Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
File: erFfzubARYnrLLNQp0fDAG9KF9w.mft (raw, json)
Hash identifier: wd8yYWy/b1SnYRORu8y/uEPoN1den5DjJnUZN63HKZ0=
Subject key identifier: 5D:07:6A:2D:8E:4B:3E:C1:1D:CF:D7:53:84:AC:57:54:2A:EC:FC:97
Authority key identifier: 7A:B1:5F:CE:E6:C0:45:89:EB:2C:B3:50:A7:47:C3:00:6F:4A:17:DC
Certificate issuer: /CN=7ab15fcee6c04589eb2cb350a747c3006f4a17dc
Certificate serial: 019DA48AD18ABF12C2FA3A22E0E9BB14D7B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
Manifest number: 5B
Signing time: Sun 19 Apr 2026 07:00:54 +0000
Manifest this update: Sun 19 Apr 2026 07:00:54 +0000
Manifest next update: Mon 20 Apr 2026 07:00:54 +0000
Files and hashes: 1: QnFaI3ow-cffiwBxqkoWt4mkYpU.roa (hash: L9K99lMlOY7dnsS5zhvNr+thiKNEY4zaYl8mxhYaaJE=)
2: erFfzubARYnrLLNQp0fDAG9KF9w.crl (hash: 8k4LcR+YWNYS6FkhvrTqu/NZjVxf5nWlhG2RjUeVLzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:d1:8a:bf:12:c2:fa:3a:22:e0:e9:bb:14:d7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ab15fcee6c04589eb2cb350a747c3006f4a17dc
Validity
Not Before: Apr 19 07:00:54 2026 GMT
Not After : Apr 20 07:00:54 2026 GMT
Subject: CN=5d076a2d8e4b3ec11dcfd75384ac57542aecfc97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6d:0c:a4:ff:12:97:a4:7d:ef:f2:43:41:ee:
39:e2:63:2c:c7:10:d9:36:f3:68:e9:bb:47:a2:09:
f0:80:03:7b:15:6b:3b:d0:ca:31:9f:39:f3:a3:23:
a6:d9:95:a4:8d:f8:c8:b1:61:4f:0f:50:b4:1b:8c:
72:4b:de:0a:fe:df:48:54:35:47:a4:3d:90:33:5b:
78:a3:d0:a4:3a:7e:ae:40:32:de:3d:1d:d0:ad:ec:
85:e9:2b:25:45:0c:ce:a1:d7:12:10:85:01:d1:e7:
30:13:63:e2:44:ff:f9:8b:78:48:75:f9:36:c3:b0:
5e:88:1e:dc:09:53:d8:5d:ea:4e:2e:95:b3:f3:e0:
30:f5:c3:56:78:f9:df:c7:66:00:9f:da:73:c4:fb:
30:18:f2:36:10:60:87:9e:c2:7a:85:60:fc:7a:c5:
5b:b0:9a:fc:74:c4:ab:aa:89:08:aa:33:b9:07:d6:
55:65:f7:7f:8f:6e:a0:60:50:36:d1:e5:f3:06:90:
55:a6:0c:cf:de:c8:fc:98:f4:fb:7b:80:04:74:8e:
aa:63:86:12:19:26:b2:4e:b0:f0:9e:86:13:4c:c6:
59:bb:65:91:23:22:bf:ff:77:56:76:28:2f:f1:85:
ad:0b:f3:5b:5d:cb:9f:5b:7b:e3:5d:09:0b:c7:a8:
dd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:07:6A:2D:8E:4B:3E:C1:1D:CF:D7:53:84:AC:57:54:2A:EC:FC:97
X509v3 Authority Key Identifier:
keyid:7A:B1:5F:CE:E6:C0:45:89:EB:2C:B3:50:A7:47:C3:00:6F:4A:17:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:91:1d:e5:04:fc:51:a0:56:c9:85:53:51:b7:70:68:b7:97:
eb:c8:5b:5f:e4:f1:6d:eb:a3:2d:97:51:36:d3:5a:a6:ff:61:
aa:0a:9b:bd:e9:8a:12:4d:ae:a2:6e:66:f7:70:23:7c:5b:92:
92:2c:15:86:ec:75:cf:b1:7e:de:07:13:20:11:7a:17:70:0e:
d8:38:84:83:8c:bc:6d:88:b7:35:9b:60:23:b5:cf:b5:86:bf:
00:af:25:fd:f2:e2:1e:43:7b:f5:f2:2f:ea:12:7e:32:e7:22:
14:38:d5:a0:dc:05:af:03:1a:20:33:2c:35:b9:30:f2:ec:57:
eb:ca:77:c0:a7:5c:00:a8:f9:6f:08:31:5d:77:2a:15:9f:33:
ea:58:4d:73:7e:49:7c:c1:d5:8d:14:ee:b9:32:15:fa:b2:b2:
ed:1e:8e:95:67:77:b0:bb:07:ea:52:9f:e5:ab:8f:eb:66:88:
25:3c:47:fc:26:12:14:20:b0:cc:71:46:54:4d:4e:58:94:24:
74:ee:92:16:92:48:58:08:0e:ad:1a:04:0b:30:54:b1:90:6f:
bd:89:32:64:0f:8d:87:01:a5:c0:85:59:dc:a9:77:14:39:0e:
ae:47:de:f5:48:6b:d1:d1:a7:97:94:35:ab:cc:79:57:83:27:
3d:91:20:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:39:24 2026 by rpki-client