Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
File: ErFnS78NEY8lVPgMr9PvGznYrj8.mft (raw, json)
Hash identifier: C+UL0DLC4I6czdOWZvYsz2THYMWrNRpNz+c6/kQlbQU=
Subject key identifier: BC:98:49:FB:BF:CB:28:78:D8:3D:56:A9:12:57:1E:96:AD:B3:F6:DC
Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
Certificate issuer: /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Certificate serial: 01A0C6A0D1EDA2CFDAA2AE58978C4D13887B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
Manifest number: 0AEB
Signing time: Tue 22 Sep 2026 01:00:23 +0000
Manifest this update: Tue 22 Sep 2026 01:00:23 +0000
Manifest next update: Wed 23 Sep 2026 01:00:23 +0000
Files and hashes: 1: 1-GMAx4cV6wCGu8QajPhkplgNOC0.roa (hash: dbmm9AGKkzXlCXgFEXZSu4+kBmd2ptn2wiUgb1Ww9ds=)
2: ErFnS78NEY8lVPgMr9PvGznYrj8.crl (hash: z0iRYGNf8wVhWjQNwrfRf3wUOTgpJZtSFZAuzEY9hXw=)
3: T_9Nupq1QtdGed_iwoc4AH5rQ3A.roa (hash: u8SWNWsR1YqwiTS51c4B27JGvI8Gi01uv4oyKJW5qZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a0:d1:ed:a2:cf:da:a2:ae:58:97:8c:4d:13:88:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Validity
Not Before: Sep 22 01:00:23 2026 GMT
Not After : Sep 23 01:00:23 2026 GMT
Subject: CN=bc9849fbbfcb2878d83d56a912571e96adb3f6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fa:b3:48:20:5f:54:3a:6b:8d:20:65:dd:e9:
20:17:e5:3d:31:9e:7e:49:f3:51:08:85:c5:09:31:
e2:b6:48:8e:8d:38:19:d0:cb:9e:3d:df:c9:87:cd:
0f:db:de:05:46:73:92:65:5b:fb:d0:3e:7d:0b:9f:
d3:2a:25:49:d4:5d:7c:2b:fb:14:26:52:e1:1a:e4:
93:e7:dd:da:1e:0a:36:21:be:35:4c:0f:a0:22:8a:
90:8b:52:77:fe:33:9b:79:ff:97:bf:f6:08:8e:3c:
81:80:46:de:11:0f:0a:f4:d8:c4:62:0f:1d:b4:b5:
e0:98:35:9d:f3:54:b1:eb:c5:d0:36:01:cd:fb:a5:
90:d5:e7:c3:d2:fb:ee:e0:78:7c:42:77:28:dc:d6:
62:69:5f:a1:7e:f4:e4:14:c2:20:21:cb:d2:b2:fe:
fd:0a:a2:1a:3e:ce:d7:5a:88:45:d2:fc:57:55:3f:
59:ab:88:b2:3d:53:79:4e:bf:50:48:6d:fa:a9:f7:
47:71:10:cc:01:12:2a:58:ba:c9:86:39:92:18:d0:
83:e8:6e:7a:a6:7c:5a:dd:87:16:30:66:b7:bc:f5:
0a:c8:68:48:40:09:ae:27:56:47:b7:1c:ea:10:28:
31:1b:ae:39:10:23:44:f4:c8:58:4b:13:1b:fe:d2:
ed:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:98:49:FB:BF:CB:28:78:D8:3D:56:A9:12:57:1E:96:AD:B3:F6:DC
X509v3 Authority Key Identifier:
keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:2e:34:0d:f3:32:d2:1e:d6:da:36:2a:15:b4:6a:60:85:9e:
61:75:b6:50:a8:29:a6:1b:40:0f:79:c2:7d:f4:98:c1:31:ed:
ad:cc:9f:8e:ed:2a:d3:62:cc:00:6e:19:3c:8f:14:74:df:c8:
8e:0b:5e:57:38:39:9a:44:be:d2:cf:35:d1:89:e1:a3:99:94:
9e:43:a9:7f:bf:ec:49:94:5f:ec:0a:1b:84:95:e1:2b:87:9e:
e4:81:00:c9:46:f7:b0:86:29:1e:bf:3c:87:93:5e:c5:7e:d4:
7c:a6:70:22:51:96:eb:ee:f4:f7:84:d9:7b:2d:d4:76:e7:c8:
f8:24:8e:6e:cc:87:af:5f:ae:31:45:01:6e:b6:16:d2:45:7a:
82:39:5d:dc:f6:4d:d7:38:9d:16:52:59:ec:d2:ca:1a:55:cf:
9f:39:be:ae:5d:d6:5a:07:84:18:fb:6c:51:95:b3:db:f1:c5:
f2:c9:e9:da:c7:f8:2f:5a:82:a6:dd:d3:30:fa:ad:74:10:3c:
c6:08:07:a6:db:98:61:9f:e7:aa:a4:ae:e9:46:20:eb:36:d2:
82:06:b8:2c:60:5b:da:08:f6:84:89:3c:ba:af:9d:a1:f5:5f:
41:fa:e9:56:4c:d3:e4:9c:6a:8f:1f:97:d2:85:a4:72:1d:1e:
2e:dc:c3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:17:32 2026 by rpki-client