Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
File: ErFnS78NEY8lVPgMr9PvGznYrj8.mft (raw, json)
Hash identifier: 91XU8ZxKlALM+t5nOHb5k/yMOJXSuisvLk4ZckcXBVE=
Subject key identifier: 6F:1C:E8:AC:78:EF:8C:4C:21:61:58:11:D3:30:33:61:3D:A8:60:53
Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
Certificate issuer: /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Certificate serial: 019FD15EF47F839BCAC18567F8F1E6ADB8F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
Manifest number: 0A6C
Signing time: Wed 05 Aug 2026 10:01:28 +0000
Manifest this update: Wed 05 Aug 2026 10:01:28 +0000
Manifest next update: Thu 06 Aug 2026 10:01:28 +0000
Files and hashes: 1: 1-GMAx4cV6wCGu8QajPhkplgNOC0.roa (hash: dbmm9AGKkzXlCXgFEXZSu4+kBmd2ptn2wiUgb1Ww9ds=)
2: ErFnS78NEY8lVPgMr9PvGznYrj8.crl (hash: MPU1bCeaz7qDO6VxB1hVV9AD2ISUZ2SjVWqr5/6FsB8=)
3: T_9Nupq1QtdGed_iwoc4AH5rQ3A.roa (hash: u8SWNWsR1YqwiTS51c4B27JGvI8Gi01uv4oyKJW5qZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:5e:f4:7f:83:9b:ca:c1:85:67:f8:f1:e6:ad:b8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Validity
Not Before: Aug 5 10:01:28 2026 GMT
Not After : Aug 6 10:01:28 2026 GMT
Subject: CN=6f1ce8ac78ef8c4c21615811d33033613da86053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f4:c0:c2:77:0a:5c:76:1b:9d:3b:6f:f4:8e:
b6:3c:7b:9a:b5:a7:2f:4a:97:89:51:37:e1:69:76:
89:ee:fc:29:63:a2:c2:77:cc:71:5d:23:7c:0a:e1:
46:35:59:ce:a0:b6:eb:bf:95:7a:16:d7:2c:0d:83:
e8:4d:3e:5e:ac:db:14:6f:0e:b0:a0:76:eb:9c:58:
e9:a8:80:80:e5:ae:f3:13:96:08:c6:89:4e:20:9c:
39:02:99:1f:1c:f5:73:f6:03:6a:32:47:06:34:39:
20:27:b5:df:b9:c5:d5:2b:ee:25:bc:ba:f0:de:cc:
8b:df:34:68:85:68:24:0b:0f:06:44:83:ea:c1:14:
17:92:b7:63:5e:c0:59:ab:f6:53:a6:8b:df:7b:82:
5e:9f:0f:04:df:87:b1:04:a8:4f:eb:61:8a:57:48:
aa:54:3c:4e:a8:39:8f:78:f4:b3:e0:5f:72:43:a7:
ae:4d:1c:1b:60:ef:1c:f7:91:bc:1f:7b:dc:88:c2:
98:e7:27:4c:5a:5e:c9:0e:19:d4:05:43:e5:c6:9f:
b8:02:8d:f9:af:21:8f:78:26:14:f0:18:cd:1d:20:
67:8a:2b:af:6f:fc:7d:3a:70:ca:a6:35:59:ce:b0:
b0:77:34:58:31:f5:f2:d0:da:b2:94:c4:ae:f0:45:
cc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1C:E8:AC:78:EF:8C:4C:21:61:58:11:D3:30:33:61:3D:A8:60:53
X509v3 Authority Key Identifier:
keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:30:2c:f1:48:3a:11:f5:ef:98:40:dc:0a:32:6a:06:d1:00:
c6:f6:c2:35:ff:38:5d:09:fc:f5:79:01:6d:54:c5:55:d1:70:
cd:c6:2a:26:e0:36:39:38:28:13:67:02:8c:46:96:35:91:43:
db:4c:34:3e:d2:86:3b:b4:4a:7a:df:99:3f:7e:62:94:99:1e:
b9:78:14:ec:70:ea:b8:b7:25:a0:f8:9a:d1:78:28:b2:29:11:
70:93:03:fb:e2:1a:d3:f3:09:68:c4:27:11:36:ef:cf:61:82:
77:4f:36:e3:36:6d:4e:44:1c:69:dd:2c:90:24:a4:57:4a:27:
44:a7:06:d5:46:34:3d:af:85:77:b8:4b:b6:86:c1:e8:ce:e8:
f1:8b:ff:5c:12:13:de:69:c1:90:93:d7:ad:52:2b:65:88:1e:
32:78:72:ba:50:12:e9:48:33:b0:4c:6f:68:79:c4:a4:78:43:
c1:22:25:f1:5d:86:7a:21:86:bd:90:8e:8b:88:55:0d:70:21:
5c:9a:cb:d7:f7:5f:b6:e4:0e:54:7d:5e:b6:66:43:a1:24:13:
cb:26:13:0d:1c:d8:8c:ca:11:a3:da:a8:86:6d:e4:9e:e6:0d:
4b:30:b3:6e:43:dc:b2:4f:73:ef:2a:9e:03:df:26:d3:0a:6b:
7e:24:da:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 18:44:32 2026 by rpki-client