Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
File: ErFnS78NEY8lVPgMr9PvGznYrj8.mft (raw, json)
Hash identifier: cQPfdN33mTPK2srmReS78+aJsSGo+/NWo+HBypjNflg=
Subject key identifier: 09:28:B7:6F:85:81:D5:74:8F:D4:2A:E3:77:CF:31:6A:C7:1D:6D:51
Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
Certificate issuer: /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Certificate serial: 019D390A5602AD0BACC58A9D08DDE3229816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
Manifest number: 0914
Signing time: Sun 29 Mar 2026 10:01:11 +0000
Manifest this update: Sun 29 Mar 2026 10:01:11 +0000
Manifest next update: Mon 30 Mar 2026 10:01:11 +0000
Files and hashes: 1: 1-GMAx4cV6wCGu8QajPhkplgNOC0.roa (hash: dbmm9AGKkzXlCXgFEXZSu4+kBmd2ptn2wiUgb1Ww9ds=)
2: ErFnS78NEY8lVPgMr9PvGznYrj8.crl (hash: Tg5TDF1EvnURbFExu3UPLwVgqLWaIiqDdykj2hBsP2w=)
3: T_9Nupq1QtdGed_iwoc4AH5rQ3A.roa (hash: u8SWNWsR1YqwiTS51c4B27JGvI8Gi01uv4oyKJW5qZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:56:02:ad:0b:ac:c5:8a:9d:08:dd:e3:22:98:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Validity
Not Before: Mar 29 10:01:11 2026 GMT
Not After : Mar 30 10:01:11 2026 GMT
Subject: CN=0928b76f8581d5748fd42ae377cf316ac71d6d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d6:c0:da:91:c4:04:31:d0:d7:e9:8e:63:5a:
7d:02:f6:c1:c0:4a:4a:d5:96:8b:6e:3d:4b:30:a2:
7b:6e:9f:df:0c:d0:14:a5:e0:9b:1f:40:a0:e3:1b:
44:54:c0:37:73:8f:f5:2b:1b:2c:8f:87:fb:d1:04:
0e:0e:dc:87:5c:a0:51:b5:db:8c:e4:03:e0:1c:ba:
2b:23:2e:e6:12:5d:ab:3d:f7:ca:ae:10:74:ee:35:
cb:bc:92:69:ba:5c:85:e2:dd:de:fb:4a:a4:c4:7e:
43:89:ba:5b:08:c1:da:11:af:ec:15:b3:5c:a7:a5:
82:16:2e:c4:74:f2:df:30:6b:6a:ab:2e:b4:87:2c:
4a:76:86:32:4c:e1:17:b7:b6:51:f7:34:09:c4:53:
4a:8b:0f:fa:e5:40:53:20:30:fa:67:98:e1:ab:88:
cb:aa:83:11:b6:90:fc:44:6a:7f:96:7e:fa:61:f8:
31:b5:83:dd:29:eb:e5:dd:cc:0a:0e:09:9a:82:5d:
52:c8:98:20:22:aa:f1:7c:e9:e8:71:39:f9:53:b8:
37:ca:e4:ac:2b:63:92:1e:56:ab:9a:b1:26:91:c5:
63:d0:26:4c:1d:54:0f:b6:c5:98:21:4d:4a:1d:fd:
74:12:23:f8:34:11:93:f7:2e:07:dc:ce:f9:cd:6f:
46:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:28:B7:6F:85:81:D5:74:8F:D4:2A:E3:77:CF:31:6A:C7:1D:6D:51
X509v3 Authority Key Identifier:
keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:43:d9:a4:b8:1e:49:7b:60:d9:52:37:e1:94:0f:ef:d4:40:
b9:14:48:f7:a0:6d:ec:ce:2f:08:bb:77:c1:3d:a5:03:65:1e:
6c:15:32:c8:f1:3a:4e:ba:fa:02:49:30:4f:f8:a3:a7:20:06:
fa:5f:6e:7f:56:cd:84:9e:3b:1e:03:20:16:e1:2d:e5:b8:e0:
92:7f:c6:09:3c:e1:ca:99:22:05:64:45:79:22:80:4f:0b:10:
da:c7:0d:1d:a6:4c:50:e8:99:1a:b7:c7:4c:42:7d:c0:21:8f:
ba:f8:0c:bf:d3:cb:e9:2f:62:83:3f:96:fc:18:3f:a9:31:52:
cb:17:d6:7f:c9:93:be:ee:11:19:62:0f:f1:bd:27:70:df:f9:
11:6c:88:cc:db:08:ca:b7:ac:17:f2:99:db:e3:e9:0f:33:55:
cf:d2:ba:ee:db:83:cf:60:5d:f9:30:72:7d:2e:2c:7e:ae:32:
17:ef:37:46:d1:89:ab:c3:47:20:55:69:11:59:7d:fd:b4:db:
ea:ac:f6:70:10:d3:b1:8e:38:57:74:18:41:4a:71:4a:85:3e:
fa:15:3c:4d:f4:97:a6:ed:b5:f6:ad:ca:b4:a2:67:90:fc:20:
d6:59:73:1d:f4:0d:18:79:4b:31:47:9b:f8:af:60:f2:05:1e:
89:b3:0b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:50 2026 by rpki-client