Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.mft
File: rfLQhXs0qcROPlRbVqgWm8fD7Zg.mft (raw, json)
Hash identifier: AMfWN4l0YYglU0U815q3KRrDVlCU+1l4rMqZXxgznBw=
Subject key identifier: 4B:28:21:08:7D:86:05:C2:A7:47:B5:DA:9A:24:EF:2F:2D:99:4F:8F
Authority key identifier: AD:F2:D0:85:7B:34:A9:C4:4E:3E:54:5B:56:A8:16:9B:C7:C3:ED:98
Certificate issuer: /CN=adf2d0857b34a9c44e3e545b56a8169bc7c3ed98
Certificate serial: 01A12AD6B64E2E177F21FB83EFC745C6DFF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfLQhXs0qcROPlRbVqgWm8fD7Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.mft
Manifest number: 0114
Signing time: Sun 11 Oct 2026 12:01:16 +0000
Manifest this update: Sun 11 Oct 2026 12:01:16 +0000
Manifest next update: Mon 12 Oct 2026 12:01:16 +0000
Files and hashes: 1: en3Dgcg-QCYV7nam7q3FCP5ZkR0.roa (hash: l3a1Se4v22VtVm5ZL/5W5MYgFfditJOkAKvu9Xf04q4=)
2: rfLQhXs0qcROPlRbVqgWm8fD7Zg.crl (hash: tokQAaKwVjoIt4QSE/rLlrmrdLLI4lu9AqbZEUPn1gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfLQhXs0qcROPlRbVqgWm8fD7Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d6:b6:4e:2e:17:7f:21:fb:83:ef:c7:45:c6:df:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf2d0857b34a9c44e3e545b56a8169bc7c3ed98
Validity
Not Before: Oct 11 12:01:16 2026 GMT
Not After : Oct 12 12:01:16 2026 GMT
Subject: CN=4b2821087d8605c2a747b5da9a24ef2f2d994f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:14:97:c5:e2:3b:75:d5:2c:d7:cd:45:a6:7b:
7b:4e:3a:e1:9b:ec:66:c2:63:c4:42:1b:43:e6:67:
36:d1:c1:87:70:22:b7:0a:2f:e3:10:0e:b4:1a:26:
9b:1c:a6:a6:4f:bc:ec:1f:5b:ec:03:d2:d1:ef:60:
1b:da:da:b4:cd:34:b1:e5:28:8f:69:50:b7:e7:59:
4f:23:40:58:bc:14:55:01:f8:cc:30:e2:e0:0b:92:
64:db:45:9e:96:3d:3e:98:a3:d9:9c:50:aa:fb:f0:
5a:24:97:40:28:4d:ef:bf:20:cf:d2:02:d3:af:91:
23:1b:16:56:38:2c:6f:68:9f:42:b5:15:0a:40:71:
43:dd:3d:9e:77:24:4a:95:82:fe:39:95:b4:52:71:
de:7f:2f:b0:4a:3e:76:64:d2:14:bf:5f:58:12:b0:
77:91:82:a5:f7:80:32:fd:b7:a8:39:e0:bb:88:c6:
af:fc:b0:e0:06:63:27:96:3f:04:7c:81:bf:44:17:
4f:48:04:68:f6:24:c8:80:a7:e6:d2:9b:d5:74:be:
94:5f:73:80:e9:10:94:32:de:bf:bd:19:5e:b8:78:
cf:81:a3:dc:92:3b:77:d9:83:71:1d:e4:c0:ab:d5:
40:1b:9a:20:c2:ba:80:d8:01:e3:b6:86:2d:0e:98:
06:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:28:21:08:7D:86:05:C2:A7:47:B5:DA:9A:24:EF:2F:2D:99:4F:8F
X509v3 Authority Key Identifier:
keyid:AD:F2:D0:85:7B:34:A9:C4:4E:3E:54:5B:56:A8:16:9B:C7:C3:ED:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfLQhXs0qcROPlRbVqgWm8fD7Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d2:58:66:b5:fa:08:b4:6a:02:ae:67:bf:4c:dd:b4:4d:c7:
c6:08:6a:62:79:0e:6d:90:69:16:78:77:e0:e2:0f:7f:6d:c5:
57:fe:fb:32:1a:7b:e2:98:fb:6b:bd:2d:03:c8:e8:56:2e:7f:
aa:86:b8:8b:2b:17:be:5d:64:c4:6e:3f:0b:7a:ef:1b:a5:f3:
0d:44:76:99:86:1d:97:5c:d1:14:b0:98:3c:0a:05:15:82:4f:
a7:b7:c9:fb:76:90:75:f2:4f:12:d5:39:bd:90:7c:38:9f:7d:
8a:45:5e:80:b2:3f:b9:64:4b:90:04:c5:f6:7d:8f:61:03:93:
39:21:f6:cc:45:7b:48:de:47:8d:4b:43:b9:83:18:18:d7:2a:
44:40:f7:b2:22:0c:0c:18:9a:1d:7e:b9:5b:b3:84:98:c9:b0:
27:7a:5c:8b:ef:49:6d:e3:75:9f:a6:2c:e0:91:03:cb:98:3f:
bf:d1:42:22:54:78:30:ab:ef:7f:86:ec:8f:66:86:76:5b:62:
4c:cd:36:5c:95:33:cf:36:16:a9:3a:73:33:54:b9:3e:9a:57:
6e:6c:ef:78:e0:62:34:54:8f:eb:5c:1c:30:c0:a2:96:46:a2:
94:4f:7c:99:43:81:8d:ef:ff:28:fc:16:ab:e8:eb:53:ae:3a:
89:92:74:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:20:55 2026 by rpki-client