Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
File: ErFnS78NEY8lVPgMr9PvGznYrj8.mft (raw, json)
Hash identifier: bJNo96lReZXGaCRrdzrtmsXgaCVjncF8VWzKekBmyK8=
Subject key identifier: B1:24:AE:43:A3:83:92:01:B8:41:6A:B2:13:8F:D0:15:5B:CC:14:6A
Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
Certificate issuer: /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Certificate serial: 019F958068F2585F234F26FC487466DCC0F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
Manifest number: 0A4D
Signing time: Fri 24 Jul 2026 19:00:48 +0000
Manifest this update: Fri 24 Jul 2026 19:00:48 +0000
Manifest next update: Sat 25 Jul 2026 19:00:48 +0000
Files and hashes: 1: 1-GMAx4cV6wCGu8QajPhkplgNOC0.roa (hash: dbmm9AGKkzXlCXgFEXZSu4+kBmd2ptn2wiUgb1Ww9ds=)
2: ErFnS78NEY8lVPgMr9PvGznYrj8.crl (hash: voHeXczta43liBsd/fwod8Xof2j+ehQfjnU9v3bLIsI=)
3: T_9Nupq1QtdGed_iwoc4AH5rQ3A.roa (hash: u8SWNWsR1YqwiTS51c4B27JGvI8Gi01uv4oyKJW5qZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:68:f2:58:5f:23:4f:26:fc:48:74:66:dc:c0:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Validity
Not Before: Jul 24 19:00:48 2026 GMT
Not After : Jul 25 19:00:48 2026 GMT
Subject: CN=b124ae43a3839201b8416ab2138fd0155bcc146a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:20:ce:22:70:75:30:71:cf:d0:8e:f6:dc:
ac:64:0b:37:f4:36:9c:ab:9e:41:cc:6b:f9:50:b2:
6e:1a:1b:11:90:3f:37:be:6b:e3:43:3c:63:1a:27:
98:76:4e:27:35:bb:31:e0:6a:2d:bf:c5:21:76:56:
1f:73:e0:c6:37:23:f3:bd:ce:c3:01:d6:d5:a4:4a:
43:c0:0f:1b:b2:77:1c:75:f3:08:e9:8e:78:f7:e7:
1e:9c:68:e6:7f:0e:d0:a6:10:b2:43:e2:b2:ff:3a:
16:97:26:e1:7f:a1:2b:c4:ba:93:53:a0:74:91:a4:
66:e6:17:d1:05:89:e3:aa:25:0e:e6:d8:fc:96:62:
11:f2:c2:41:48:eb:45:88:3b:6f:03:6e:54:5b:0f:
54:85:fa:18:04:53:95:5a:68:86:d4:2e:fe:8b:46:
bc:ab:f1:65:ac:67:70:4f:79:4d:b1:56:2f:ea:23:
60:db:47:82:ad:2f:23:f9:fb:f3:dd:f3:01:d7:65:
39:86:23:99:96:4a:af:74:02:43:d6:43:ef:ef:2f:
ad:76:16:2f:3b:9b:47:06:eb:a7:b3:06:c3:bb:16:
2f:27:e0:63:70:6e:76:ce:a8:13:e1:7b:2c:df:8c:
e5:63:88:da:1a:84:29:48:d0:db:87:55:aa:39:d9:
20:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:24:AE:43:A3:83:92:01:B8:41:6A:B2:13:8F:D0:15:5B:CC:14:6A
X509v3 Authority Key Identifier:
keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d2:d6:0b:74:dd:d9:33:e4:d0:5c:cf:de:18:b3:fe:90:24:
f8:55:b2:69:dd:7a:53:63:72:66:95:68:fa:d6:5c:a0:5a:84:
b4:9b:be:d0:cd:52:b6:6c:35:8a:09:db:4b:7f:21:3d:5a:72:
e0:cd:a5:69:26:f6:b6:b3:74:ea:b5:a8:1a:25:02:13:27:7c:
73:26:82:33:7f:33:d6:97:9d:96:35:6a:c3:31:19:dc:ab:ff:
dd:5e:62:de:47:10:db:a8:f9:51:a6:fb:b4:08:f7:53:92:8f:
e3:92:c8:40:57:10:2a:0c:df:26:23:f4:d9:dd:c1:e1:80:55:
32:3e:7d:f9:72:db:66:cc:69:25:cb:cd:98:3c:68:6d:00:d6:
6a:5e:dd:b6:50:8e:0d:31:e0:14:84:e4:57:94:24:02:44:e7:
29:44:f0:96:e4:e6:ce:5d:26:46:5a:83:f3:43:7b:e5:9c:1c:
a4:51:27:e6:c9:d0:83:b7:91:cb:2a:62:fe:b5:79:5c:fd:17:
40:aa:7b:30:db:7b:92:2a:b9:34:85:c8:39:8e:2a:ec:26:24:
90:6e:d6:86:c3:9c:74:e9:1a:1f:c0:59:54:2a:a3:dd:c1:14:
69:8e:48:cb:16:60:95:ff:7a:e0:2d:88:52:6c:0f:73:1e:5c:
28:6c:30:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:25:27 2026 by rpki-client