Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
File: erFfzubARYnrLLNQp0fDAG9KF9w.mft (raw, json)
Hash identifier: dAAvgViKjG6m3hvQq9mp/+CIO61NZJ+4wM+q8LzRaPc=
Subject key identifier: 17:EA:16:6B:F8:9D:55:52:FC:71:48:E3:EE:BC:9B:69:0B:E9:6C:8C
Authority key identifier: 7A:B1:5F:CE:E6:C0:45:89:EB:2C:B3:50:A7:47:C3:00:6F:4A:17:DC
Certificate issuer: /CN=7ab15fcee6c04589eb2cb350a747c3006f4a17dc
Certificate serial: 01A0D760633752878E2E2643B53704B4DE45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
Manifest number: 0203
Signing time: Fri 25 Sep 2026 07:03:33 +0000
Manifest this update: Fri 25 Sep 2026 07:03:33 +0000
Manifest next update: Sat 26 Sep 2026 07:03:33 +0000
Files and hashes: 1: QnFaI3ow-cffiwBxqkoWt4mkYpU.roa (hash: L9K99lMlOY7dnsS5zhvNr+thiKNEY4zaYl8mxhYaaJE=)
2: erFfzubARYnrLLNQp0fDAG9KF9w.crl (hash: 6Y1fm83v4JHM0eKjbnTBtbzPdbo1cFC7FvAtrJ1kDeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:60:63:37:52:87:8e:2e:26:43:b5:37:04:b4:de:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ab15fcee6c04589eb2cb350a747c3006f4a17dc
Validity
Not Before: Sep 25 07:03:33 2026 GMT
Not After : Sep 26 07:03:33 2026 GMT
Subject: CN=17ea166bf89d5552fc7148e3eebc9b690be96c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:88:6f:65:e7:dc:02:d2:05:5c:5a:2a:1f:bf:
85:73:01:e9:81:37:ea:f6:4c:50:ea:e5:12:16:44:
2f:63:e2:82:04:2e:ec:5a:a5:9a:f2:ea:c3:94:d1:
29:e3:25:06:03:ff:ab:ed:d3:dc:a7:6c:98:5f:4a:
95:c9:cc:8a:b1:e1:28:56:8a:3e:55:4c:e3:e0:a2:
ae:47:d7:7b:dd:ab:4a:a8:80:44:3e:75:35:12:21:
35:c3:19:d7:54:ec:e9:13:78:54:43:ae:b8:4e:c3:
41:9b:1e:0b:d1:08:3d:a0:76:a9:8b:52:0e:53:d0:
3d:bb:aa:ba:90:df:62:45:cc:17:06:7a:4b:cd:c9:
a5:9e:69:97:57:b8:3f:3a:75:a7:d1:30:31:cb:93:
19:0a:67:6b:49:9b:05:72:e1:99:04:3b:be:cb:4e:
75:2c:dd:90:fd:8e:d8:2b:c6:df:47:51:7f:18:2d:
86:c9:ff:0b:77:90:22:13:17:45:5d:6f:1b:92:93:
38:c0:da:a9:3e:31:95:10:13:a3:1e:aa:d1:7e:c0:
a5:3f:42:b6:b8:dc:58:37:73:0e:7b:b6:f5:2c:45:
80:78:33:5c:0c:62:46:34:f3:84:df:ca:dc:90:3e:
3d:e3:1f:69:34:66:87:7d:49:53:51:90:12:c1:b3:
74:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EA:16:6B:F8:9D:55:52:FC:71:48:E3:EE:BC:9B:69:0B:E9:6C:8C
X509v3 Authority Key Identifier:
keyid:7A:B1:5F:CE:E6:C0:45:89:EB:2C:B3:50:A7:47:C3:00:6F:4A:17:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:7c:0e:b4:dc:3b:d1:74:62:d0:a9:ef:82:33:01:1c:79:5c:
33:c8:ad:d1:6d:c5:d5:d3:23:af:6b:f8:af:d5:78:6d:17:18:
2f:17:37:a3:e1:fe:4b:dc:87:7b:34:3e:c8:05:d4:48:e6:1b:
9b:24:88:34:65:30:51:5f:a6:d6:cf:82:36:db:93:d5:74:c8:
a9:89:8a:11:91:03:4d:6e:f9:6c:eb:00:f0:ad:54:99:e8:b6:
42:4a:ea:52:11:15:d3:78:cb:63:86:b8:ae:1d:77:26:fb:11:
1f:cc:b3:e7:69:01:7c:c7:0f:3a:99:52:18:71:02:78:eb:c8:
2f:b8:2b:5b:2f:a2:06:cb:db:29:68:ab:c7:92:88:8b:77:48:
6f:19:45:ba:58:c7:46:42:e2:5e:28:e5:c6:59:28:83:b3:3c:
5e:22:8f:59:c7:cc:b2:f4:a7:98:56:d1:01:3d:21:a4:54:56:
12:e7:cf:df:14:dd:6c:be:f7:36:ea:fc:b4:e7:5c:6c:8a:e7:
e5:c7:d3:06:a2:e4:4b:21:37:22:6c:6b:e4:90:78:87:e9:31:
f8:71:73:5e:a5:40:80:53:be:30:0c:ac:f0:4f:61:19:dc:dd:
5b:6a:f6:ad:60:bb:a1:c3:4d:58:a2:2e:77:84:6a:fd:31:7e:
3b:ed:a0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:45:47 2026 by rpki-client