Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
File: erFfzubARYnrLLNQp0fDAG9KF9w.mft (raw, json)
Hash identifier: i0WrOeqn3SSzK1IbnP0o1yjjcgqJjUPcucYP7BuEd0M=
Subject key identifier: 9E:89:3F:90:92:04:55:43:44:26:4A:49:BF:D8:89:CA:1A:60:C4:83
Authority key identifier: 7A:B1:5F:CE:E6:C0:45:89:EB:2C:B3:50:A7:47:C3:00:6F:4A:17:DC
Certificate issuer: /CN=7ab15fcee6c04589eb2cb350a747c3006f4a17dc
Certificate serial: 01A11AF5B0CD2683244198AAEDC0CA366CE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
Manifest number: 0226
Signing time: Thu 08 Oct 2026 10:01:11 +0000
Manifest this update: Thu 08 Oct 2026 10:01:11 +0000
Manifest next update: Fri 09 Oct 2026 10:01:11 +0000
Files and hashes: 1: QnFaI3ow-cffiwBxqkoWt4mkYpU.roa (hash: L9K99lMlOY7dnsS5zhvNr+thiKNEY4zaYl8mxhYaaJE=)
2: erFfzubARYnrLLNQp0fDAG9KF9w.crl (hash: 4SUeBglKQdpvYylwFcu5p/+ClzElk12F1tX2G3bQ9iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:f5:b0:cd:26:83:24:41:98:aa:ed:c0:ca:36:6c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ab15fcee6c04589eb2cb350a747c3006f4a17dc
Validity
Not Before: Oct 8 10:01:11 2026 GMT
Not After : Oct 9 10:01:11 2026 GMT
Subject: CN=9e893f909204554344264a49bfd889ca1a60c483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:28:b7:df:fd:54:c7:13:0a:c2:3d:b9:60:c9:
b5:65:42:69:92:bf:b4:ac:1b:f7:22:e0:c7:d3:44:
d6:6f:db:c9:c0:13:1a:d4:a2:92:af:66:4e:de:d3:
44:09:57:e5:7d:4e:9d:3b:d0:e3:96:75:5c:a6:e3:
a9:a2:60:36:80:49:28:62:0c:94:3d:ed:b2:b7:8c:
ba:17:35:11:8a:f4:60:88:c0:6b:b3:a0:cc:41:64:
ae:2d:3b:d3:d8:02:4b:47:9f:bd:60:10:c3:c9:c2:
c6:6d:04:1a:d2:49:24:48:94:38:7c:93:22:18:2f:
3d:ca:3f:d1:9e:74:c5:d3:f2:f7:11:27:f4:f6:95:
92:48:e9:f9:69:1d:fe:f0:8a:8a:02:97:00:c5:62:
c2:3c:db:46:16:3e:0e:b8:ea:db:86:57:4e:95:f0:
a7:f6:26:67:cf:67:ed:61:5b:ef:7c:5d:12:96:42:
5b:8f:cc:20:bb:e9:f5:92:1d:cd:f3:22:ac:10:4c:
ab:55:40:3c:44:89:61:57:1a:b5:b1:f3:5e:6b:7d:
d4:44:76:72:97:3d:7e:a1:c6:72:b3:8b:41:d7:47:
d9:60:c1:09:aa:6e:50:c9:ee:3f:95:0b:21:7a:f5:
78:ca:e4:61:56:6c:fe:dc:1a:2d:e9:12:33:4d:b9:
4d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:89:3F:90:92:04:55:43:44:26:4A:49:BF:D8:89:CA:1A:60:C4:83
X509v3 Authority Key Identifier:
keyid:7A:B1:5F:CE:E6:C0:45:89:EB:2C:B3:50:A7:47:C3:00:6F:4A:17:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:32:81:51:6d:f1:1a:a4:30:39:63:5b:25:a8:82:af:28:e7:
