Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
File: erFfzubARYnrLLNQp0fDAG9KF9w.mft (raw, json)
Hash identifier: rmfPXCBepMS3zGgZlF9iisVkcZCs/O/hI715+KMaOw8=
Subject key identifier: 7F:33:7A:AA:A1:20:36:80:DD:40:AF:F8:5B:6C:7E:3F:68:3D:73:BB
Authority key identifier: 7A:B1:5F:CE:E6:C0:45:89:EB:2C:B3:50:A7:47:C3:00:6F:4A:17:DC
Certificate issuer: /CN=7ab15fcee6c04589eb2cb350a747c3006f4a17dc
Certificate serial: 01A0C5FC3E799A1C34C347EC9A491F8A9B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
Manifest number: 01FA
Signing time: Mon 21 Sep 2026 22:00:37 +0000
Manifest this update: Mon 21 Sep 2026 22:00:37 +0000
Manifest next update: Tue 22 Sep 2026 22:00:37 +0000
Files and hashes: 1: QnFaI3ow-cffiwBxqkoWt4mkYpU.roa (hash: L9K99lMlOY7dnsS5zhvNr+thiKNEY4zaYl8mxhYaaJE=)
2: erFfzubARYnrLLNQp0fDAG9KF9w.crl (hash: vl8rN9N14rXEemSwElNb7T3K2QEgKeHxzTIyUHgRrRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:3e:79:9a:1c:34:c3:47:ec:9a:49:1f:8a:9b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ab15fcee6c04589eb2cb350a747c3006f4a17dc
Validity
Not Before: Sep 21 22:00:37 2026 GMT
Not After : Sep 22 22:00:37 2026 GMT
Subject: CN=7f337aaaa1203680dd40aff85b6c7e3f683d73bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:97:78:c3:82:15:b8:6c:6b:46:28:27:b2:bf:
2f:8d:20:96:6c:53:46:c2:b3:ec:d8:9c:d3:68:e3:
ca:44:ca:5d:6b:df:23:6b:4d:85:5d:6a:a0:7a:fb:
f0:90:b9:9a:5d:44:75:6c:96:96:68:7c:c2:82:0f:
fc:c2:40:29:1e:8b:a2:79:4c:4b:0c:8d:36:86:68:
fe:a3:27:1e:4a:b2:03:69:be:ac:8f:bd:70:de:7e:
e1:6a:07:21:65:81:4b:89:7b:71:74:49:91:92:9d:
a1:c1:c1:5a:9e:07:8d:04:5d:1d:19:d7:78:a9:51:
b2:bb:86:53:a3:2a:71:f2:90:08:d0:8e:98:5d:4f:
23:4d:51:c7:2a:ca:d9:0e:43:0a:f3:8e:0b:31:c2:
26:b7:6e:4a:9c:4d:b2:9e:bb:24:eb:e4:61:4c:ca:
b0:13:aa:ee:a9:e6:80:1c:ab:20:38:0a:03:27:a8:
cc:cb:d9:15:98:50:5b:5f:3e:c7:90:92:f2:d6:d8:
d1:c7:49:b9:0f:20:d7:fc:a7:99:5d:9b:8e:10:29:
4f:cb:bd:10:57:81:aa:49:b1:e3:3e:ea:e6:7c:e3:
dd:94:0b:08:e1:99:6b:03:b8:07:68:37:c3:1f:6a:
f0:fb:f0:2f:82:41:2c:08:0a:a8:bb:c5:39:96:eb:
2a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:33:7A:AA:A1:20:36:80:DD:40:AF:F8:5B:6C:7E:3F:68:3D:73:BB
X509v3 Authority Key Identifier:
keyid:7A:B1:5F:CE:E6:C0:45:89:EB:2C:B3:50:A7:47:C3:00:6F:4A:17:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d7:a1:61:53:97:36:04:65:01:70:9c:ba:92:d2:ea:be:de:
2d:e1:d5:14:ee:ba:61:8f:85:78:df:68:e9:92:db:7c:32:30:
b9:b8:8f:7e:66:4e:1d:5d:72:39:15:bd:1e:c3:ba:1e:63:aa:
50:0d:f8:f9:b7:72:ef:f9:04:3f:fd:41:43:33:eb:55:f7:6e:
7c:3c:ec:54:24:dc:48:55:43:87:0c:49:4c:53:8f:fd:24:bc:
cc:31:51:cf:57:53:8b:c0:dd:93:a5:cf:fd:8d:1f:05:3f:fc:
cf:7b:0d:9c:a7:ba:0e:f1:a2:b8:a3:95:da:a1:99:d3:eb:7c:
5c:b4:a2:39:da:13:31:05:d0:60:87:71:94:94:ae:70:e0:ad:
70:8d:d1:65:42:66:99:1b:55:36:44:50:d7:17:b0:6b:ae:6f:
55:9d:83:63:b3:c4:66:13:c4:a3:22:1c:38:15:7f:08:0f:88:
5b:25:77:28:d2:4c:1a:6b:21:5a:94:78:1f:e5:b7:0f:1b:df:
2e:ea:b0:4d:34:22:0a:96:be:45:c9:d1:0f:51:d5:e1:55:3e:
32:3b:e3:55:84:56:00:50:ec:3e:c1:79:8d:cf:8d:e6:cb:ef:
80:4d:56:fa:12:20:e3:2b:19:1a:ec:54:7e:64:6f:38:19:b1:
79:58:1b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:36:07 2026 by rpki-client