Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
File: erFfzubARYnrLLNQp0fDAG9KF9w.mft (raw, json)
Hash identifier: 9QWvo7U3cCQDvMphWbGNqT0ZDJh5HfMa0X1jzjmv/D8=
Subject key identifier: 66:FA:0A:DC:07:9E:14:66:C2:EC:B7:DB:E0:1C:9A:53:0E:2F:61:A7
Authority key identifier: 7A:B1:5F:CE:E6:C0:45:89:EB:2C:B3:50:A7:47:C3:00:6F:4A:17:DC
Certificate issuer: /CN=7ab15fcee6c04589eb2cb350a747c3006f4a17dc
Certificate serial: 019EBE7FE00C4075BA61280260B17B23FD35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
Manifest number: ED
Signing time: Sat 13 Jun 2026 01:01:51 +0000
Manifest this update: Sat 13 Jun 2026 01:01:51 +0000
Manifest next update: Sun 14 Jun 2026 01:01:51 +0000
Files and hashes: 1: QnFaI3ow-cffiwBxqkoWt4mkYpU.roa (hash: L9K99lMlOY7dnsS5zhvNr+thiKNEY4zaYl8mxhYaaJE=)
2: erFfzubARYnrLLNQp0fDAG9KF9w.crl (hash: kOaV7yv2Nhs1K65BMqlUVHKJBkUub20nd8AbZERlBqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:e0:0c:40:75:ba:61:28:02:60:b1:7b:23:fd:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ab15fcee6c04589eb2cb350a747c3006f4a17dc
Validity
Not Before: Jun 13 01:01:51 2026 GMT
Not After : Jun 14 01:01:51 2026 GMT
Subject: CN=66fa0adc079e1466c2ecb7dbe01c9a530e2f61a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a5:79:52:2f:f8:c2:fc:2a:8c:da:4e:cf:e4:
0b:c4:aa:84:e5:a3:5d:66:79:cf:b1:cb:45:83:33:
c5:d2:17:1f:c4:3b:a2:20:75:13:46:83:56:86:63:
25:73:f0:a2:d9:00:01:5e:7b:01:e4:e1:0e:e8:77:
3e:c3:b8:af:46:40:5a:61:a2:c3:a6:0a:89:2f:98:
f5:15:86:af:52:47:e0:68:11:28:e1:99:8c:9f:a8:
99:99:b6:57:df:33:55:39:dc:9a:51:6a:42:e5:b4:
c2:ef:3d:0d:bb:88:97:30:f3:95:e3:79:6a:a2:28:
0e:3e:a7:d9:1c:de:1d:99:ad:92:1b:7a:bf:7a:35:
35:62:26:94:fe:b3:d5:b6:36:40:36:1d:e0:14:7e:
f2:19:93:6a:42:97:e8:f0:ae:87:32:eb:65:bb:35:
a5:16:5f:ac:5b:2e:35:e5:1d:b9:a2:0e:3f:dc:1c:
25:65:2a:a1:75:6d:60:53:f8:c6:34:ad:34:d7:5d:
a0:57:cc:d0:74:28:2c:29:18:2c:55:8f:c2:4a:26:
59:d3:1a:6d:f2:c0:0d:91:c1:eb:53:f0:63:a2:79:
76:50:e9:1c:e0:d0:4c:bc:da:f3:8c:59:da:e6:51:
bf:25:df:0a:d4:0e:6c:70:bc:fd:bf:3a:bc:87:8f:
c4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FA:0A:DC:07:9E:14:66:C2:EC:B7:DB:E0:1C:9A:53:0E:2F:61:A7
X509v3 Authority Key Identifier:
keyid:7A:B1:5F:CE:E6:C0:45:89:EB:2C:B3:50:A7:47:C3:00:6F:4A:17:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:3e:7d:e0:c8:56:51:5c:86:46:38:a1:b0:4f:a6:23:a8:61:
