Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
File: ErFnS78NEY8lVPgMr9PvGznYrj8.mft (raw, json)
Hash identifier: +TBcPsHe6mj5MgWYKGI6CDOmjcwDwfmrn+B30B5mPIo=
Subject key identifier: 24:8A:84:1A:C8:D1:11:42:77:08:B7:4E:44:0C:60:6A:7C:5D:94:C1
Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
Certificate issuer: /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Certificate serial: 019EE7B20AAF5D8707B40CB22CEFAEC4EC14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
Manifest number: 09F3
Signing time: Sun 21 Jun 2026 01:01:05 +0000
Manifest this update: Sun 21 Jun 2026 01:01:05 +0000
Manifest next update: Mon 22 Jun 2026 01:01:05 +0000
Files and hashes: 1: 1-GMAx4cV6wCGu8QajPhkplgNOC0.roa (hash: dbmm9AGKkzXlCXgFEXZSu4+kBmd2ptn2wiUgb1Ww9ds=)
2: ErFnS78NEY8lVPgMr9PvGznYrj8.crl (hash: JbamZzmtCHp3B/ImPnm00b5SGiD7s2E7MSeWW6oMqAY=)
3: T_9Nupq1QtdGed_iwoc4AH5rQ3A.roa (hash: u8SWNWsR1YqwiTS51c4B27JGvI8Gi01uv4oyKJW5qZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 21:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e7:b2:0a:af:5d:87:07:b4:0c:b2:2c:ef:ae:c4:ec:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Validity
Not Before: Jun 21 01:01:05 2026 GMT
Not After : Jun 22 01:01:05 2026 GMT
Subject: CN=248a841ac8d111427708b74e440c606a7c5d94c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ec:09:97:39:8b:e0:8e:61:09:72:f8:c0:a0:
e3:be:2c:4a:54:7e:88:63:ea:7f:22:6d:59:48:5e:
bc:39:6d:4f:bb:46:55:9a:1d:ce:70:3c:38:ac:f7:
c2:fe:13:35:ac:ed:70:f3:e8:0b:08:80:27:08:4a:
68:2a:1d:3d:61:e9:cb:b0:93:19:ae:53:a8:65:2a:
52:50:c1:12:88:d1:bb:e8:16:c5:93:ff:0f:86:8c:
c8:8d:f5:08:56:ac:7c:1d:11:3c:26:f9:2e:0c:7b:
f5:49:df:2d:cf:48:ed:ca:3d:a6:ab:0f:a7:bf:21:
6c:9f:1e:a1:65:a8:03:80:00:2c:f5:1b:c4:bc:15:
e6:d0:cb:d3:d7:01:77:36:74:b7:96:9b:7c:33:a3:
3e:15:af:ab:53:f9:ce:c5:cd:0e:ab:9b:1e:a8:d5:
92:5c:28:9d:c9:f2:aa:bf:15:cb:a3:94:0a:8d:1d:
8c:1e:e9:05:d7:ae:a3:68:22:c8:ed:91:4f:1d:2d:
95:e6:56:1d:41:f4:1d:f4:7d:29:89:ae:c3:56:ea:
7d:9f:56:e0:72:e4:18:c7:ed:f9:86:a5:f9:a2:1d:
d1:23:81:33:01:df:cd:c5:d0:4a:bf:cc:ad:7a:0c:
6b:92:e4:90:df:7a:07:b9:49:6a:21:3e:2e:a6:47:
ec:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8A:84:1A:C8:D1:11:42:77:08:B7:4E:44:0C:60:6A:7C:5D:94:C1
X509v3 Authority Key Identifier:
keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e1:94:55:b9:e0:3e:fb:81:61:9b:db:d9:85:ca:0a:d5:57:
70:54:cf:c9:93:63:36:86:f6:1c:2c:57:36:ec:32:1b:3f:56:
68:fa:38:6e:fb:72:fc:40:b1:db:51:c5:1b:4d:aa:d3:55:ae:
d7:25:0c:6b:e1:d1:92:68:f0:35:37:c8:5a:72:15:35:fa:88:
62:64:c5:c0:51:48:5d:55:18:7d:8d:8d:86:0a:19:02:78:30:
7b:74:eb:de:4f:f8:08:0f:94:36:74:ca:27:18:c5:48:1c:35:
b9:b8:f9:a0:a8:8f:c0:8d:5f:c0:b5:21:d0:bb:c2:26:d2:e9:
22:a4:31:c1:fd:77:67:2d:00:9d:49:91:6e:a7:d5:8f:a4:0c:
42:bd:b1:10:de:13:da:65:1b:5b:99:c8:2c:26:29:d2:38:31:
7b:e6:a5:c0:3b:bd:32:09:cb:26:29:6f:0b:25:80:bc:ae:d9:
40:5f:64:b0:e6:b2:82:4b:3d:06:05:ae:cb:de:92:d9:f6:65:
2b:10:94:a3:31:6f:d1:90:6a:f5:1b:ea:bc:92:98:87:cb:22:
5b:c3:92:7a:87:6d:2b:d5:13:d1:bf:de:e7:c5:8e:a8:7f:80:
ca:fe:3d:1c:65:b4:e8:1d:d8:50:e4:ec:35:89:ea:ad:d4:46:
a7:2a:d3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 07:03:31 2026 by rpki-client