Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
File: ErFnS78NEY8lVPgMr9PvGznYrj8.mft (raw, json)
Hash identifier: daHF/z2gKVlxFjxblZ6IgXnQN+S6pYtJFmYYb+UTTOA=
Subject key identifier: B1:15:C5:E0:F8:65:68:74:B7:8C:EF:0B:0A:21:ED:F6:85:A9:20:A5
Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
Certificate issuer: /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Certificate serial: 019CAC1054970DC6CD04E81F3FCD963E986E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
Manifest number: 08CB
Signing time: Mon 02 Mar 2026 01:01:17 +0000
Manifest this update: Mon 02 Mar 2026 01:01:17 +0000
Manifest next update: Tue 03 Mar 2026 01:01:17 +0000
Files and hashes: 1: 1-GMAx4cV6wCGu8QajPhkplgNOC0.roa (hash: dbmm9AGKkzXlCXgFEXZSu4+kBmd2ptn2wiUgb1Ww9ds=)
2: ErFnS78NEY8lVPgMr9PvGznYrj8.crl (hash: l23XK7ek7GhgwS5rLkK8Bhjg4D4iMQnkZ6yjJ2iwCmI=)
3: T_9Nupq1QtdGed_iwoc4AH5rQ3A.roa (hash: u8SWNWsR1YqwiTS51c4B27JGvI8Gi01uv4oyKJW5qZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:54:97:0d:c6:cd:04:e8:1f:3f:cd:96:3e:98:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Validity
Not Before: Mar 2 01:01:17 2026 GMT
Not After : Mar 3 01:01:17 2026 GMT
Subject: CN=b115c5e0f8656874b78cef0b0a21edf685a920a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ac:57:83:3f:ae:ca:a3:a9:0f:46:6e:18:d3:
b8:75:6a:af:70:2b:0a:fa:71:68:c7:48:aa:4f:9b:
cf:10:54:84:8e:c2:86:1d:20:81:60:7c:fe:ff:78:
54:79:3f:87:4e:99:97:b2:93:4b:62:26:78:88:1f:
eb:58:32:f8:8c:6d:ba:6c:08:f6:35:6b:a0:4c:c1:
89:b2:3f:42:a4:b1:98:99:b7:84:e3:9c:ae:33:fd:
6e:3f:d5:71:0e:90:82:98:49:3c:af:47:cf:6e:22:
5b:c9:cd:44:83:26:d4:d8:94:aa:be:d5:9d:04:38:
58:16:3c:cf:67:54:d9:20:ca:d1:6c:59:05:18:67:
8b:64:02:b9:77:40:7a:b1:97:fc:5f:f6:3a:50:36:
a9:77:5f:43:d9:70:64:d7:4e:40:cf:7d:45:93:41:
0b:e5:c7:47:f2:24:83:7e:4e:21:d6:68:2a:37:9f:
b6:57:64:9b:a8:9e:be:f9:9f:ef:4c:87:25:5c:71:
a2:34:58:df:ef:6e:a2:6f:df:98:be:9d:12:36:74:
39:3e:00:37:78:83:10:ca:de:ee:73:8a:6d:ec:de:
15:48:27:12:5e:98:75:cd:b1:9b:43:04:ad:bf:6d:
77:60:5f:c9:73:95:f1:32:a7:48:ac:3e:3a:80:a2:
78:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:15:C5:E0:F8:65:68:74:B7:8C:EF:0B:0A:21:ED:F6:85:A9:20:A5
X509v3 Authority Key Identifier:
keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:20:ff:a7:3e:55:60:08:42:06:d9:90:89:f6:52:e4:40:36:
9e:80:07:19:74:7c:8c:63:fb:5f:07:2e:a7:88:bc:ad:14:58:
0c:27:04:05:18:59:ea:54:df:0c:4b:c1:02:71:de:df:69:7c:
5c:5b:21:03:16:aa:0f:b9:39:c4:3a:41:c3:f7:c3:ea:80:3e:
2f:28:ba:e2:bc:0f:77:0e:dd:6f:4c:30:70:b0:e0:7c:1f:52:
c4:52:f3:77:d1:38:40:22:d4:4f:d0:8d:02:4c:3e:f2:ba:10:
c7:5e:1b:d0:65:63:c5:4b:7b:f9:f8:a7:c8:aa:e3:14:f6:7a:
bf:c4:a4:56:7c:68:aa:20:90:9b:00:da:be:73:f2:6a:89:59:
65:97:1a:06:e2:d4:c7:c6:52:76:bf:22:56:f8:88:7c:ff:17:
3f:3d:fd:95:8b:bc:4e:78:46:07:19:eb:ff:df:ab:13:38:fb:
78:8c:9b:95:0e:08:83:eb:60:d2:6f:0b:a0:ab:1c:53:49:43:
76:3a:d0:c8:a8:1b:05:38:d4:69:15:5c:3d:49:03:7b:cc:04:
89:69:28:2a:93:14:20:7d:a2:e5:b3:30:2f:27:83:32:e0:e4:
a1:19:9b:33:2e:b4:76:d3:f2:18:9d:87:c5:ee:78:6a:6f:ed:
aa:61:89:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:24:31 2026 by rpki-client