Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
File: ErFnS78NEY8lVPgMr9PvGznYrj8.mft (raw, json)
Hash identifier: 9lMLIgPyzHsTnwvJ++6SLZWE0RjSJgw3oxBKa8GLTOU=
Subject key identifier: 6C:78:56:DF:AC:E1:DE:00:E3:1D:ED:87:CA:47:A8:70:2D:C7:8A:9F
Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
Certificate issuer: /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Certificate serial: 019FACAC981616F0396B6D056A5FE60F7856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
Manifest number: 0A59
Signing time: Wed 29 Jul 2026 07:00:19 +0000
Manifest this update: Wed 29 Jul 2026 07:00:19 +0000
Manifest next update: Thu 30 Jul 2026 07:00:19 +0000
Files and hashes: 1: 1-GMAx4cV6wCGu8QajPhkplgNOC0.roa (hash: dbmm9AGKkzXlCXgFEXZSu4+kBmd2ptn2wiUgb1Ww9ds=)
2: ErFnS78NEY8lVPgMr9PvGznYrj8.crl (hash: j82v8EcKI0AFTx7mfauK6U3fAWgrUFHuCAnjDqZUVng=)
3: T_9Nupq1QtdGed_iwoc4AH5rQ3A.roa (hash: u8SWNWsR1YqwiTS51c4B27JGvI8Gi01uv4oyKJW5qZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:98:16:16:f0:39:6b:6d:05:6a:5f:e6:0f:78:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Validity
Not Before: Jul 29 07:00:19 2026 GMT
Not After : Jul 30 07:00:19 2026 GMT
Subject: CN=6c7856dface1de00e31ded87ca47a8702dc78a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c3:8e:6f:26:de:33:7a:82:7a:8e:63:fb:a6:
09:1d:83:e8:c3:79:33:f8:70:56:54:e8:5d:d1:71:
4d:f3:96:de:07:54:cd:d4:47:61:a5:70:02:0c:f9:
b1:fa:3a:88:4b:a3:97:28:4d:7a:9d:03:5a:8d:1f:
84:c1:c0:34:79:8e:a6:ef:79:dc:63:a3:8e:82:9d:
ac:c6:0a:ad:29:7d:d6:6f:39:b9:fc:e4:27:cb:7f:
ee:ce:f1:b6:37:de:8d:bf:3e:69:49:c5:36:f1:7b:
0f:0c:bf:3f:67:c7:ce:58:f5:03:d3:fa:43:f6:08:
a8:57:44:1d:ea:48:21:84:1a:6f:6b:cf:f6:2a:88:
f3:15:ab:0b:37:3b:c2:85:ac:6d:45:08:9a:24:e5:
74:38:7f:de:23:11:1f:08:95:dc:1d:a8:d8:9c:fa:
b1:dc:af:a6:ad:6f:e7:44:55:6f:a6:0a:42:14:8c:
00:2c:b1:5f:91:89:f5:59:1c:f4:01:a6:de:27:85:
6b:da:8b:a0:0c:85:49:e5:c5:f8:87:2e:84:96:9b:
9a:4b:7d:d3:0e:b4:03:6a:96:5a:c8:61:2f:ab:b3:
36:3f:ba:03:de:10:48:7f:a3:52:da:a0:87:47:db:
cd:5d:be:f5:53:42:21:e0:c0:32:fb:7d:df:c8:36:
91:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:78:56:DF:AC:E1:DE:00:E3:1D:ED:87:CA:47:A8:70:2D:C7:8A:9F
X509v3 Authority Key Identifier:
keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:36:7b:e3:b0:b6:5f:7d:76:35:68:f3:f5:2a:2f:f1:9c:57:
6d:76:e2:f9:02:50:7b:5b:e2:31:70:86:ae:c8:c9:03:0b:6e:
d3:42:51:00:ee:80:97:f7:6e:43:83:94:2b:5e:75:fd:b9:fb:
b0:6f:cc:43:67:a9:b0:a8:44:c8:2f:04:32:3e:80:cb:93:fb:
dd:6e:3b:dc:b2:d7:97:1b:43:fe:91:31:41:10:13:4a:32:66:
39:46:7e:0a:4c:3e:9c:31:1c:1a:59:4d:73:40:5f:fe:fa:62:
8f:1e:09:ad:11:64:ab:a3:39:2b:a2:91:83:20:3f:23:b5:f7:
77:22:51:e6:ed:b6:1d:7a:7f:81:2c:cc:d9:1f:93:16:c3:f8:
9b:5e:bd:3d:2d:a8:c9:ac:0f:8f:1c:38:05:d3:28:b1:72:76:
96:14:16:f4:a9:39:c7:b2:35:c1:46:cf:d2:eb:a0:4a:29:ab:
2d:bd:e3:68:70:09:78:e7:2a:4b:f5:80:18:f4:99:6f:10:73:
c9:da:40:e2:7a:58:34:40:57:d0:8f:35:a2:6c:8c:a0:4b:06:
7e:26:85:56:84:97:9b:3f:b0:8d:27:9c:fa:5d:e3:e0:02:41:
f9:3e:26:22:cd:8a:91:af:b1:97:f9:c1:d9:41:bf:e3:f4:f1:
23:a5:44:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:52:02 2026 by rpki-client