Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
File: ErFnS78NEY8lVPgMr9PvGznYrj8.mft (raw, json)
Hash identifier: pQLCpXzf9IA6JX3Nxy8Zf1EoaGPlZLDHpcxiCb9DSGU=
Subject key identifier: 08:96:6D:F1:AF:95:FD:45:5D:B5:C2:4C:D3:A9:7D:A1:DE:BB:D2:65
Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
Certificate issuer: /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Certificate serial: 019F939204E86731A89204E6A1DDA99882E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
Manifest number: 0A4C
Signing time: Fri 24 Jul 2026 10:00:47 +0000
Manifest this update: Fri 24 Jul 2026 10:00:47 +0000
Manifest next update: Sat 25 Jul 2026 10:00:47 +0000
Files and hashes: 1: 1-GMAx4cV6wCGu8QajPhkplgNOC0.roa (hash: dbmm9AGKkzXlCXgFEXZSu4+kBmd2ptn2wiUgb1Ww9ds=)
2: ErFnS78NEY8lVPgMr9PvGznYrj8.crl (hash: eGQnQmBW2qy+fEoIazBDYXitoiABh73FStC0q6yQq4E=)
3: T_9Nupq1QtdGed_iwoc4AH5rQ3A.roa (hash: u8SWNWsR1YqwiTS51c4B27JGvI8Gi01uv4oyKJW5qZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:04:e8:67:31:a8:92:04:e6:a1:dd:a9:98:82:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Validity
Not Before: Jul 24 10:00:47 2026 GMT
Not After : Jul 25 10:00:47 2026 GMT
Subject: CN=08966df1af95fd455db5c24cd3a97da1debbd265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:dc:de:08:58:a1:94:47:91:41:54:32:5e:b8:
e9:82:c3:ae:41:7a:e9:d4:95:ab:f2:2a:c2:7e:b4:
90:22:53:a3:6d:31:ef:51:c4:a5:07:0d:52:49:9b:
0a:03:c0:0e:61:35:51:44:49:8c:e6:f8:38:03:5a:
76:d4:32:1d:e1:26:83:5c:00:5d:39:c2:3e:b0:6a:
c2:c8:d5:21:69:16:3a:24:26:11:26:d0:4b:16:41:
00:8a:c4:50:b4:b3:c2:d7:14:0b:2c:6b:e5:52:1c:
12:83:a1:8b:20:f6:ec:d7:92:0b:a1:57:1a:a7:d9:
ab:a4:e2:12:60:52:e3:17:d6:7d:3a:e1:4b:a6:ce:
05:e8:9b:72:18:5f:73:71:4c:d7:96:21:ab:f0:5e:
95:19:58:5c:87:ea:c0:97:99:06:d8:50:3d:ac:c7:
39:1a:95:ae:a2:87:74:b9:9c:97:dd:aa:44:33:4c:
50:50:30:bc:8c:dc:be:fb:34:87:a0:dd:08:96:bb:
d4:03:22:54:4b:f4:7d:63:a2:36:29:12:83:d9:58:
51:49:ad:01:13:25:e1:d3:a8:35:cb:57:39:7d:d4:
0c:ba:55:66:43:53:35:be:12:ac:57:e4:4c:dd:14:
2b:e0:a8:24:ce:7a:2c:35:07:df:56:77:a4:9a:ae:
4f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:96:6D:F1:AF:95:FD:45:5D:B5:C2:4C:D3:A9:7D:A1:DE:BB:D2:65
X509v3 Authority Key Identifier:
keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:7c:cc:7c:75:89:cf:5e:17:6b:7f:c6:a1:06:17:7b:28:50:
0f:48:e7:2d:00:96:97:8f:cb:6c:3c:d4:73:cc:31:43:91:44:
d7:61:df:91:79:29:71:12:68:23:6f:7a:40:f2:4a:ce:eb:d8:
23:e6:6d:d0:7e:2d:f3:c0:ff:b8:bd:b9:60:89:53:22:19:f5:
44:95:1a:f8:18:ee:13:29:a6:d0:3b:5e:ab:d4:ca:1a:50:44:
b3:f6:11:f2:64:d6:4c:45:31:1d:5f:f5:7a:0f:b1:75:bb:96:
e1:e0:75:9b:3e:07:28:c8:97:a0:2e:96:63:06:14:f6:84:36:
7b:fe:ba:53:68:33:b3:a9:ea:4b:23:e4:0e:f4:df:1d:29:5b:
9c:18:84:8a:ed:dc:56:ce:a5:42:3f:5c:6f:7d:86:d2:63:1e:
08:6b:70:5b:09:8d:7c:39:07:06:f0:4d:0d:05:c2:15:3a:68:
16:93:e4:e3:15:b8:9a:82:8a:9c:36:3a:6f:ca:bd:63:0d:28:
c0:b0:cb:65:9b:a1:c0:0e:4d:dd:f5:26:01:98:a0:7e:bf:25:
50:a2:fa:98:e0:3d:f6:44:92:a3:46:2e:70:f1:0c:db:d2:4d:
36:6d:9d:1b:cd:40:d9:4b:65:fe:b8:b3:01:69:13:3a:4f:17:
27:38:df:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:16:57 2026 by rpki-client