4f:a7:19:3d:b0:80:d2:af:ab:82:5b:89:0e:d3:40:9b:91:03:
52:6e:c7:2f:65:83:97:f0:be:cd:3b:4e:e4:be:09:b3:89:39:
0e:b6:23:9b:72:74:21:20:ef:20:5e:9d:ad:68:e4:50:18:49:
b4:3e:4b:a2:3a:b0:61:6b:0c:1c:93:2f:14:5b:e3:43:fd:e5:
34:4b:3a:84:69:01:81:90:86:bf:73:6d:84:16:72:0b:70:db:
71:e3:a2:07:ce:b3:b0:95:7c:9e:bf:8d:45:81:25:ed:2e:8b:
ea:52:a0:49:96:c0:ba:ae:a9:e5:82:91:a6:fe:3c:0b:22:0e:
1b:d1:81:94:11:88:6f:30:28:f0:2d:ef:f2:31:dd:0e:c3:00:
d2:e3:f2:06:9a:07:37:b2:5c:76:59:05:63:ef:1f:41:b4:b2:
32:43:8a:d0:89:81:da:d6:44:f6:16:2d:04:e4:22:e7:b1:6b:
fc:d9:68:ec:5c:4d:3f:e0:5c:50:29:bc:fb:fb:1a:b4:ca:d4:
82:22:71:54:54:e3:45:b8:85:22:ce:81:73:57:93:c2:4a:39:
23:e3:11:39:1d:f8:2b:ec:15:67:b8:5a:73:75:f9:35:bd:a3:
a5:cb:78:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+f+AMQHW6YSgCYLF7I/01MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYjE1ZmNlZTZjMDQ1ODllYjJjYjM1MGE3NDdjMzAwNmY0
YTE3ZGMwHhcNMjYwNjEzMDEwMTUxWhcNMjYwNjE0MDEwMTUxWjAzMTEwLwYDVQQD
Eyg2NmZhMGFkYzA3OWUxNDY2YzJlY2I3ZGJlMDFjOWE1MzBlMmY2MWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaV5Ui/4wvwqjNpOz+QLxKqE5aNd
ZnnPsctFgzPF0hcfxDuiIHUTRoNWhmMlc/Ci2QABXnsB5OEO6Hc+w7ivRkBaYaLD
pgqJL5j1FYavUkfgaBEo4ZmMn6iZmbZX3zNVOdyaUWpC5bTC7z0Nu4iXMPOV43lq
oigOPqfZHN4dma2SG3q/ejU1YiaU/rPVtjZANh3gFH7yGZNqQpfo8K6HMutluzWl
Fl+sWy415R25og4/3BwlZSqhdW1gU/jGNK00112gV8zQdCgsKRgsVY/CSiZZ0xpt
8sANkcHrU/Bjonl2UOkc4NBMvNrzjFna5lG/Jd8K1A5scLz9vzq8h4/ErwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGb6CtwHnhRmwuy32+AcmlMOL2GnMB8GA1UdIwQY
MBaAFHqxX87mwEWJ6yyzUKdHwwBvShfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXJGZnp1YkFSWW5yTExOUXAwZkRBRzlLRjl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hNTkzMmUtNDYwNy00NGFkLWFiZjIt
NWI1Yjg0ODVmNzQ5LzEvZXJGZnp1YkFSWW5yTExOUXAwZkRBRzlLRjl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hNTkzMmUtNDYwNy00NGFkLWFiZjItNWI1Yjg0ODVmNzQ5
LzEvZXJGZnp1YkFSWW5yTExOUXAwZkRBRzlLRjl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVT594MhW
UVyGRjihsE+mI6hhT6cZPbCA0q+rgluJDtNAm5EDUm7HL2WDl/C+zTtO5L4Js4k5
DrYjm3J0ISDvIF6drWjkUBhJtD5LojqwYWsMHJMvFFvjQ/3lNEs6hGkBgZCGv3Nt
hBZyC3DbceOiB86zsJV8nr+NRYEl7S6L6lKgSZbAuq6p5YKRpv48CyIOG9GBlBGI
bzAo8C3v8jHdDsMA0uPyBpoHN7JcdlkFY+8fQbSyMkOK0ImB2tZE9hYtBOQi57Fr
/Nlo7FxNP+BcUCm8+/satMrUgiJxVFTjRbiFIs6Bc1eTwko5I+MROR34K+wVZ7ha
c3X5Nb2jpct4BA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:15:46 2026 by rpki-client