34:5c:e3:6a:63:65:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ab15fcee6c04589eb2cb350a747c3006f4a17dc
Validity
Not Before: May 12 13:01:23 2026 GMT
Not After : May 13 13:01:23 2026 GMT
Subject: CN=bb71c03d5cba41fc1f1277b6557ba7284633aa4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:e7:2a:62:d0:77:ad:f8:1b:e0:1a:32:19:
c0:a5:8a:1f:ac:89:88:18:69:97:c6:9d:09:51:80:
28:f7:ea:21:16:6d:72:ff:10:09:9c:b9:7b:a5:c8:
66:eb:e7:8c:d6:81:63:25:c5:11:c0:f0:81:3d:27:
72:a8:26:d5:c2:68:78:80:29:ac:c2:85:00:05:04:
6c:be:03:0c:34:ed:1c:7b:78:07:d6:ac:56:a7:ae:
0b:7d:20:61:a5:a3:2e:91:c2:16:ef:19:53:78:58:
d9:09:02:17:25:93:0f:10:7b:4a:5d:f3:25:19:50:
fc:43:00:25:a2:97:29:5d:db:84:fa:48:a3:32:82:
e1:4b:9c:ea:28:de:30:9c:d2:aa:be:7e:1a:1f:87:
a5:d7:e2:34:46:f8:ea:dd:2d:49:c7:fc:fc:1b:07:
29:62:7e:89:32:7f:3f:50:55:9a:7c:7a:b7:b2:e2:
a6:b9:49:f2:24:5a:d7:b8:bb:9b:a5:74:60:05:12:
ac:1d:a0:2d:8a:43:47:e3:f7:80:de:72:eb:f3:7c:
ab:c7:cd:a8:9c:94:3a:ab:29:6a:c8:37:3c:ba:4f:
1d:6e:0a:d2:eb:dc:ba:eb:c7:71:1e:45:bd:97:61:
26:7d:a9:e0:65:f3:ba:89:d0:97:4c:42:c1:2e:a8:
a7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:71:C0:3D:5C:BA:41:FC:1F:12:77:B6:55:7B:A7:28:46:33:AA:4E
X509v3 Authority Key Identifier:
keyid:7A:B1:5F:CE:E6:C0:45:89:EB:2C:B3:50:A7:47:C3:00:6F:4A:17:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ae:e6:b0:f4:2a:be:84:35:fc:9d:34:cf:12:d5:05:6f:61:
e7:31:2b:72:c4:1f:b7:de:77:4e:51:6d:0c:8d:11:74:57:66:
25:d6:07:36:f6:c9:1e:1d:0a:6d:20:cf:3e:f8:0d:a5:49:5b:
0d:b3:4f:c0:67:b2:66:3e:06:61:5f:14:70:51:30:0e:0e:6f:
f6:16:6e:17:5a:73:72:02:97:6a:d8:7f:a2:76:c6:3d:29:a0:
97:6a:83:16:e7:b4:56:be:85:79:5f:e2:4f:95:ac:3c:01:00:
df:d6:d0:ac:0b:34:39:09:29:c5:c9:f8:4f:29:38:b7:5a:60:
f5:83:07:35:9c:69:d0:23:3d:68:e3:6e:54:29:c0:c3:e6:de:
d0:ac:43:2b:da:85:2e:12:7b:f8:7a:75:38:73:8d:d0:df:46:
2a:b9:0a:95:ff:36:95:43:fe:f1:80:53:93:9d:75:99:97:a4:
c5:f7:e9:48:6c:c2:cb:0c:9c:6b:ba:5d:e8:3d:a0:cb:dd:70:
aa:c0:07:93:8b:ab:8c:86:a7:c4:eb:3d:97:57:8b:ac:cb:c5:
35:22:1c:3e:bb:ed:2e:41:2d:0e:e7:ab:1a:d4:93:db:64:55:
67:44:77:95:df:4b:98:73:d1:1a:72:36:a0:c5:a4:49:31:9b:
69:0c:cd:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cRyDRNhTJ1hc0XONqY2WXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYjE1ZmNlZTZjMDQ1ODllYjJjYjM1MGE3NDdjMzAwNmY0
YTE3ZGMwHhcNMjYwNTEyMTMwMTIzWhcNMjYwNTEzMTMwMTIzWjAzMTEwLwYDVQQD
EyhiYjcxYzAzZDVjYmE0MWZjMWYxMjc3YjY1NTdiYTcyODQ2MzNhYTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssfnKmLQd634G+AaMhnApYofrImI
GGmXxp0JUYAo9+ohFm1y/xAJnLl7pchm6+eM1oFjJcURwPCBPSdyqCbVwmh4gCms
woUABQRsvgMMNO0ce3gH1qxWp64LfSBhpaMukcIW7xlTeFjZCQIXJZMPEHtKXfMl
GVD8QwAlopcpXduE+kijMoLhS5zqKN4wnNKqvn4aH4el1+I0Rvjq3S1Jx/z8Gwcp
Yn6JMn8/UFWafHq3suKmuUnyJFrXuLubpXRgBRKsHaAtikNH4/eA3nLr83yrx82o
nJQ6qylqyDc8uk8dbgrS69y668dxHkW9l2EmfangZfO6idCXTELBLqinLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtxwD1cukH8HxJ3tlV7pyhGM6pOMB8GA1UdIwQY
MBaAFHqxX87mwEWJ6yyzUKdHwwBvShfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXJGZnp1YkFSWW5yTExOUXAwZkRBRzlLRjl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hNTkzMmUtNDYwNy00NGFkLWFiZjIt
NWI1Yjg0ODVmNzQ5LzEvZXJGZnp1YkFSWW5yTExOUXAwZkRBRzlLRjl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hNTkzMmUtNDYwNy00NGFkLWFiZjItNWI1Yjg0ODVmNzQ5
LzEvZXJGZnp1YkFSWW5yTExOUXAwZkRBRzlLRjl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEK7msPQq
voQ1/J00zxLVBW9h5zErcsQft953TlFtDI0RdFdmJdYHNvbJHh0KbSDPPvgNpUlb
DbNPwGeyZj4GYV8UcFEwDg5v9hZuF1pzcgKXath/onbGPSmgl2qDFue0Vr6FeV/i
T5WsPAEA39bQrAs0OQkpxcn4Tyk4t1pg9YMHNZxp0CM9aONuVCnAw+be0KxDK9qF
LhJ7+Hp1OHON0N9GKrkKlf82lUP+8YBTk511mZekxffpSGzCywyca7pd6D2gy91w
qsAHk4urjIanxOs9l1eLrMvFNSIcPrvtLkEtDuerGtST22RVZ0R3ld9LmHPRGnI2
oMWkSTGbaQzNOg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:52:09 2026 by rpki-client