Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
File: erFfzubARYnrLLNQp0fDAG9KF9w.mft (raw, json)
Hash identifier: tbAOyZNJa5g+8GzrmasbhnOTmFsW9GPMGwvwnB3odtk=
Subject key identifier: 96:83:78:3F:48:74:50:90:6F:C6:D1:97:27:72:94:1C:CF:C0:00:A8
Authority key identifier: 7A:B1:5F:CE:E6:C0:45:89:EB:2C:B3:50:A7:47:C3:00:6F:4A:17:DC
Certificate issuer: /CN=7ab15fcee6c04589eb2cb350a747c3006f4a17dc
Certificate serial: 019D2AE0ACA42E8E20A6709FF392AC0C4145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
Manifest number: 1C
Signing time: Thu 26 Mar 2026 16:01:00 +0000
Manifest this update: Thu 26 Mar 2026 16:01:00 +0000
Manifest next update: Fri 27 Mar 2026 16:01:00 +0000
Files and hashes: 1: QnFaI3ow-cffiwBxqkoWt4mkYpU.roa (hash: L9K99lMlOY7dnsS5zhvNr+thiKNEY4zaYl8mxhYaaJE=)
2: erFfzubARYnrLLNQp0fDAG9KF9w.crl (hash: fw8fUnRfC6FbgMPraHurJfCoUGTK6hmsL4iwpj+1OyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:ac:a4:2e:8e:20:a6:70:9f:f3:92:ac:0c:41:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ab15fcee6c04589eb2cb350a747c3006f4a17dc
Validity
Not Before: Mar 26 16:01:00 2026 GMT
Not After : Mar 27 16:01:00 2026 GMT
Subject: CN=9683783f487450906fc6d1972772941ccfc000a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dc:d4:71:34:61:69:5b:e8:bb:69:7d:32:68:
c9:21:ac:8c:90:bd:a3:14:95:66:af:e9:fe:e1:79:
ae:f6:be:b5:e3:32:c9:1e:9e:76:5b:72:76:54:d3:
0d:13:08:ef:f1:8d:e0:dd:c6:d6:84:fd:92:31:b1:
52:c1:4b:5e:bb:56:5b:62:dc:ce:38:cb:e9:00:32:
0d:31:e9:97:6c:7e:42:a9:bc:ff:76:7f:ef:ce:96:
55:42:31:dc:77:47:80:bb:90:60:93:5c:8e:86:da:
04:c1:c9:57:45:c8:05:d3:9f:9f:c2:34:3b:ba:80:
51:55:d9:33:b1:a8:ff:24:b6:54:37:7d:00:62:7f:
71:77:38:55:25:58:45:c2:bb:a6:96:50:d9:27:a3:
e3:1f:2c:c7:7a:ad:88:ff:24:1f:07:41:6b:03:e7:
0a:5c:72:e0:4c:10:26:8d:c8:c4:59:3d:c5:82:b6:
38:91:14:67:e6:e6:d2:e6:15:2c:4b:45:29:fc:60:
b4:45:61:11:8b:5c:0d:38:3e:40:4e:7e:7a:db:71:
81:93:ba:fe:d0:95:6c:c6:74:bc:76:da:f8:18:ff:
38:b6:31:b6:69:4d:14:e3:1d:11:85:1b:d2:56:60:
ce:91:e5:a8:da:66:b8:3f:b0:fe:52:6e:fd:97:19:
06:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:83:78:3F:48:74:50:90:6F:C6:D1:97:27:72:94:1C:CF:C0:00:A8
X509v3 Authority Key Identifier:
keyid:7A:B1:5F:CE:E6:C0:45:89:EB:2C:B3:50:A7:47:C3:00:6F:4A:17:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:fb:85:4d:f9:89:cc:2f:90:0e:55:a5:44:49:d1:62:2c:e2:
