Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
File: erFfzubARYnrLLNQp0fDAG9KF9w.mft (raw, json)
Hash identifier: FXZZ6SOf6C3xy9dQCF8ZFdYQP29TsVaukUfb+XY5z1c=
Subject key identifier: 35:93:87:24:A7:E1:22:59:5A:5C:E4:02:2B:9F:2D:E5:30:1E:81:5E
Authority key identifier: 7A:B1:5F:CE:E6:C0:45:89:EB:2C:B3:50:A7:47:C3:00:6F:4A:17:DC
Certificate issuer: /CN=7ab15fcee6c04589eb2cb350a747c3006f4a17dc
Certificate serial: 019F11895BC979711778566A5577E1D49654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
Manifest number: 0118
Signing time: Mon 29 Jun 2026 04:00:42 +0000
Manifest this update: Mon 29 Jun 2026 04:00:42 +0000
Manifest next update: Tue 30 Jun 2026 04:00:42 +0000
Files and hashes: 1: QnFaI3ow-cffiwBxqkoWt4mkYpU.roa (hash: L9K99lMlOY7dnsS5zhvNr+thiKNEY4zaYl8mxhYaaJE=)
2: erFfzubARYnrLLNQp0fDAG9KF9w.crl (hash: Br9mzuu2zyxfgtWyrS4BIKx6vjC0OnDEEYve2NycKWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:89:5b:c9:79:71:17:78:56:6a:55:77:e1:d4:96:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ab15fcee6c04589eb2cb350a747c3006f4a17dc
Validity
Not Before: Jun 29 04:00:42 2026 GMT
Not After : Jun 30 04:00:42 2026 GMT
Subject: CN=35938724a7e122595a5ce4022b9f2de5301e815e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c1:dc:35:6b:7e:e3:e6:fb:2f:90:45:6a:27:
79:c8:ff:ac:b4:6d:10:d2:92:11:aa:5c:ef:09:3d:
3c:27:70:3a:9c:c7:af:2d:ba:21:9c:da:01:63:47:
ea:58:47:a3:2b:f7:d9:c6:70:1b:94:c7:34:24:dd:
67:5d:71:85:46:72:9f:c1:aa:8f:48:0b:2d:69:1f:
cc:7a:01:6b:d6:2a:a7:e5:fd:b9:d8:69:91:5e:f8:
6c:be:94:b7:5e:77:38:e0:da:c4:18:b7:ef:6a:8d:
5f:01:97:ae:67:8a:c2:6b:95:71:10:53:23:c4:b9:
04:ba:11:92:97:cf:82:e9:78:d9:d0:4c:83:04:fe:
cc:1e:01:7b:66:44:cf:ea:7d:1c:6e:3f:37:2f:b4:
8b:2b:27:aa:89:b0:70:f9:98:e1:5f:69:c0:b3:c9:
a0:2e:bb:1b:d6:78:83:6f:72:47:f3:8f:51:ff:51:
51:ff:b4:d0:1c:9f:74:8c:a6:88:84:13:4a:5d:12:
12:2c:45:11:f9:f0:da:46:d5:41:7d:8e:7b:f9:ef:
d3:61:61:2b:ed:ed:54:73:8f:02:42:a5:d8:f4:b8:
be:50:7b:d3:c3:e2:23:d5:59:43:68:38:26:8a:2c:
44:8f:96:6c:28:26:26:55:b4:e8:c4:16:47:a2:3c:
a4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:93:87:24:A7:E1:22:59:5A:5C:E4:02:2B:9F:2D:E5:30:1E:81:5E
X509v3 Authority Key Identifier:
keyid:7A:B1:5F:CE:E6:C0:45:89:EB:2C:B3:50:A7:47:C3:00:6F:4A:17:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:50:7c:59:81:8d:0d:0b:b9:39:a2:27:e7:28:f9:a2:24:6b:
