Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
File: erFfzubARYnrLLNQp0fDAG9KF9w.mft (raw, json)
Hash identifier: H9P4EYxsPyut5HLWZkvPKHvbjq9ZxaTU40AJvGIluOE=
Subject key identifier: 9B:FA:08:9E:2C:CE:8D:EA:86:56:C7:ED:1A:3C:2A:BD:04:FE:4D:5A
Authority key identifier: 7A:B1:5F:CE:E6:C0:45:89:EB:2C:B3:50:A7:47:C3:00:6F:4A:17:DC
Certificate issuer: /CN=7ab15fcee6c04589eb2cb350a747c3006f4a17dc
Certificate serial: 019E29CC099012F2DC315E2CB097336F7973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
Manifest number: A0
Signing time: Fri 15 May 2026 04:01:37 +0000
Manifest this update: Fri 15 May 2026 04:01:37 +0000
Manifest next update: Sat 16 May 2026 04:01:37 +0000
Files and hashes: 1: QnFaI3ow-cffiwBxqkoWt4mkYpU.roa (hash: L9K99lMlOY7dnsS5zhvNr+thiKNEY4zaYl8mxhYaaJE=)
2: erFfzubARYnrLLNQp0fDAG9KF9w.crl (hash: 7Tm6grt7UVq/Sy2ubv9J0MaVBovFZgEp1nQQIYySAsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:cc:09:90:12:f2:dc:31:5e:2c:b0:97:33:6f:79:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ab15fcee6c04589eb2cb350a747c3006f4a17dc
Validity
Not Before: May 15 04:01:37 2026 GMT
Not After : May 16 04:01:37 2026 GMT
Subject: CN=9bfa089e2cce8dea8656c7ed1a3c2abd04fe4d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c2:29:c1:eb:a0:f8:19:d4:58:2d:34:8b:db:
36:9a:e5:fa:a3:39:e3:f5:e7:fc:6b:d2:a0:f2:b8:
de:bd:e2:6f:b3:a9:de:25:75:73:3d:ba:af:92:9f:
7d:c3:37:c6:2d:1e:d3:f1:ed:60:1c:d5:64:5c:ed:
0b:6c:8e:1e:d4:a2:3c:93:02:e1:c8:69:38:6c:2a:
d9:a7:64:ea:9f:77:2a:8d:ef:6e:87:2b:b9:e1:bc:
91:f1:c1:39:26:db:d9:d3:64:5c:2a:73:46:17:10:
d1:d5:eb:21:bb:35:d7:29:3a:54:33:c2:f0:74:a3:
b3:c6:08:fa:4b:d8:76:85:66:69:10:3d:68:d6:8a:
a1:40:75:f1:1d:7d:a9:2f:38:c8:79:5d:bf:98:b7:
2b:fc:9f:68:fc:c8:fa:b6:71:a7:64:7c:73:f8:39:
8f:b3:94:84:79:60:55:bb:ed:8b:c0:a3:c4:05:73:
d8:c4:21:bd:66:2a:ed:e0:7d:e4:8b:e7:5f:58:f5:
da:33:c2:50:1a:15:cc:3c:44:ce:bf:37:fb:8b:cb:
22:2a:7e:23:a8:3e:2f:bc:fa:e4:f9:82:e5:4d:5e:
63:6b:d7:3e:0b:fd:a6:59:95:f1:7f:4f:6c:ed:4f:
2f:c3:91:2b:d2:fa:c4:c4:6c:ce:41:f3:64:27:48:
b5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FA:08:9E:2C:CE:8D:EA:86:56:C7:ED:1A:3C:2A:BD:04:FE:4D:5A
X509v3 Authority Key Identifier:
keyid:7A:B1:5F:CE:E6:C0:45:89:EB:2C:B3:50:A7:47:C3:00:6F:4A:17:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6f:67:5a:7e:87:ea:20:21:5c:01:c8:03:b6:7a:c1:af:92:
