Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
File: erFfzubARYnrLLNQp0fDAG9KF9w.mft (raw, json)
Hash identifier: HTRQn/xKXXKkwmfGblq3V7CW61ydIxMURidsCyZZu0w=
Subject key identifier: FC:77:76:4A:E7:98:0E:36:96:52:91:79:3F:67:58:81:49:69:F4:45
Authority key identifier: 7A:B1:5F:CE:E6:C0:45:89:EB:2C:B3:50:A7:47:C3:00:6F:4A:17:DC
Certificate issuer: /CN=7ab15fcee6c04589eb2cb350a747c3006f4a17dc
Certificate serial: 01A0C21FD414DDF7423A232D9877720A0C6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
Manifest number: 01F8
Signing time: Mon 21 Sep 2026 04:01:00 +0000
Manifest this update: Mon 21 Sep 2026 04:01:00 +0000
Manifest next update: Tue 22 Sep 2026 04:01:00 +0000
Files and hashes: 1: QnFaI3ow-cffiwBxqkoWt4mkYpU.roa (hash: L9K99lMlOY7dnsS5zhvNr+thiKNEY4zaYl8mxhYaaJE=)
2: erFfzubARYnrLLNQp0fDAG9KF9w.crl (hash: M+m5nIAOP0fwrJjRQMFkvamTwcJU4+9h6muZOdLYBH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:1f:d4:14:dd:f7:42:3a:23:2d:98:77:72:0a:0c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ab15fcee6c04589eb2cb350a747c3006f4a17dc
Validity
Not Before: Sep 21 04:01:00 2026 GMT
Not After : Sep 22 04:01:00 2026 GMT
Subject: CN=fc77764ae7980e36965291793f6758814969f445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a4:00:fd:cb:97:be:e4:92:f5:b7:31:22:69:
e2:45:73:ff:a8:eb:08:2c:e4:79:4c:90:93:77:50:
14:02:d0:5e:6e:48:bd:ec:0c:f9:4a:14:de:61:f8:
48:5b:cb:7a:25:81:16:aa:5f:f9:ac:82:a5:8a:12:
92:7e:8d:5f:7f:12:d0:be:ea:a4:8e:c5:85:6a:15:
a5:90:20:b8:cf:8d:e2:19:45:e0:c2:11:75:9d:87:
89:20:5c:79:33:89:68:2a:eb:a8:fb:42:a5:95:31:
e8:fb:6e:f2:c2:f0:18:78:49:77:50:2c:aa:cb:8e:
1a:92:33:f9:d3:92:14:93:92:68:ee:4d:77:01:d6:
1d:f8:64:33:7a:bc:59:82:7e:fd:64:3d:e8:a6:10:
d5:13:62:1b:ef:2f:7a:4e:32:70:70:c5:03:e6:bc:
cf:1b:30:97:10:4a:ed:3f:6a:18:31:70:01:9b:0d:
a9:ab:27:a2:67:72:c0:fd:6a:12:63:0d:f0:0a:58:
27:65:61:a6:83:8e:ac:5d:bf:69:e0:95:eb:0b:71:
17:1b:9a:62:f3:51:66:3f:ff:1a:61:1c:7a:b1:d7:
93:1a:01:bd:55:8c:3d:de:62:b6:6d:bd:5e:0a:b6:
89:41:80:07:58:0b:72:30:e9:5e:41:3e:1f:66:86:
1f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:77:76:4A:E7:98:0E:36:96:52:91:79:3F:67:58:81:49:69:F4:45
X509v3 Authority Key Identifier:
keyid:7A:B1:5F:CE:E6:C0:45:89:EB:2C:B3:50:A7:47:C3:00:6F:4A:17:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:69:4a:b5:f9:9c:3f:f5:52:ca:fa:30:5e:47:e3:64:4a:4d:
c5:26:19:05:33:f2:40:59:f7:11:fa:46:42:29:4f:9c:d9:1c:
81:f7:d2:02:30:0a:24:99:27:b1:f6:1f:fb:22:6d:a3:86:6b:
1e:03:7f:3c:d9:f5:31:0b:09:52:8d:8d:6a:d4:78:64:53:1b:
37:69:a0:c8:2d:37:1e:69:ef:52:4b:be:11:ab:e0:6b:83:8c:
b4:fc:3e:bb:df:1f:2f:fb:b9:dc:00:b3:6c:74:8c:52:36:aa:
eb:64:37:8d:2b:07:86:9f:07:df:b2:aa:70:54:fe:83:86:9e:
6a:ec:e0:1e:ea:83:21:64:4f:ed:de:2e:fe:62:c2:48:fa:42:
61:cb:1c:a2:08:94:d6:95:c0:d3:79:05:02:53:a2:4c:4a:38:
1c:c2:d2:79:d7:25:50:56:20:4c:79:82:2e:5f:3d:c6:57:43:
50:43:61:41:63:31:0f:da:d2:16:15:6f:91:8f:d6:a0:b2:18:
26:3e:ff:d2:a1:85:7e:2f:70:b0:ef:5f:8a:4c:f8:a4:b0:f3:
22:15:17:ae:5f:58:65:6b:da:51:32:1f:9b:6d:66:1b:cc:81:
0c:b7:ef:bf:62:9c:ed:26:9e:21:c8:30:6a:ec:29:f3:14:14:
8c:90:b8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:48:36 2026 by rpki-client