Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
File: _lNCbiNhumZdjyW9PPrvwg69pIg.mft (raw, json)
Hash identifier: 0QRM2ij3QyCuv7glPIAIS2TSv1qslcr4/kw4dEKT5pU=
Subject key identifier: 8D:F2:CE:1C:1A:C1:2C:D4:C4:EC:FE:73:88:4B:DA:8C:DA:49:3A:A4
Authority key identifier: FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
Certificate issuer: /CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Certificate serial: 01A0FBA22901AFC0FF11548AAD1594E81D0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
Manifest number: 1795
Signing time: Fri 02 Oct 2026 08:01:43 +0000
Manifest this update: Fri 02 Oct 2026 08:01:43 +0000
Manifest next update: Sat 03 Oct 2026 08:01:43 +0000
Files and hashes: 1: KoZviyPQEL5Xi6gVwYr2Cd9mx2c.roa (hash: fqe8eG4WVuOA3Nqn5E8vEQ5c8f4TyPMKdiIPBRAGwdE=)
2: _lNCbiNhumZdjyW9PPrvwg69pIg.crl (hash: OVWX/FU7kpyntq0cU8XTtFCsG0YaE6uQYJXuox6rOgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:a2:29:01:af:c0:ff:11:54:8a:ad:15:94:e8:1d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Validity
Not Before: Oct 2 08:01:43 2026 GMT
Not After : Oct 3 08:01:43 2026 GMT
Subject: CN=8df2ce1c1ac12cd4c4ecfe73884bda8cda493aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f6:ac:23:82:ea:11:5b:e4:ed:c9:94:88:4c:
23:dc:61:7a:b9:c2:88:10:11:12:12:8f:33:78:e0:
22:68:91:1a:ee:a7:f4:43:9e:fa:1d:69:61:ab:6a:
77:cb:36:19:09:35:97:13:86:cc:8e:b9:2b:cb:5d:
67:6f:6d:34:10:1c:50:0c:aa:dd:c4:77:f8:4a:11:
39:05:4c:7c:5e:8a:8a:08:86:c2:13:e6:72:31:80:
c9:83:42:36:eb:f5:a9:4f:bd:1f:b9:c3:f1:14:8c:
3c:46:7a:31:05:f3:18:77:4d:e4:57:19:49:a4:1a:
4c:f7:b2:41:d4:23:2d:73:60:fe:49:40:d0:57:a3:
9e:14:ce:43:90:8f:35:14:e8:48:d8:a6:be:83:69:
43:e7:d7:d8:25:ef:06:09:9d:ad:46:99:b9:1a:4e:
d7:8c:0c:60:3b:2d:cc:e6:90:4e:48:ea:a5:95:ee:
12:6a:c9:eb:87:98:35:eb:2e:49:8c:70:b7:8e:b1:
31:6d:f5:62:4d:4e:01:ee:1f:f6:2f:93:1a:f4:47:
f2:a6:0d:05:7f:7d:8e:b2:66:f8:0b:7f:f6:2e:23:
bc:b1:4d:32:1c:86:d7:d9:03:3f:53:b0:60:b4:0e:
99:f8:94:07:2c:e9:95:f7:9f:c2:ad:95:f4:48:d2:
b1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F2:CE:1C:1A:C1:2C:D4:C4:EC:FE:73:88:4B:DA:8C:DA:49:3A:A4
X509v3 Authority Key Identifier:
keyid:FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:46:cc:41:5a:0c:34:1f:17:0e:ad:d3:e5:ab:a0:95:ed:fd:
e4:1e:f5:0c:1c:08:93:e8:36:be:86:1c:cb:3e:86:39:7f:48:
88:0a:dc:99:8d:4b:3a:4c:b5:c9:63:f7:e8:f3:6d:81:f0:90:
d0:f6:3a:08:ac:6f:70:89:01:7c:de:bd:2c:59:89:61:98:57:
7c:e7:93:46:04:fc:3c:97:d5:af:9c:7c:45:88:a9:e5:51:69:
a5:5f:51:7b:bf:5b:66:95:d3:74:10:9a:82:0e:89:c1:39:c1:
42:0c:db:75:3d:21:93:20:b1:4f:67:1d:5b:6c:e9:af:6c:e9:
de:56:01:d0:53:ff:19:dd:16:c2:58:b2:06:ee:11:48:94:d6:
ce:ef:3b:61:ea:94:62:09:cf:ef:a4:81:d2:14:c4:e5:d0:4d:
9a:c3:05:c6:94:b6:83:44:bd:69:c0:74:98:d6:f0:04:44:4f:
3d:27:29:69:ed:21:52:6f:d8:f9:88:4a:4c:06:31:37:52:22:
e6:e2:86:36:aa:ce:2a:4b:3f:1f:1c:f8:56:31:ca:2f:69:4a:
60:66:df:1a:96:eb:c5:20:d9:f3:eb:c1:1b:3f:cb:88:da:f6:
ed:a7:72:d8:b9:c1:26:db:e0:cd:c5:90:ca:72:7e:30:7d:4d:
26:35:12:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 16:44:24 2026 by rpki-client