a5:67:36:a5:19:f3:1a:27:b2:3d:ed:a6:97:a4:2e:d8:fe:45:
07:ce:b7:18:40:dc:85:da:84:60:bd:ba:8c:ea:e7:1d:29:9b:
c9:22:49:44:27:39:5c:80:e9:7d:cf:1b:70:16:c6:27:ee:12:
0e:cf:cc:02:34:56:0a:24:d6:15:21:24:48:eb:4d:3b:6b:e8:
29:5e:fd:39:13:f6:3a:53:50:39:6a:a9:5e:ec:f8:d1:ef:88:
41:89:70:9e:d8:70:b6:5c:0f:55:15:9b:26:2e:e4:1b:ad:7a:
91:a9:d8:5d:2c:57:6f:9c:ab:9c:5f:56:08:4b:4c:6d:44:7f:
a2:0d:5c:70:20:a4:53:8a:1e:74:b4:f3:86:b8:8a:81:19:40:
63:04:ee:c4:10:d3:8d:d0:c0:b4:1d:79:e6:01:43:23:96:a3:
be:52:08:6a:98:44:15:99:55:2d:1f:a2:c6:43:93:c4:5d:25:
db:f2:a6:52:94:38:24:e2:1d:32:e6:c0:62:fa:3d:46:a6:60:
72:53:7f:10:b2:83:e7:32:75:10:ac:02:53:c9:3f:c3:18:db:
d8:07:31:1f:db:e3:5e:9b:b0:ab:d5:7e:cf:e3:fc:ed:8d:18:
7e:b1:b9:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4pzAmQEvLcMV4ssJczb3lzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYjE1ZmNlZTZjMDQ1ODllYjJjYjM1MGE3NDdjMzAwNmY0
YTE3ZGMwHhcNMjYwNTE1MDQwMTM3WhcNMjYwNTE2MDQwMTM3WjAzMTEwLwYDVQQD
Eyg5YmZhMDg5ZTJjY2U4ZGVhODY1NmM3ZWQxYTNjMmFiZDA0ZmU0ZDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sIpweug+BnUWC00i9s2muX6oznj
9ef8a9Kg8rjeveJvs6neJXVzPbqvkp99wzfGLR7T8e1gHNVkXO0LbI4e1KI8kwLh
yGk4bCrZp2Tqn3cqje9uhyu54byR8cE5JtvZ02RcKnNGFxDR1eshuzXXKTpUM8Lw
dKOzxgj6S9h2hWZpED1o1oqhQHXxHX2pLzjIeV2/mLcr/J9o/Mj6tnGnZHxz+DmP
s5SEeWBVu+2LwKPEBXPYxCG9Zirt4H3ki+dfWPXaM8JQGhXMPETOvzf7i8siKn4j
qD4vvPrk+YLlTV5ja9c+C/2mWZXxf09s7U8vw5Er0vrExGzOQfNkJ0i1XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJv6CJ4szo3qhlbH7Ro8Kr0E/k1aMB8GA1UdIwQY
MBaAFHqxX87mwEWJ6yyzUKdHwwBvShfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXJGZnp1YkFSWW5yTExOUXAwZkRBRzlLRjl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hNTkzMmUtNDYwNy00NGFkLWFiZjIt
NWI1Yjg0ODVmNzQ5LzEvZXJGZnp1YkFSWW5yTExOUXAwZkRBRzlLRjl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hNTkzMmUtNDYwNy00NGFkLWFiZjItNWI1Yjg0ODVmNzQ5
LzEvZXJGZnp1YkFSWW5yTExOUXAwZkRBRzlLRjl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc29nWn6H
6iAhXAHIA7Z6wa+SpWc2pRnzGieyPe2ml6Qu2P5FB863GEDchdqEYL26jOrnHSmb
ySJJRCc5XIDpfc8bcBbGJ+4SDs/MAjRWCiTWFSEkSOtNO2voKV79ORP2OlNQOWqp
Xuz40e+IQYlwnthwtlwPVRWbJi7kG616kanYXSxXb5yrnF9WCEtMbUR/og1ccCCk
U4oedLTzhriKgRlAYwTuxBDTjdDAtB155gFDI5ajvlIIaphEFZlVLR+ixkOTxF0l
2/KmUpQ4JOIdMubAYvo9RqZgclN/ELKD5zJ1EKwCU8k/wxjb2AcxH9vjXpuwq9V+
z+P87Y0YfrG5Qw==
-----END CERTIFICATE-----
Generated at Fri May 15 07:01:43 2026 by rpki-client