Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
File: ErFnS78NEY8lVPgMr9PvGznYrj8.mft (raw, json)
Hash identifier: 03CZH2C1ZzLMfv9cznghQRXlxHraXpiKq6DoCnr4P5Q=
Subject key identifier: 89:9D:82:02:3C:47:D3:94:39:06:68:AA:FB:E1:00:40:8E:52:E9:47
Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
Certificate issuer: /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Certificate serial: 019D299770F5A3648AAFB78F10DBFBFE62D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
Manifest number: 090C
Signing time: Thu 26 Mar 2026 10:01:23 +0000
Manifest this update: Thu 26 Mar 2026 10:01:23 +0000
Manifest next update: Fri 27 Mar 2026 10:01:23 +0000
Files and hashes: 1: 1-GMAx4cV6wCGu8QajPhkplgNOC0.roa (hash: dbmm9AGKkzXlCXgFEXZSu4+kBmd2ptn2wiUgb1Ww9ds=)
2: ErFnS78NEY8lVPgMr9PvGznYrj8.crl (hash: q+lcs4VECKH6FkqvsmrkNeln9gi6fP8ULW1qXH0Q2IA=)
3: T_9Nupq1QtdGed_iwoc4AH5rQ3A.roa (hash: u8SWNWsR1YqwiTS51c4B27JGvI8Gi01uv4oyKJW5qZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:70:f5:a3:64:8a:af:b7:8f:10:db:fb:fe:62:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Validity
Not Before: Mar 26 10:01:23 2026 GMT
Not After : Mar 27 10:01:23 2026 GMT
Subject: CN=899d82023c47d394390668aafbe100408e52e947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1c:49:b8:00:25:8c:ed:82:c6:0b:1b:16:10:
f0:01:b7:96:a8:7f:3c:d1:37:a6:a7:95:24:c8:9d:
cd:86:a9:ef:26:e8:a8:ba:34:2e:eb:63:6f:60:39:
fa:b2:e0:73:18:95:7d:34:2d:ed:c0:76:38:3d:73:
f0:8e:28:5d:94:1e:a8:19:e9:ee:65:57:e7:01:95:
c0:26:74:c0:41:d0:62:f5:84:41:02:e0:c7:69:a1:
cc:08:37:79:a5:d0:05:31:44:bc:e2:92:93:c8:46:
dd:b0:11:fb:f0:2e:a1:10:fb:52:4b:ad:73:1c:22:
d0:09:0e:74:ef:be:70:d9:47:29:f3:b2:29:8a:b9:
f9:ed:2a:12:ea:b6:08:24:02:a2:78:ca:13:65:97:
4d:9c:bc:2c:fc:b7:c0:1d:04:e5:9d:0a:ba:06:69:
68:a9:ae:18:55:79:5f:d5:67:0d:37:44:4b:0f:bb:
08:04:5c:9d:e8:db:87:b2:78:07:64:7f:bf:b2:73:
71:f6:98:bb:39:f2:3d:b3:5d:1d:fb:12:43:df:bd:
cb:63:b8:b5:3d:77:ea:2b:06:92:da:75:2b:32:7d:
45:04:72:ee:bb:c5:f7:a5:5d:af:e3:db:3c:73:89:
d6:2d:f7:30:89:34:e4:0f:c6:6e:64:a8:61:27:a6:
de:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9D:82:02:3C:47:D3:94:39:06:68:AA:FB:E1:00:40:8E:52:E9:47
X509v3 Authority Key Identifier:
keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e8:31:1b:2f:76:b9:c7:1b:e2:c7:d6:13:f5:85:50:30:8d:
2f:04:b8:8f:5e:92:25:58:d4:36:de:e7:9b:8f:78:1a:6c:81:
42:00:19:b7:53:c8:14:b5:d3:69:01:62:38:e0:82:c1:a6:a9:
2b:40:27:ae:0f:d8:9d:86:61:a6:e4:17:4f:fd:59:a3:2b:f7:
80:c7:05:85:c7:62:7b:ec:d5:63:7d:67:01:ca:9e:9e:a2:e0:
d1:b9:e7:e4:67:c4:2e:4a:58:8e:00:2e:c3:94:b7:06:81:d7:
11:70:ed:20:76:f5:55:25:e1:cd:61:74:9c:45:38:a6:46:47:
92:ba:91:f7:80:31:cd:90:fc:b5:93:7d:e4:19:fc:7b:c4:d0:
96:53:e0:49:e7:e0:5f:f6:6c:b1:71:be:31:7b:0d:50:00:15:
de:c2:4c:28:1a:b1:74:33:25:43:31:f6:00:0a:07:21:19:40:
88:7b:4a:75:7b:ae:24:eb:5e:e2:0b:41:5b:9d:53:a9:58:7d:
6c:64:54:e4:d9:d9:e2:42:62:ff:8e:c4:2f:d0:93:36:5d:ef:
8d:e9:ed:20:5f:bc:fc:05:a9:f3:fc:8b:29:b9:fb:6e:a0:7f:
e9:4e:31:fd:d4:ff:7d:b6:f8:ed:c0:70:50:76:09:df:4d:eb:
49:c5:bf:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:35:02 2026 by rpki-client