Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
File: erFfzubARYnrLLNQp0fDAG9KF9w.mft (raw, json)
Hash identifier: SSNWpMnQTp5lIp0B1lSNV8DbXk4Xav/X8b39cJ0JvGc=
Subject key identifier: 47:23:E4:BD:14:85:F3:22:AC:E4:81:77:FE:E4:A3:F7:4D:99:31:00
Authority key identifier: 7A:B1:5F:CE:E6:C0:45:89:EB:2C:B3:50:A7:47:C3:00:6F:4A:17:DC
Certificate issuer: /CN=7ab15fcee6c04589eb2cb350a747c3006f4a17dc
Certificate serial: 01A0D192E66EE8347F35D260FDD516A2F283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
Manifest number: 0200
Signing time: Thu 24 Sep 2026 04:01:00 +0000
Manifest this update: Thu 24 Sep 2026 04:01:00 +0000
Manifest next update: Fri 25 Sep 2026 04:01:00 +0000
Files and hashes: 1: QnFaI3ow-cffiwBxqkoWt4mkYpU.roa (hash: L9K99lMlOY7dnsS5zhvNr+thiKNEY4zaYl8mxhYaaJE=)
2: erFfzubARYnrLLNQp0fDAG9KF9w.crl (hash: O+XBiYAghDV6sEq9KZO1v7INbhnTHLLn9XDzq/aKzHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:e6:6e:e8:34:7f:35:d2:60:fd:d5:16:a2:f2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ab15fcee6c04589eb2cb350a747c3006f4a17dc
Validity
Not Before: Sep 24 04:01:00 2026 GMT
Not After : Sep 25 04:01:00 2026 GMT
Subject: CN=4723e4bd1485f322ace48177fee4a3f74d993100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0e:ff:8f:2d:bf:01:90:ac:de:d0:0a:66:a4:
9f:a7:54:58:13:56:f5:c1:dc:c1:9c:72:1f:d3:ce:
67:85:1d:19:4e:58:2c:e4:93:e7:24:2a:5a:9c:3c:
81:c4:0f:f1:c5:63:b5:89:99:60:1d:2d:10:69:bd:
87:3c:b0:51:39:4f:3f:4d:7b:79:4c:16:d5:21:28:
fa:06:e4:2d:0e:b3:75:9c:b6:b6:df:73:ce:1e:ff:
bb:1e:64:f7:1d:58:90:bb:5e:25:27:19:41:8a:5b:
18:c1:31:90:6e:d5:8b:b4:96:4a:71:86:48:fd:2a:
e5:7e:b1:58:e6:a3:54:d0:d3:4f:11:8f:99:f0:8c:
b9:72:16:5e:0c:c3:47:dc:e4:60:cc:14:60:b3:b0:
76:13:a1:39:d8:aa:2a:e3:d4:00:16:fa:09:f6:4c:
b2:23:92:59:db:a3:41:42:d0:53:40:54:9e:e3:db:
8a:e1:d4:c6:ac:8a:6a:4b:d9:03:4e:9e:8f:74:af:
b3:2d:04:49:dd:20:09:38:aa:e4:8c:e7:55:96:b2:
91:d5:30:b5:19:db:44:77:9b:74:25:52:fd:94:b9:
25:29:52:89:a1:3d:7b:bd:88:d0:c2:8f:88:38:4f:
74:30:60:8a:b7:cf:c2:9d:0a:3b:7d:fd:93:52:53:
76:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:23:E4:BD:14:85:F3:22:AC:E4:81:77:FE:E4:A3:F7:4D:99:31:00
X509v3 Authority Key Identifier:
keyid:7A:B1:5F:CE:E6:C0:45:89:EB:2C:B3:50:A7:47:C3:00:6F:4A:17:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1e:a0:d9:dd:98:e0:f9:64:b5:6e:85:86:72:52:b4:11:8c:
