Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.mft
File: rfLQhXs0qcROPlRbVqgWm8fD7Zg.mft (raw, json)
Hash identifier: KS3truAwqdGQuTmYgy3g9rYRuyIJ3mOA7bxdiWQTNuY=
Subject key identifier: F0:F5:36:26:73:5D:7B:39:31:86:41:AA:DF:9A:BD:C5:4D:E0:E1:0F
Authority key identifier: AD:F2:D0:85:7B:34:A9:C4:4E:3E:54:5B:56:A8:16:9B:C7:C3:ED:98
Certificate issuer: /CN=adf2d0857b34a9c44e3e545b56a8169bc7c3ed98
Certificate serial: 01A130A1F2216E474A17FFFEC7EEBA8574AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfLQhXs0qcROPlRbVqgWm8fD7Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.mft
Manifest number: 0117
Signing time: Mon 12 Oct 2026 15:01:21 +0000
Manifest this update: Mon 12 Oct 2026 15:01:21 +0000
Manifest next update: Tue 13 Oct 2026 15:01:21 +0000
Files and hashes: 1: en3Dgcg-QCYV7nam7q3FCP5ZkR0.roa (hash: l3a1Se4v22VtVm5ZL/5W5MYgFfditJOkAKvu9Xf04q4=)
2: rfLQhXs0qcROPlRbVqgWm8fD7Zg.crl (hash: yLdnW0Qznn3N9mcRPnSI9jY/YpNh9iod0mFmPxwbb6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfLQhXs0qcROPlRbVqgWm8fD7Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:a1:f2:21:6e:47:4a:17:ff:fe:c7:ee:ba:85:74:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf2d0857b34a9c44e3e545b56a8169bc7c3ed98
Validity
Not Before: Oct 12 15:01:21 2026 GMT
Not After : Oct 13 15:01:21 2026 GMT
Subject: CN=f0f53626735d7b39318641aadf9abdc54de0e10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f8:75:80:71:90:99:19:84:f8:e4:a1:28:9c:
56:a1:e1:05:b3:22:ba:39:ce:35:b6:c4:f7:0e:19:
50:b4:36:94:91:c5:19:67:ca:5d:3a:b1:02:2c:cf:
ee:7e:3e:f9:74:21:e5:86:0b:cf:e4:01:79:31:8d:
92:1a:f7:8f:35:45:44:c9:12:df:bd:3b:80:89:cb:
1c:65:cd:54:82:39:08:9c:69:9f:d6:7c:48:4b:66:
b8:fb:3d:31:21:d7:88:e9:f9:36:83:28:2b:fb:7c:
a3:91:00:10:e8:30:2b:15:52:f8:84:45:e1:b9:d3:
8e:85:71:75:d0:fe:6d:a0:e0:37:bf:73:f4:ff:9a:
14:a7:f5:60:66:ab:ba:1e:d7:3b:7a:a6:02:b8:72:
66:3e:cb:4a:08:94:f0:24:70:f4:32:b2:96:8e:2f:
1a:86:c4:de:3e:ba:a3:a3:35:ec:c4:4a:38:3c:c4:
3d:e7:fd:1d:03:08:8c:c4:84:77:66:a2:05:cb:7b:
a9:09:fb:c8:22:88:80:8a:00:b3:20:d6:2a:ba:bb:
63:12:3f:2e:d1:ca:4d:6d:d0:7f:57:0d:28:36:1d:
7c:e9:04:ea:2f:97:4c:b5:49:41:84:97:67:23:33:
07:15:67:53:90:f9:67:4a:9c:52:24:1b:d5:a2:8a:
4c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F5:36:26:73:5D:7B:39:31:86:41:AA:DF:9A:BD:C5:4D:E0:E1:0F
X509v3 Authority Key Identifier:
keyid:AD:F2:D0:85:7B:34:A9:C4:4E:3E:54:5B:56:A8:16:9B:C7:C3:ED:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfLQhXs0qcROPlRbVqgWm8fD7Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a5:eb:b6:2f:02:5a:42:38:23:72:48:5b:2a:19:09:fd:f1:
a3:22:27:62:12:b1:88:47:27:01:b0:03:73:c4:05:91:75:57:
e7:a3:72:e0:f5:1b:8c:14:df:6e:23:e0:04:c3:95:10:9a:86:
0d:b6:85:13:0a:0b:57:21:d4:82:44:7d:95:4d:5d:7d:95:dc:
0a:9e:91:79:f6:62:3f:17:98:0c:24:4e:c8:33:3b:39:cf:fe:
0f:84:36:2e:e7:ed:e7:de:d5:58:81:e1:60:77:a5:bf:fb:34:
f9:85:7b:6a:c7:50:b4:47:15:84:51:15:3e:2b:5e:9a:56:b5:
81:0b:40:91:d5:8e:b6:fc:4d:7f:82:19:cb:b7:39:9a:a9:5e:
e8:60:58:38:b6:82:52:b6:ae:a3:4b:43:98:e1:e0:4b:12:d8:
dc:eb:32:ea:d7:2c:b0:26:73:ff:7a:ca:69:22:3f:a6:01:3a:
9e:44:6e:d9:39:36:ba:0a:8f:d0:76:da:6e:47:a2:f0:ea:ca:
f4:1a:cc:5e:de:3c:1e:13:28:cf:a1:ef:75:e3:c4:f9:39:28:
de:93:bc:14:28:81:57:d2:fd:b6:e7:54:59:ee:62:c6:47:b1:
0d:0d:93:44:e3:8d:b2:bb:f0:0b:ee:20:45:01:25:1c:51:dc:
02:00:db:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:05:13 2026 by rpki-client