Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
File: erFfzubARYnrLLNQp0fDAG9KF9w.mft (raw, json)
Hash identifier: e8h6n1JBuxqQ3kA/8EVoyPusKSIarXy5FlO3XWdzMl4=
Subject key identifier: E2:1B:0D:8B:80:DC:89:C1:B5:4B:87:64:9F:D1:1B:9B:BD:26:F5:A7
Authority key identifier: 7A:B1:5F:CE:E6:C0:45:89:EB:2C:B3:50:A7:47:C3:00:6F:4A:17:DC
Certificate issuer: /CN=7ab15fcee6c04589eb2cb350a747c3006f4a17dc
Certificate serial: 019D2327E188F2E1542800D53525E89205AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
Manifest number: 18
Signing time: Wed 25 Mar 2026 04:01:49 +0000
Manifest this update: Wed 25 Mar 2026 04:01:49 +0000
Manifest next update: Thu 26 Mar 2026 04:01:49 +0000
Files and hashes: 1: QnFaI3ow-cffiwBxqkoWt4mkYpU.roa (hash: L9K99lMlOY7dnsS5zhvNr+thiKNEY4zaYl8mxhYaaJE=)
2: erFfzubARYnrLLNQp0fDAG9KF9w.crl (hash: zDhMSz17+sfmDrNDnSU0C8Kf0Q8ZWOyOYoVWWWmGZes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:23:27:e1:88:f2:e1:54:28:00:d5:35:25:e8:92:05:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ab15fcee6c04589eb2cb350a747c3006f4a17dc
Validity
Not Before: Mar 25 04:01:49 2026 GMT
Not After : Mar 26 04:01:49 2026 GMT
Subject: CN=e21b0d8b80dc89c1b54b87649fd11b9bbd26f5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3e:f1:b6:71:e8:f9:27:3e:58:66:80:d7:cf:
f5:09:b3:e6:98:a1:be:5c:7d:c9:9f:b9:e3:4a:47:
fa:d8:be:b1:5d:fc:88:a0:b2:75:3e:68:12:61:5c:
f1:fb:61:b2:57:0d:fa:64:90:a5:05:8c:89:f1:4f:
1d:63:d7:3e:99:09:f1:65:72:d0:e3:5c:06:aa:bd:
98:83:0f:0e:d4:5c:1f:b7:5e:ea:49:92:01:21:2f:
46:0c:d2:87:ba:13:10:db:26:5b:c6:e6:25:f5:2f:
6b:d8:e8:98:d1:98:b5:31:f8:92:a0:3b:4c:22:a0:
dd:40:6f:c9:b3:7d:ba:f2:83:5f:9a:93:f8:d0:10:
4d:10:ef:cc:eb:15:f2:6e:68:5a:30:0b:3e:3a:41:
25:e6:d2:1e:30:85:9d:88:e9:8f:e3:71:35:ed:df:
1f:89:d6:72:4e:5a:8c:1e:f0:cc:8c:58:0c:cb:6a:
7a:e0:86:35:c8:2e:df:40:2f:17:ad:33:3e:9b:b3:
aa:6c:d8:20:dc:2a:02:e5:b7:a1:5e:b2:5b:da:de:
e3:e9:60:4e:c2:35:99:f2:2a:3a:35:57:58:5b:7a:
53:5b:06:05:fe:f4:6e:b5:33:e5:8d:2b:36:c4:4d:
95:95:7b:8b:1e:a4:cf:bd:02:de:2a:e5:6c:ea:b5:
c5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1B:0D:8B:80:DC:89:C1:B5:4B:87:64:9F:D1:1B:9B:BD:26:F5:A7
X509v3 Authority Key Identifier:
keyid:7A:B1:5F:CE:E6:C0:45:89:EB:2C:B3:50:A7:47:C3:00:6F:4A:17:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:83:ac:e5:2e:68:82:88:33:91:27:5e:7a:96:2a:10:cb:52:
