Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
File: ErFnS78NEY8lVPgMr9PvGznYrj8.mft (raw, json)
Hash identifier: evXZeyQwfRDEQXPeoyaocK3F93zXebDP5UrKPNexoAc=
Subject key identifier: 01:AD:AD:EB:F4:81:99:E5:C1:31:82:EC:D0:5D:3D:C1:00:B8:6A:36
Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
Certificate issuer: /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Certificate serial: 019E20C81E4C1394111276B63AA50A1B497A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
Manifest number: 098C
Signing time: Wed 13 May 2026 10:00:46 +0000
Manifest this update: Wed 13 May 2026 10:00:46 +0000
Manifest next update: Thu 14 May 2026 10:00:46 +0000
Files and hashes: 1: 1-GMAx4cV6wCGu8QajPhkplgNOC0.roa (hash: dbmm9AGKkzXlCXgFEXZSu4+kBmd2ptn2wiUgb1Ww9ds=)
2: ErFnS78NEY8lVPgMr9PvGznYrj8.crl (hash: 0NOyRSFhSe7An8goN7ALfDWCy2VfhGJwjg0zybuntRw=)
3: T_9Nupq1QtdGed_iwoc4AH5rQ3A.roa (hash: u8SWNWsR1YqwiTS51c4B27JGvI8Gi01uv4oyKJW5qZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:1e:4c:13:94:11:12:76:b6:3a:a5:0a:1b:49:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Validity
Not Before: May 13 10:00:46 2026 GMT
Not After : May 14 10:00:46 2026 GMT
Subject: CN=01adadebf48199e5c13182ecd05d3dc100b86a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:b8:e0:23:c9:86:5c:af:d7:27:6e:e4:db:bd:
b0:0a:f1:c8:79:62:1b:2f:f9:08:a3:33:d0:ba:33:
93:95:4e:8b:2c:da:22:e7:0e:2f:45:7a:bd:61:e4:
50:76:f1:96:b7:e6:7f:3b:a5:47:0a:a4:c9:4d:08:
56:ce:e2:22:77:5a:89:d7:36:d3:7c:75:99:2a:60:
a9:a3:0f:94:f3:fe:6f:3e:49:58:2c:3a:d9:8c:b2:
30:db:5e:d3:d9:18:34:f2:44:72:f5:cb:98:6d:d6:
4f:eb:77:5d:81:70:68:bf:21:ec:36:f5:78:9d:60:
8a:69:ee:7f:2a:ac:b8:6f:45:b1:79:5b:15:c8:52:
26:3d:e4:da:34:cf:31:11:40:b9:a2:6d:f0:ac:d2:
c0:63:dd:0e:9c:e5:0f:35:35:ce:a9:10:06:a6:6d:
ff:fa:0e:61:6f:19:6f:d5:b9:95:0a:da:41:e1:04:
0d:be:2e:32:fd:f8:7d:f1:de:71:ed:66:e5:8c:ac:
3a:fb:5d:44:22:62:47:04:4a:60:42:6b:ed:b2:89:
f0:04:29:5d:07:d8:82:87:83:aa:b9:66:56:78:12:
bd:4f:da:a2:14:93:b6:65:8f:6e:49:9c:99:62:b4:
e9:a1:51:07:41:1e:69:26:16:8f:da:17:b1:dd:54:
49:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AD:AD:EB:F4:81:99:E5:C1:31:82:EC:D0:5D:3D:C1:00:B8:6A:36
X509v3 Authority Key Identifier:
keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:70:4a:5d:45:16:cb:59:47:6d:52:9b:5c:c3:79:35:d8:bc:
80:df:12:e3:a8:e2:ce:96:36:cf:85:9e:70:2f:a8:df:df:09:
a3:29:65:80:38:34:52:7a:08:35:cb:9d:f9:95:93:b5:e8:88:
ef:0f:98:08:f2:f2:fc:90:3d:d2:de:57:79:9f:05:82:38:2e:
3b:d2:af:6e:d0:a2:93:d5:99:43:7e:24:e8:12:d1:76:e2:b5:
72:77:51:b4:53:9c:31:61:ed:72:a9:3a:39:03:2c:3c:85:fd:
55:1a:81:ad:85:dd:1c:e3:53:42:e0:37:9d:aa:c6:1c:d1:8d:
17:58:a4:57:23:a8:81:4d:a3:24:e5:5d:de:e2:46:89:44:ec:
05:01:f3:98:d5:b9:7f:0f:f1:cf:18:f7:c6:25:0a:a0:be:22:
b2:8a:4c:b9:66:1b:a7:bb:f2:06:41:b8:92:99:49:67:b0:73:
3b:a1:6d:22:e3:ef:37:30:73:44:f3:63:d9:68:d3:f3:9c:5d:
9e:12:d4:5b:da:83:4c:0f:08:b3:ec:c6:2b:62:63:68:a9:f7:
8d:78:62:56:98:6a:e9:41:eb:87:27:41:81:61:14:84:d8:30:
35:8b:9c:36:1e:19:30:6d:ff:ca:89:52:63:3d:54:be:db:18:
22:02:c7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:37:33 2026 by rpki-client