86:70:28:8f:25:35:79:e7:94:5e:43:38:52:14:4c:41:c4:ac:
e8:52:7c:ae:66:3b:8f:15:9c:d4:f8:f2:74:9d:e2:07:59:30:
58:d2:f9:17:ac:e0:a5:19:8e:a4:5d:75:c1:c8:d0:b7:39:2d:
d6:59:5f:9b:61:cb:f4:47:3f:22:cd:93:3a:ad:33:63:d3:e8:
ee:9f:14:3b:73:d1:32:7f:b9:8d:f1:c9:87:20:2a:bd:30:4a:
11:78:ff:dc:cc:02:fd:21:36:f3:8b:23:70:bc:9e:73:b0:19:
5c:cd:ad:b5:2e:47:7b:98:36:fe:67:35:42:40:37:7a:1a:18:
29:f5:dd:e4:c1:7e:59:f3:c4:c2:7f:90:61:4f:ce:b0:ac:ea:
79:c4:05:a2:bc:5d:c2:3a:7a:30:3d:99:18:dc:f7:49:88:36:
f2:b6:f2:bd:30:53:7f:28:d8:c8:fe:52:54:2a:5a:f9:57:e9:
ed:16:25:f7:1f:77:bc:83:b8:46:99:38:df:5e:da:71:22:a6:
04:1b:49:39:a0:0c:0a:9e:1e:26:68:65:66:8e:cd:ff:5b:c7:
c2:b3:76:ff:ae:cc:a8:da:da:80:eb:3e:fa:c3:45:b6:6c:26:
f8:d5:8d:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4KykLo4gpnCf85KsDEFFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYjE1ZmNlZTZjMDQ1ODllYjJjYjM1MGE3NDdjMzAwNmY0
YTE3ZGMwHhcNMjYwMzI2MTYwMTAwWhcNMjYwMzI3MTYwMTAwWjAzMTEwLwYDVQQD
Eyg5NjgzNzgzZjQ4NzQ1MDkwNmZjNmQxOTcyNzcyOTQxY2NmYzAwMGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9zUcTRhaVvou2l9MmjJIayMkL2j
FJVmr+n+4Xmu9r614zLJHp52W3J2VNMNEwjv8Y3g3cbWhP2SMbFSwUteu1ZbYtzO
OMvpADINMemXbH5Cqbz/dn/vzpZVQjHcd0eAu5Bgk1yOhtoEwclXRcgF05+fwjQ7
uoBRVdkzsaj/JLZUN30AYn9xdzhVJVhFwrumllDZJ6PjHyzHeq2I/yQfB0FrA+cK
XHLgTBAmjcjEWT3FgrY4kRRn5ubS5hUsS0Up/GC0RWERi1wNOD5ATn5623GBk7r+
0JVsxnS8dtr4GP84tjG2aU0U4x0RhRvSVmDOkeWo2ma4P7D+Um79lxkGoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJaDeD9IdFCQb8bRlydylBzPwACoMB8GA1UdIwQY
MBaAFHqxX87mwEWJ6yyzUKdHwwBvShfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXJGZnp1YkFSWW5yTExOUXAwZkRBRzlLRjl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hNTkzMmUtNDYwNy00NGFkLWFiZjIt
NWI1Yjg0ODVmNzQ5LzEvZXJGZnp1YkFSWW5yTExOUXAwZkRBRzlLRjl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hNTkzMmUtNDYwNy00NGFkLWFiZjItNWI1Yjg0ODVmNzQ5
LzEvZXJGZnp1YkFSWW5yTExOUXAwZkRBRzlLRjl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXvuFTfmJ
zC+QDlWlREnRYizihnAojyU1eeeUXkM4UhRMQcSs6FJ8rmY7jxWc1PjydJ3iB1kw
WNL5F6zgpRmOpF11wcjQtzkt1llfm2HL9Ec/Is2TOq0zY9Po7p8UO3PRMn+5jfHJ
hyAqvTBKEXj/3MwC/SE284sjcLyec7AZXM2ttS5He5g2/mc1QkA3ehoYKfXd5MF+
WfPEwn+QYU/OsKzqecQForxdwjp6MD2ZGNz3SYg28rbyvTBTfyjYyP5SVCpa+Vfp
7RYl9x93vIO4Rpk4317acSKmBBtJOaAMCp4eJmhlZo7N/1vHwrN2/67MqNragOs+
+sNFtmwm+NWN6A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:06:26 2026 by rpki-client