Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
File: ErFnS78NEY8lVPgMr9PvGznYrj8.mft (raw, json)
Hash identifier: v/e9F4HdvUz0/G+pOJVVbXuKc1h4kuBrjkoWGEeonMw=
Subject key identifier: 6A:36:AB:33:DA:E1:15:14:01:08:DF:8A:64:A8:16:E6:96:B0:B0:59
Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
Certificate issuer: /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Certificate serial: 019D9B877E595CB4AD655F58FED4747FD799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
Manifest number: 0947
Signing time: Fri 17 Apr 2026 13:00:41 +0000
Manifest this update: Fri 17 Apr 2026 13:00:41 +0000
Manifest next update: Sat 18 Apr 2026 13:00:41 +0000
Files and hashes: 1: 1-GMAx4cV6wCGu8QajPhkplgNOC0.roa (hash: dbmm9AGKkzXlCXgFEXZSu4+kBmd2ptn2wiUgb1Ww9ds=)
2: ErFnS78NEY8lVPgMr9PvGznYrj8.crl (hash: uBoCJoue32Pcu3AhkuztO6v2GChEU0n6aCOdaLTqg3M=)
3: T_9Nupq1QtdGed_iwoc4AH5rQ3A.roa (hash: u8SWNWsR1YqwiTS51c4B27JGvI8Gi01uv4oyKJW5qZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:7e:59:5c:b4:ad:65:5f:58:fe:d4:74:7f:d7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Validity
Not Before: Apr 17 13:00:41 2026 GMT
Not After : Apr 18 13:00:41 2026 GMT
Subject: CN=6a36ab33dae115140108df8a64a816e696b0b059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:e6:79:ad:2e:13:fc:6c:7a:2f:b8:ea:bc:
27:be:bf:d0:a5:d4:96:bc:90:a1:b3:f0:40:43:cf:
87:0f:d3:92:1c:33:4f:94:21:46:96:b8:ba:5c:60:
7c:d0:28:8f:77:d2:ea:d8:ef:a3:e7:a4:c6:b6:fc:
53:17:6b:8c:8a:cd:39:79:23:2f:f6:88:33:fa:60:
d6:a4:d1:d3:3c:54:2f:50:a7:8c:45:44:e9:38:2f:
0d:5a:4b:99:e2:39:9e:52:63:6e:f7:59:a3:86:db:
80:15:85:30:dd:cf:fd:b0:48:42:f1:a1:95:32:32:
aa:00:bf:c6:d8:13:b9:61:b8:22:cf:55:bd:e1:b6:
dd:99:78:6d:5f:ac:dd:f9:09:08:c0:54:51:07:d6:
c0:98:79:f2:b7:b1:f3:1a:9d:2f:ba:35:dd:8b:82:
cc:81:83:10:37:09:49:00:c1:9a:12:24:14:a9:da:
49:a8:c8:05:83:cf:e4:9e:a4:fc:30:56:fc:68:d2:
fc:5f:94:48:6f:97:cd:4b:ba:2c:a8:79:6e:65:4c:
30:32:01:7f:0e:c9:04:55:e4:b6:b6:4d:f4:ee:8a:
97:81:62:cc:51:28:21:13:b4:37:8a:a3:cb:53:d1:
9c:27:6d:2b:64:e9:4a:23:89:a4:fb:b8:35:b1:fb:
2c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:36:AB:33:DA:E1:15:14:01:08:DF:8A:64:A8:16:E6:96:B0:B0:59
X509v3 Authority Key Identifier:
keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:42:e4:ca:49:1c:bc:d4:70:14:49:f0:ce:fb:dc:48:84:df:
9f:1e:1e:f3:0a:2f:58:96:8d:dc:db:7e:ef:56:d4:4e:f1:89:
bc:54:46:10:34:5e:1c:df:9e:60:01:94:e9:ee:ed:33:4b:8f:
fd:5e:89:cd:f3:a7:08:66:08:ed:f6:e3:85:53:b3:90:53:45:
c7:f3:0d:b3:2d:3d:58:af:b0:96:07:6e:bf:06:15:1e:13:6a:
2b:e5:26:52:2d:a3:98:8d:dc:23:8e:57:f0:e0:78:07:c4:b1:
d0:c5:12:48:11:23:ae:ce:fe:70:f3:52:57:df:87:10:4b:91:
52:cf:c5:31:67:8c:35:b0:60:f9:65:5b:83:91:1e:8d:4b:54:
9f:28:c7:09:01:d3:f1:c3:d8:19:ca:61:26:6c:5c:ac:de:fd:
08:b5:de:c6:31:d1:9a:79:d6:2a:bd:05:e7:0a:ad:5e:17:72:
82:e3:19:5a:ec:af:55:11:23:22:3e:41:15:bd:96:87:b9:f3:
6b:c6:6f:a9:d2:e9:56:eb:9e:4a:c6:3d:58:02:5a:d2:03:8d:
76:3c:dc:be:64:78:cf:02:95:b0:7e:5f:3a:c7:6c:e6:6d:12:
2b:f5:25:f5:2a:c2:84:d1:4f:76:c4:cc:86:ab:1f:0c:e6:34:
58:33:cd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:05:34 2026 by rpki-client