Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/rgLNgCbGDDyINkigv_cRbPJnB9Y.mft
File: rgLNgCbGDDyINkigv_cRbPJnB9Y.mft (raw, json)
Hash identifier: OrWoGUFFR30h32c41DypYRUZTpwyaWmlhy/4Y2WnARw=
Subject key identifier: DB:4A:62:FE:BC:35:42:C0:F3:A9:D8:13:35:42:25:AE:E8:FF:2D:FB
Authority key identifier: AE:02:CD:80:26:C6:0C:3C:88:36:48:A0:BF:F7:11:6C:F2:67:07:D6
Certificate issuer: /CN=ae02cd8026c60c3c883648a0bff7116cf26707d6
Certificate serial: 01A0DD97BE90F5BA681C07CEDC9F4C19493E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgLNgCbGDDyINkigv_cRbPJnB9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/rgLNgCbGDDyINkigv_cRbPJnB9Y.mft
Manifest number: EC
Signing time: Sat 26 Sep 2026 12:01:44 +0000
Manifest this update: Sat 26 Sep 2026 12:01:44 +0000
Manifest next update: Sun 27 Sep 2026 12:01:44 +0000
Files and hashes: 1: JFKsJ81EE5IntvacpLswwWGFsTM.roa (hash: LHjq7NdJ7WIHgdVnj15fjVJfqra4lVivu4YVbUPdLsQ=)
2: MYiR6d13wnOJyMgIVOtD39N0N2Y.roa (hash: 1MsnnpZMhXZvlE3ZAn7W0Wa3woN4DjCUknVa97haYzc=)
3: qZg3vuSLjrxt2okeYN8jOZEzgyM.roa (hash: 5PbHk2X8krzBF8kEH0yjcg64xwxwW6OFin9CiO9Dif4=)
4: rgLNgCbGDDyINkigv_cRbPJnB9Y.crl (hash: PER/8ZdwjTFj/Xkbkas0EHXUkufz4zDb+Lpc4u2Bs1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/rgLNgCbGDDyINkigv_cRbPJnB9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/rgLNgCbGDDyINkigv_cRbPJnB9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/rgLNgCbGDDyINkigv_cRbPJnB9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:be:90:f5:ba:68:1c:07:ce:dc:9f:4c:19:49:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae02cd8026c60c3c883648a0bff7116cf26707d6
Validity
Not Before: Sep 26 12:01:44 2026 GMT
Not After : Sep 27 12:01:44 2026 GMT
Subject: CN=db4a62febc3542c0f3a9d813354225aee8ff2dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:96:b0:a9:f4:99:83:bc:38:da:25:7c:32:24:
7b:c2:ba:4a:50:1d:0a:11:56:56:54:b0:06:63:c1:
82:05:1c:8c:e1:27:b7:d0:cb:18:9f:bb:f6:96:53:
d1:50:12:23:e7:9c:d3:35:92:f6:a2:b3:9b:10:e5:
54:8a:70:53:30:88:a3:35:cf:87:e9:f2:48:33:d0:
d6:61:2f:87:47:a0:19:a6:01:5f:3a:a7:b3:fc:89:
5a:27:45:59:7b:b4:86:87:17:17:ed:af:a2:6a:ad:
c9:7d:43:1b:71:94:40:f4:47:5c:90:cb:37:14:f2:
4c:f0:16:af:79:ad:53:3f:9f:c7:8b:4b:8a:f8:7b:
15:1d:2e:36:6f:5c:fa:2e:c2:11:b0:f9:e7:a8:f6:
fc:80:93:ce:33:ae:a5:92:3a:bc:04:64:6d:f9:7b:
ad:3a:63:00:ad:34:b3:ae:c8:29:6f:c2:24:a7:aa:
e9:7e:a3:cd:43:9f:57:e0:ec:49:01:9d:87:f8:52:
fc:65:64:df:ab:a3:89:9e:04:f0:c0:a4:9d:bc:d1:
69:37:29:e3:da:7a:46:6a:5d:2f:f4:85:90:d2:0e:
8b:ad:84:40:7a:94:6b:d9:3f:e6:83:36:1a:c7:e3:
f6:31:bc:8c:85:b5:a5:01:d4:14:20:af:c0:86:1e:
e7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4A:62:FE:BC:35:42:C0:F3:A9:D8:13:35:42:25:AE:E8:FF:2D:FB
X509v3 Authority Key Identifier:
keyid:AE:02:CD:80:26:C6:0C:3C:88:36:48:A0:BF:F7:11:6C:F2:67:07:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgLNgCbGDDyINkigv_cRbPJnB9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/rgLNgCbGDDyINkigv_cRbPJnB9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/rgLNgCbGDDyINkigv_cRbPJnB9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1a:6a:6e:ec:d9:d6:ac:82:a0:e1:e8:88:c2:e6:0c:7d:26:
3f:86:e2:50:eb:ab:36:68:0b:24:1c:cf:06:a9:84:d2:88:ef:
99:67:fb:fc:e7:84:aa:78:bc:97:98:11:1e:db:e4:e7:25:ab:
9d:4f:38:34:02:ba:f5:bf:f1:f7:c2:7c:6c:9a:bc:1b:fb:18:
85:b4:79:95:fc:f6:07:d6:0b:d9:1d:96:5b:cc:18:9a:db:e7:
af:39:c8:58:1b:36:b9:99:aa:1a:8d:52:c4:21:bd:14:61:76:
78:c8:1e:54:c5:02:e6:d4:80:7a:1b:36:ba:03:dd:c4:18:ba:
20:55:58:79:f1:1b:4b:6f:f4:4d:9a:13:81:87:e3:da:16:69:
c2:3a:14:a7:9d:25:84:22:3a:97:15:ca:25:1c:9e:84:38:8e:
0d:89:f5:a9:ae:04:8b:e9:41:fa:d2:0b:29:bd:25:22:ad:29:
8b:e8:44:e7:ed:05:c6:6c:80:d1:c2:eb:90:ed:bb:f0:41:54:
d2:9c:d1:9c:88:22:ef:d2:82:fc:58:41:22:7c:8d:07:94:8e:
8a:76:79:9e:ac:4a:09:ce:19:ce:0f:ae:9d:2e:64:c3:f1:41:
07:02:ff:5b:a6:31:fe:47:a1:e7:4a:2c:a5:67:a4:09:81:ed:
12:77:cc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:37:26 2026 by rpki-client