d0:19:7b:22:4f:55:a4:d6:bf:dd:f6:3a:0a:68:db:93:7e:02:
65:93:77:56:26:46:a1:ef:9a:ab:47:a9:3b:fe:e3:fb:8b:67:
44:86:3f:c9:28:28:54:2b:b7:6f:6f:4b:07:55:d1:ff:02:6e:
ed:e4:ab:ed:1e:c0:ea:13:3e:40:0a:3e:ae:f5:8d:9c:0f:da:
ec:6f:a4:de:54:5b:47:e3:de:15:93:8d:11:2c:5a:80:67:3b:
78:93:55:cc:7f:f3:09:29:c2:86:0a:b6:68:f3:62:c4:07:e0:
63:e3:1f:62:fa:4a:39:b1:17:78:86:aa:a1:15:5e:cb:f8:5b:
8c:85:5d:9e:3d:fb:55:ca:51:f0:8e:01:a0:95:47:6b:96:31:
89:fc:a9:7b:a8:02:ae:79:ab:d4:8c:df:26:0c:a2:97:e5:a9:
6e:79:49:d8:e9:3d:bd:e9:d9:69:d3:c1:82:17:1e:d2:81:11:
9b:ec:18:80:4d:7f:9a:b8:fd:5b:1f:59:2f:e9:48:9d:10:2e:
dd:29:e7:a9:d9:1e:de:b3:6d:c9:1d:1e:d7:ea:5c:20:45:4f:
53:97:a4:c7:81:62:fa:d1:ac:a9:12:1f:a2:52:3f:08:6e:ef:
8d:1d:0b:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8RiVvJeXEXeFZqVXfh1JZUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYjE1ZmNlZTZjMDQ1ODllYjJjYjM1MGE3NDdjMzAwNmY0
YTE3ZGMwHhcNMjYwNjI5MDQwMDQyWhcNMjYwNjMwMDQwMDQyWjAzMTEwLwYDVQQD
EygzNTkzODcyNGE3ZTEyMjU5NWE1Y2U0MDIyYjlmMmRlNTMwMWU4MTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcHcNWt+4+b7L5BFaid5yP+stG0Q
0pIRqlzvCT08J3A6nMevLbohnNoBY0fqWEejK/fZxnAblMc0JN1nXXGFRnKfwaqP
SAstaR/MegFr1iqn5f252GmRXvhsvpS3Xnc44NrEGLfvao1fAZeuZ4rCa5VxEFMj
xLkEuhGSl8+C6XjZ0EyDBP7MHgF7ZkTP6n0cbj83L7SLKyeqibBw+ZjhX2nAs8mg
Lrsb1niDb3JH849R/1FR/7TQHJ90jKaIhBNKXRISLEUR+fDaRtVBfY57+e/TYWEr
7e1Uc48CQqXY9Li+UHvTw+Ij1VlDaDgmiixEj5ZsKCYmVbToxBZHojykOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWThySn4SJZWlzkAiufLeUwHoFeMB8GA1UdIwQY
MBaAFHqxX87mwEWJ6yyzUKdHwwBvShfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXJGZnp1YkFSWW5yTExOUXAwZkRBRzlLRjl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hNTkzMmUtNDYwNy00NGFkLWFiZjIt
NWI1Yjg0ODVmNzQ5LzEvZXJGZnp1YkFSWW5yTExOUXAwZkRBRzlLRjl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hNTkzMmUtNDYwNy00NGFkLWFiZjItNWI1Yjg0ODVmNzQ5
LzEvZXJGZnp1YkFSWW5yTExOUXAwZkRBRzlLRjl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPVB8WYGN
DQu5OaIn5yj5oiRr0Bl7Ik9VpNa/3fY6Cmjbk34CZZN3ViZGoe+aq0epO/7j+4tn
RIY/ySgoVCu3b29LB1XR/wJu7eSr7R7A6hM+QAo+rvWNnA/a7G+k3lRbR+PeFZON
ESxagGc7eJNVzH/zCSnChgq2aPNixAfgY+MfYvpKObEXeIaqoRVey/hbjIVdnj37
VcpR8I4BoJVHa5Yxifype6gCrnmr1IzfJgyil+WpbnlJ2Ok9venZadPBghce0oER
m+wYgE1/mrj9Wx9ZL+lInRAu3Snnqdke3rNtyR0e1+pcIEVPU5ekx4Fi+tGsqRIf
olI/CG7vjR0Lpw==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:35:37 2026 by rpki-client