ad:91:de:63:e2:a5:2e:9d:00:5a:43:30:f6:51:a2:1f:a9:d8:
ed:22:e4:c2:46:25:c2:b5:6a:a1:ab:97:4d:a7:95:9a:fc:2b:
bb:be:77:a6:0b:c8:16:80:f8:91:75:42:6c:c3:41:52:ad:81:
a1:0d:4c:ed:0c:8c:e7:0b:c9:10:2e:ac:ec:eb:1c:57:11:74:
d6:84:08:ee:f7:13:d5:0c:2d:35:e6:09:24:5e:b1:6b:d6:19:
42:b4:33:90:f5:3f:db:b6:73:22:77:4f:80:23:5b:09:40:87:
09:e2:27:f0:31:c7:1a:51:4f:bf:e3:87:5e:83:92:f5:ff:fa:
03:ce:02:07:37:8f:82:fd:9a:fa:0f:2c:11:4c:9d:57:fa:47:
67:0c:34:39:2a:9d:28:ce:5e:04:2a:ac:5a:35:da:26:b7:d2:
0c:7a:67:f5:19:1c:c5:f8:58:b4:68:21:fe:26:56:79:01:e5:
8a:3b:07:a2:71:ba:5a:bb:f7:83:32:bd:74:53:a1:62:44:be:
a5:6f:db:2a:ab:ab:31:62:41:da:f7:54:85:d5:db:04:3e:d0:
4a:27:96:16:ad:68:e3:c6:10:f6:a9:fe:60:4a:f9:2a:1e:59:
e5:fa:09:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEa9bDNJoMkQZiq7cDKNmznMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYjE1ZmNlZTZjMDQ1ODllYjJjYjM1MGE3NDdjMzAwNmY0
YTE3ZGMwHhcNMjYxMDA4MTAwMTExWhcNMjYxMDA5MTAwMTExWjAzMTEwLwYDVQQD
Eyg5ZTg5M2Y5MDkyMDQ1NTQzNDQyNjRhNDliZmQ4ODljYTFhNjBjNDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSi33/1UxxMKwj25YMm1ZUJpkr+0
rBv3IuDH00TWb9vJwBMa1KKSr2ZO3tNECVflfU6dO9DjlnVcpuOpomA2gEkoYgyU
Pe2yt4y6FzURivRgiMBrs6DMQWSuLTvT2AJLR5+9YBDDycLGbQQa0kkkSJQ4fJMi
GC89yj/RnnTF0/L3ESf09pWSSOn5aR3+8IqKApcAxWLCPNtGFj4OuOrbhldOlfCn
9iZnz2ftYVvvfF0SlkJbj8wgu+n1kh3N8yKsEEyrVUA8RIlhVxq1sfNea33URHZy
lz1+ocZys4tB10fZYMEJqm5Qye4/lQshevV4yuRhVmz+3Bot6RIzTblNOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6JP5CSBFVDRCZKSb/YicoaYMSDMB8GA1UdIwQY
MBaAFHqxX87mwEWJ6yyzUKdHwwBvShfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXJGZnp1YkFSWW5yTExOUXAwZkRBRzlLRjl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hNTkzMmUtNDYwNy00NGFkLWFiZjIt
NWI1Yjg0ODVmNzQ5LzEvZXJGZnp1YkFSWW5yTExOUXAwZkRBRzlLRjl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hNTkzMmUtNDYwNy00NGFkLWFiZjItNWI1Yjg0ODVmNzQ5
LzEvZXJGZnp1YkFSWW5yTExOUXAwZkRBRzlLRjl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVzKBUW3x
GqQwOWNbJaiCryjnrZHeY+KlLp0AWkMw9lGiH6nY7SLkwkYlwrVqoauXTaeVmvwr
u753pgvIFoD4kXVCbMNBUq2BoQ1M7QyM5wvJEC6s7OscVxF01oQI7vcT1QwtNeYJ
JF6xa9YZQrQzkPU/27ZzIndPgCNbCUCHCeIn8DHHGlFPv+OHXoOS9f/6A84CBzeP
gv2a+g8sEUydV/pHZww0OSqdKM5eBCqsWjXaJrfSDHpn9RkcxfhYtGgh/iZWeQHl
ijsHonG6Wrv3gzK9dFOhYkS+pW/bKqurMWJB2vdUhdXbBD7QSieWFq1o48YQ9qn+
YEr5Kh5Z5foJ1Q==
-----END CERTIFICATE-----
Generated at Thu Oct 8 20:55:31 2026 by rpki-client