ff:96:d9:0e:2f:97:35:92:76:da:68:ae:05:3b:e8:7d:b3:63:
a9:93:5b:4a:e2:b5:df:84:f4:aa:71:2d:65:b7:e9:ae:1e:c9:
8e:8b:eb:d7:b3:05:e4:ac:50:fc:50:7d:d5:dc:62:62:65:f0:
36:7b:f4:07:cf:3b:92:a5:6d:95:80:5e:30:1c:f1:ef:06:c3:
ba:39:a6:53:0e:ee:93:01:2b:47:51:6d:e4:7a:65:4d:89:81:
fe:ad:79:b2:1a:21:21:10:b0:8f:c7:9f:bc:47:99:86:4f:fb:
2e:80:77:35:bd:b7:1e:8b:c2:3e:42:50:94:11:4c:5e:b6:83:
c5:58:df:eb:9e:7e:87:9d:56:a8:28:53:ad:88:c7:ea:c4:af:
5c:7d:34:e5:f2:73:71:66:ab:24:1d:68:b7:c9:24:5c:43:54:
2a:8c:67:e7:a2:6d:39:cd:02:d2:4e:6d:11:d4:df:68:db:3a:
7c:a3:bc:05:0b:d3:28:61:23:dc:9d:de:fe:a9:ec:ca:f2:11:
31:1e:49:2c:3f:58:88:19:ba:f9:47:76:4b:6e:2a:aa:2e:57:
fb:e5:93:ea:3d:60:ed:ef:f7:84:f9:0f:e7:48:04:57:59:25:
3f:50:d9:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0jJ+GI8uFUKADVNSXokgWvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYjE1ZmNlZTZjMDQ1ODllYjJjYjM1MGE3NDdjMzAwNmY0
YTE3ZGMwHhcNMjYwMzI1MDQwMTQ5WhcNMjYwMzI2MDQwMTQ5WjAzMTEwLwYDVQQD
EyhlMjFiMGQ4YjgwZGM4OWMxYjU0Yjg3NjQ5ZmQxMWI5YmJkMjZmNWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT7xtnHo+Sc+WGaA18/1CbPmmKG+
XH3Jn7njSkf62L6xXfyIoLJ1PmgSYVzx+2GyVw36ZJClBYyJ8U8dY9c+mQnxZXLQ
41wGqr2Ygw8O1Fwft17qSZIBIS9GDNKHuhMQ2yZbxuYl9S9r2OiY0Zi1MfiSoDtM
IqDdQG/Js3268oNfmpP40BBNEO/M6xXybmhaMAs+OkEl5tIeMIWdiOmP43E17d8f
idZyTlqMHvDMjFgMy2p64IY1yC7fQC8XrTM+m7OqbNgg3CoC5behXrJb2t7j6WBO
wjWZ8io6NVdYW3pTWwYF/vRutTPljSs2xE2VlXuLHqTPvQLeKuVs6rXF9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIbDYuA3InBtUuHZJ/RG5u9JvWnMB8GA1UdIwQY
MBaAFHqxX87mwEWJ6yyzUKdHwwBvShfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXJGZnp1YkFSWW5yTExOUXAwZkRBRzlLRjl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hNTkzMmUtNDYwNy00NGFkLWFiZjIt
NWI1Yjg0ODVmNzQ5LzEvZXJGZnp1YkFSWW5yTExOUXAwZkRBRzlLRjl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hNTkzMmUtNDYwNy00NGFkLWFiZjItNWI1Yjg0ODVmNzQ5
LzEvZXJGZnp1YkFSWW5yTExOUXAwZkRBRzlLRjl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATIOs5S5o
gogzkSdeepYqEMtS/5bZDi+XNZJ22miuBTvofbNjqZNbSuK134T0qnEtZbfprh7J
jovr17MF5KxQ/FB91dxiYmXwNnv0B887kqVtlYBeMBzx7wbDujmmUw7ukwErR1Ft
5HplTYmB/q15shohIRCwj8efvEeZhk/7LoB3Nb23HovCPkJQlBFMXraDxVjf655+
h51WqChTrYjH6sSvXH005fJzcWarJB1ot8kkXENUKoxn56JtOc0C0k5tEdTfaNs6
fKO8BQvTKGEj3J3e/qnsyvIRMR5JLD9YiBm6+Ud2S24qqi5X++WT6j1g7e/3hPkP
50gEV1klP1DZig==
-----END CERTIFICATE-----
Generated at Wed Mar 25 09:38:50 2026 by rpki-client