Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
File: RFZsGig9VT7z9lb1ciOYTdp8NV8.mft (raw, json)
Hash identifier: mh86kmlbUHp9JKPljBYAEk5DAOBFHdZ1OyaLpGrhuCU=
Subject key identifier: E3:8A:6B:CF:CC:6C:2D:70:60:6D:EE:1D:9C:5A:C0:53:55:FC:B4:F5
Authority key identifier: 44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
Certificate issuer: /CN=44566c1a283d553ef3f656f57223984dda7c355f
Certificate serial: 01A12CC544113634D6B0DE54C9306C86E785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
Manifest number: 1AA0
Signing time: Sun 11 Oct 2026 21:01:27 +0000
Manifest this update: Sun 11 Oct 2026 21:01:27 +0000
Manifest next update: Mon 12 Oct 2026 21:01:27 +0000
Files and hashes: 1: RFZsGig9VT7z9lb1ciOYTdp8NV8.crl (hash: 4PL44bKPkVptA+hEtilyEwqWhLMUgGZX1+no3Ah4XLk=)
2: unbj6R1pt1reWtClkg6u6qP97qU.roa (hash: ve6WwDA/IGFZ6obWRDfS0N46O05JHSdRDsvfP7NEV7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 21:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:c5:44:11:36:34:d6:b0:de:54:c9:30:6c:86:e7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44566c1a283d553ef3f656f57223984dda7c355f
Validity
Not Before: Oct 11 21:01:27 2026 GMT
Not After : Oct 12 21:01:27 2026 GMT
Subject: CN=e38a6bcfcc6c2d70606dee1d9c5ac05355fcb4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:69:67:d3:0f:f1:42:2c:61:ff:cf:ed:72:94:
d9:fd:d5:7d:dd:15:44:78:fd:61:96:55:5b:95:e0:
f0:9d:61:6d:b2:11:df:dc:1d:7b:18:33:00:c5:e8:
7f:d4:79:7f:07:b4:14:fb:83:c3:ba:53:2c:d6:23:
1b:83:bb:a9:20:18:1a:11:55:f8:f3:4e:1a:2b:b7:
5b:2d:e6:4d:05:6a:cd:26:a9:e6:7b:4b:09:73:82:
31:9b:5a:25:4b:f9:35:9b:4e:5e:1d:6c:75:99:95:
df:70:c8:35:84:ab:f6:0f:85:7e:58:1c:31:2d:31:
cd:dd:6e:43:1b:15:07:26:6f:8d:5d:9d:99:ae:0f:
5f:58:dd:c5:e3:66:fa:52:4d:58:b9:58:e5:a9:14:
3c:4b:58:fd:8c:00:a1:15:0f:4e:85:36:3c:ca:f2:
5b:58:2b:89:bf:57:1d:78:03:a6:bf:c1:63:c1:8e:
47:4d:63:1e:86:b8:ee:84:31:eb:9c:d1:e1:c2:25:
14:68:35:79:58:c5:c6:01:07:58:5b:d7:eb:48:fc:
68:73:d9:49:78:c1:d0:a6:92:ee:7c:24:f7:21:0e:
36:00:cf:b4:a2:57:bc:00:68:65:f7:87:7c:24:e4:
84:2b:0f:c0:0c:fe:7a:4e:d5:7f:0d:46:6a:8d:3f:
55:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8A:6B:CF:CC:6C:2D:70:60:6D:EE:1D:9C:5A:C0:53:55:FC:B4:F5
X509v3 Authority Key Identifier:
keyid:44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f5:2f:73:81:d6:41:d1:ce:e9:47:43:c5:9e:03:af:f0:24:
86:bf:46:97:32:6c:ed:16:c7:73:cc:27:8a:3c:c6:89:49:d6:
8d:ac:3a:12:28:a6:1b:5c:ad:37:d9:f9:b6:3a:65:e6:ef:92:
66:55:75:82:05:68:23:22:74:d3:99:ce:e1:d4:63:8a:f7:f1:
44:59:ad:4a:ff:9f:30:5c:17:92:59:7d:62:53:8d:72:60:7e:
df:9f:40:88:a1:87:d7:40:dc:1f:6e:2a:bc:3c:f3:12:85:b0:
ff:02:b7:4a:0f:00:a4:1f:22:93:e6:73:d9:12:77:62:53:ff:
8c:da:86:ae:78:35:d6:76:2a:24:be:54:20:2d:43:bd:19:f1:
c7:e7:7a:ad:d3:de:01:58:62:d7:47:a8:3f:96:d4:1b:1c:a5:
f8:7c:d6:73:b0:c9:d8:44:96:40:7d:9f:7c:81:fe:b5:51:95:
3d:34:89:7a:ad:be:b6:a1:bf:53:e3:be:17:65:dc:58:e7:e9:
65:74:2a:46:22:55:dd:7f:eb:d6:91:92:aa:fc:22:10:72:ec:
e8:6a:9c:7d:50:36:ce:5e:95:59:53:24:e3:fa:5b:ca:d9:00:
ac:12:93:af:13:0f:68:1f:06:ba:40:3b:a5:3f:86:2d:fc:69:
06:e6:5c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 05:27:04 2026 by rpki-client