Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
File: ErFnS78NEY8lVPgMr9PvGznYrj8.mft (raw, json)
Hash identifier: ua4NuMzXYH9WS8MfeiB6MW+wj/fizCN2lcuQ7nkRsSY=
Subject key identifier: 88:0A:4F:54:4B:88:1B:5C:27:3D:9D:D2:96:BA:E0:51:CA:2B:E5:EF
Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
Certificate issuer: /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Certificate serial: 019EC300B7E20C890C43468DFA310F42EB20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
Manifest number: 09E0
Signing time: Sat 13 Jun 2026 22:01:04 +0000
Manifest this update: Sat 13 Jun 2026 22:01:04 +0000
Manifest next update: Sun 14 Jun 2026 22:01:04 +0000
Files and hashes: 1: 1-GMAx4cV6wCGu8QajPhkplgNOC0.roa (hash: dbmm9AGKkzXlCXgFEXZSu4+kBmd2ptn2wiUgb1Ww9ds=)
2: ErFnS78NEY8lVPgMr9PvGznYrj8.crl (hash: qYBio6EO0k0x7EmI3691kztxAcZwvfQM4czt+RXZeSI=)
3: T_9Nupq1QtdGed_iwoc4AH5rQ3A.roa (hash: u8SWNWsR1YqwiTS51c4B27JGvI8Gi01uv4oyKJW5qZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:b7:e2:0c:89:0c:43:46:8d:fa:31:0f:42:eb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Validity
Not Before: Jun 13 22:01:04 2026 GMT
Not After : Jun 14 22:01:04 2026 GMT
Subject: CN=880a4f544b881b5c273d9dd296bae051ca2be5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:53:73:8a:2f:ab:6b:f3:7c:ab:02:53:1c:
70:2c:1c:1f:3f:93:d1:1d:d2:52:78:bd:f8:9f:93:
b0:97:b4:0e:83:96:f4:09:18:ed:60:5d:9f:ac:2e:
be:10:1d:e0:d4:74:38:54:b4:8e:33:68:4b:73:bc:
99:26:43:86:9f:27:da:e9:fa:5a:2e:19:61:53:bb:
a8:c3:8c:af:67:c2:12:1d:81:87:47:66:7f:d7:40:
d5:74:2d:7c:cc:3d:ca:21:59:6e:c4:ed:94:33:ed:
fc:ad:5a:55:a5:32:a3:3a:b4:41:21:50:40:15:18:
d9:d7:16:44:86:c6:e2:83:86:e3:f2:4b:66:43:0a:
19:b2:e2:09:f4:98:f7:f9:99:9e:be:9f:df:9e:9d:
51:7e:57:78:dc:e2:45:87:ad:23:c3:6c:5b:4a:62:
56:ac:fc:41:09:63:17:45:05:53:09:73:c0:c2:e3:
ff:4e:12:97:86:cd:aa:5e:ec:f6:8a:35:82:37:6a:
c9:92:02:31:54:af:82:b3:ba:cb:09:38:96:6c:1e:
2b:16:68:29:f2:6b:17:0d:d0:a5:c9:3d:1e:03:1f:
14:4a:26:17:bd:61:61:1f:bc:cf:f7:98:ea:8b:a6:
e0:c3:46:f5:96:c1:c0:3e:45:93:e2:7b:78:54:c8:
2c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0A:4F:54:4B:88:1B:5C:27:3D:9D:D2:96:BA:E0:51:CA:2B:E5:EF
X509v3 Authority Key Identifier:
keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:97:2b:93:cc:df:c2:b2:93:d6:e9:a6:c6:3f:1f:43:ac:a3:
a1:99:56:22:1d:3c:1e:d1:98:d8:03:cb:80:91:51:71:f6:d1:
39:8d:ff:46:3b:f4:86:fc:f8:b4:93:0b:8f:08:22:63:a9:a4:
3d:cc:e7:fb:9e:95:e1:5e:49:be:c0:28:36:d2:10:a0:e4:26:
a3:4e:78:4c:7f:59:11:25:da:db:fc:12:f7:a8:e3:db:ad:36:
d2:68:49:6c:dd:eb:1a:5c:c8:66:b6:d9:2d:00:b8:76:23:71:
ba:bd:a1:58:be:1a:57:7d:1b:91:68:fa:9a:b5:74:e7:06:a7:
21:51:17:c2:9f:ad:24:9c:ee:15:b6:b2:1a:6b:06:c2:61:ee:
a9:05:63:ea:34:65:14:db:88:d6:00:2c:59:22:04:6f:bb:d7:
33:da:12:ba:f9:56:7f:be:7f:41:2d:07:e1:d6:9e:c3:df:0e:
28:39:a3:72:77:94:37:1b:46:f1:31:75:4e:75:c6:a8:f6:1b:
c8:e6:f9:87:0f:a3:25:43:90:e3:c9:c7:91:8a:4e:6d:f7:6f:
7e:1c:3f:62:c4:d7:ff:9a:c3:75:28:4f:f3:d5:97:70:57:b9:
ab:fe:b1:2b:d4:5d:bc:25:33:3e:ab:d0:c5:91:4f:66:1c:d7:
ec:c8:7f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:56:19 2026 by rpki-client