f0:32:f5:f9:7a:9f:43:2d:b3:64:c7:66:fd:31:9d:ec:d1:9a:
19:00:43:c3:c3:1b:75:1e:27:4c:78:96:05:2e:4f:c0:65:d7:
e3:fa:7d:27:e6:e9:d7:9e:25:fb:9f:d3:0a:0d:fe:d9:76:ef:
00:69:3e:01:5b:61:9c:10:66:0b:ca:2f:04:8d:03:55:17:3d:
43:a0:ed:58:77:87:ae:d8:32:3f:31:54:be:48:a9:91:78:b2:
09:2e:d9:23:ce:e9:3e:be:8b:cd:90:b8:0f:39:65:f0:ac:23:
9d:82:2e:aa:b1:9d:f1:ef:5c:ae:57:51:d6:41:aa:22:c6:5a:
4b:c4:d5:b1:b5:6d:61:3e:86:b0:d4:af:e9:3b:ad:cb:73:1e:
69:f1:49:3c:5a:b2:c6:c2:11:f4:24:7b:d2:4e:b9:4d:8f:b9:
c6:0a:9b:8e:a8:e5:a0:3b:bf:b1:ca:f2:70:78:79:f6:9d:55:
2e:16:b6:69:6a:0f:c7:17:4b:ca:6b:f5:7d:fa:fe:e4:e5:eb:
56:4f:3f:ba:41:e0:6b:7e:35:c0:4b:7b:19:61:65:5d:92:4e:
70:bd:a4:f6:31:2b:10:08:4f:fb:b0:3e:71:99:3c:ce:41:45:
66:75:b5:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRkuZu6DR/NdJg/dUWovKDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYjE1ZmNlZTZjMDQ1ODllYjJjYjM1MGE3NDdjMzAwNmY0
YTE3ZGMwHhcNMjYwOTI0MDQwMTAwWhcNMjYwOTI1MDQwMTAwWjAzMTEwLwYDVQQD
Eyg0NzIzZTRiZDE0ODVmMzIyYWNlNDgxNzdmZWU0YTNmNzRkOTkzMTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw7/jy2/AZCs3tAKZqSfp1RYE1b1
wdzBnHIf085nhR0ZTlgs5JPnJCpanDyBxA/xxWO1iZlgHS0Qab2HPLBROU8/TXt5
TBbVISj6BuQtDrN1nLa233POHv+7HmT3HViQu14lJxlBilsYwTGQbtWLtJZKcYZI
/SrlfrFY5qNU0NNPEY+Z8Iy5chZeDMNH3ORgzBRgs7B2E6E52Koq49QAFvoJ9kyy
I5JZ26NBQtBTQFSe49uK4dTGrIpqS9kDTp6PdK+zLQRJ3SAJOKrkjOdVlrKR1TC1
GdtEd5t0JVL9lLklKVKJoT17vYjQwo+IOE90MGCKt8/CnQo7ff2TUlN2WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcj5L0UhfMirOSBd/7ko/dNmTEAMB8GA1UdIwQY
MBaAFHqxX87mwEWJ6yyzUKdHwwBvShfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXJGZnp1YkFSWW5yTExOUXAwZkRBRzlLRjl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hNTkzMmUtNDYwNy00NGFkLWFiZjIt
NWI1Yjg0ODVmNzQ5LzEvZXJGZnp1YkFSWW5yTExOUXAwZkRBRzlLRjl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hNTkzMmUtNDYwNy00NGFkLWFiZjItNWI1Yjg0ODVmNzQ5
LzEvZXJGZnp1YkFSWW5yTExOUXAwZkRBRzlLRjl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOx6g2d2Y
4PlktW6FhnJStBGM8DL1+XqfQy2zZMdm/TGd7NGaGQBDw8MbdR4nTHiWBS5PwGXX
4/p9J+bp154l+5/TCg3+2XbvAGk+AVthnBBmC8ovBI0DVRc9Q6DtWHeHrtgyPzFU
vkipkXiyCS7ZI87pPr6LzZC4Dzll8KwjnYIuqrGd8e9crldR1kGqIsZaS8TVsbVt
YT6GsNSv6Tuty3MeafFJPFqyxsIR9CR70k65TY+5xgqbjqjloDu/scrycHh59p1V
Lha2aWoPxxdLymv1ffr+5OXrVk8/ukHga341wEt7GWFlXZJOcL2k9jErEAhP+7A+
cZk8zkFFZnW1bA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:15:38 2026 by rpki-client