Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
File: ErFnS78NEY8lVPgMr9PvGznYrj8.mft (raw, json)
Hash identifier: Agj3Pw6K+bVgwvAdOiLkWQRXxe7h8F5xNm3O7fVsXAc=
Subject key identifier: BF:D7:27:4D:8F:D6:57:CF:BD:4C:27:46:99:8F:7A:45:5E:A1:84:68
Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
Certificate issuer: /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Certificate serial: 01A13C6EB5BCA526857C6766540D9E93B6F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
Manifest number: 0B28
Signing time: Wed 14 Oct 2026 22:00:50 +0000
Manifest this update: Wed 14 Oct 2026 22:00:50 +0000
Manifest next update: Thu 15 Oct 2026 22:00:50 +0000
Files and hashes: 1: 1-GMAx4cV6wCGu8QajPhkplgNOC0.roa (hash: dbmm9AGKkzXlCXgFEXZSu4+kBmd2ptn2wiUgb1Ww9ds=)
2: ErFnS78NEY8lVPgMr9PvGznYrj8.crl (hash: DB4OOo35AkwRXjc1HmCugB6dYUAI9FgATkF9Gn0xIZI=)
3: T_9Nupq1QtdGed_iwoc4AH5rQ3A.roa (hash: u8SWNWsR1YqwiTS51c4B27JGvI8Gi01uv4oyKJW5qZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:b5:bc:a5:26:85:7c:67:66:54:0d:9e:93:b6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Validity
Not Before: Oct 14 22:00:50 2026 GMT
Not After : Oct 15 22:00:50 2026 GMT
Subject: CN=bfd7274d8fd657cfbd4c2746998f7a455ea18468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b5:d2:e0:86:61:b8:0f:39:31:ac:e1:cd:4b:
56:cd:8b:c9:e5:61:73:ad:23:cf:82:dc:cc:92:d9:
8c:64:a3:ae:e3:eb:7f:65:a7:98:6a:e1:65:e9:1e:
56:9c:a7:a9:f7:b0:79:56:5d:42:b3:8a:58:ca:d4:
44:6c:96:1f:8c:8c:27:4f:ee:e9:e1:b6:42:26:8e:
d8:6f:e4:31:cd:d8:d6:5a:8c:04:57:af:5f:67:49:
16:da:35:3b:46:70:92:17:bb:0a:d0:d7:81:aa:bd:
eb:9f:74:19:65:07:db:06:3b:80:f5:aa:d0:69:d2:
42:f1:0a:05:e0:38:f7:9d:d4:95:38:16:9c:ad:67:
e3:22:81:b2:c4:1f:44:f6:c9:d0:86:03:11:32:8e:
bc:1c:4e:14:ca:4b:d6:dd:a4:b3:ce:c6:56:84:82:
fa:2e:e6:b4:b5:9e:96:7a:92:27:30:4f:00:08:01:
90:6c:18:92:bc:5b:40:1c:24:ec:14:81:b6:9f:af:
ad:d8:c0:e0:9b:84:5c:9d:21:1b:3d:e2:56:44:08:
a0:a2:2b:f6:96:fb:49:22:3f:61:4c:a4:d9:b2:20:
e1:ca:9f:c2:ef:8d:e2:2d:4a:72:25:65:76:f0:9e:
14:85:04:af:f6:7b:c6:f0:55:e1:03:25:18:c4:ab:
68:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D7:27:4D:8F:D6:57:CF:BD:4C:27:46:99:8F:7A:45:5E:A1:84:68
X509v3 Authority Key Identifier:
keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e0:1b:6b:77:b3:ac:66:cc:73:59:78:93:54:b4:72:74:73:
bf:ce:ff:c9:4f:e9:73:f7:e0:c2:b8:1c:ee:1a:d7:68:9d:ff:
de:10:5c:bb:1a:93:b4:58:9f:21:f2:2f:8d:db:e0:4b:d5:89:
23:d3:d6:53:e5:5a:b1:eb:70:57:87:bd:c6:4c:d2:ce:65:e4:
12:cc:17:9c:d9:f8:82:73:44:2e:50:82:05:2c:f2:27:05:18:
59:0f:8a:e1:7d:10:cd:34:93:ff:56:7f:b6:97:6e:75:5b:4a:
f1:4c:9a:39:13:b0:ef:0c:03:f4:c5:cb:55:ab:c1:09:09:7f:
95:8e:a9:9d:f2:92:ef:1b:53:07:f9:2f:49:03:e4:d8:a3:61:
ce:79:02:29:b2:2e:3e:45:51:c3:13:5d:00:6a:43:07:cb:60:
a9:07:47:22:5a:75:12:13:1f:2a:46:87:35:ea:fa:a6:80:7a:
14:c8:7d:3f:eb:41:02:bc:84:4d:37:0d:cb:ed:fd:b9:22:bc:
e9:4f:11:50:18:e5:27:6f:ca:f1:66:4b:b4:e8:8d:b8:63:bd:
64:c1:a7:1f:7c:28:ca:f9:b2:5f:2c:f1:71:d7:02:51:d6:d7:
f6:2b:f4:90:2c:2e:3c:9e:4e:62:5a:2f:b9:0f:de:20:37:f6:
32:32:23:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 08:23:43 2026 by rpki-client