Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
File: rfRJdaXb2_gjtKCmt-65mxSENn4.mft (raw, json)
Hash identifier: HE3uc2Tx+aX6WM89bMc+vm9jVe1O8ZEDCPA+ILD0E7o=
Subject key identifier: 70:1A:C2:EB:7F:C6:C8:BD:C3:D4:F1:11:34:45:5E:68:85:D0:D6:A8
Authority key identifier: AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E
Certificate issuer: /CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
Certificate serial: 01A0D15B97525E88A770B9E8F9AE4B4D7D9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
Manifest number: 0A00
Signing time: Thu 24 Sep 2026 03:00:35 +0000
Manifest this update: Thu 24 Sep 2026 03:00:35 +0000
Manifest next update: Fri 25 Sep 2026 03:00:35 +0000
Files and hashes: 1: DhXIhTNHBAE7NvkalrnD2mWPOgc.roa (hash: XkSLod7NkjdHpR6f/sX0hfuPnykt4HOPZbPdtRM87jE=)
2: rfRJdaXb2_gjtKCmt-65mxSENn4.crl (hash: pQIX7L1lbPkGs6vAg6cixzxcPbZR+lkbrWTP6ZB8kBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:97:52:5e:88:a7:70:b9:e8:f9:ae:4b:4d:7d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
Validity
Not Before: Sep 24 03:00:35 2026 GMT
Not After : Sep 25 03:00:35 2026 GMT
Subject: CN=701ac2eb7fc6c8bdc3d4f11134455e6885d0d6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5b:43:b8:e2:92:cf:1d:82:c5:59:2a:34:0b:
f2:af:82:59:fa:ac:83:b5:ea:50:d0:34:87:2d:d6:
97:d4:84:ab:3f:53:b9:b1:41:87:76:41:36:a2:da:
cb:bf:92:9a:22:1c:a9:0c:92:f4:0c:8c:be:47:02:
03:fa:32:23:09:34:1a:2c:88:3c:39:4f:4e:8e:cf:
fc:f3:dc:96:64:8d:72:10:9d:7c:0c:a1:28:b0:3c:
d3:cc:d2:f3:3a:6a:1c:5e:f9:38:e6:70:2e:95:9a:
c8:f7:6f:da:e0:f3:05:94:3a:28:bf:a9:cc:d0:31:
3a:27:6d:ea:93:48:06:b5:52:e8:84:27:10:a8:bb:
ba:43:ce:6a:8d:6d:72:d9:a8:24:54:bb:38:e4:e0:
ee:a7:af:de:b8:1a:05:74:19:ed:d7:91:97:2d:ac:
e4:9f:d0:59:e1:c8:ef:f7:81:f1:ec:08:f5:e8:db:
a1:b8:47:21:36:52:6f:ed:31:32:de:00:1c:60:fe:
f4:bc:1c:6c:9d:90:86:fb:d2:9f:83:68:e3:5d:85:
68:80:d4:3f:80:3b:17:6e:6c:b8:b2:80:0e:31:34:
48:99:a4:c0:9c:1e:b8:00:02:d7:79:2f:dd:70:da:
fa:55:af:8e:55:e7:23:a2:9f:82:9f:50:cf:9c:08:
6f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1A:C2:EB:7F:C6:C8:BD:C3:D4:F1:11:34:45:5E:68:85:D0:D6:A8
X509v3 Authority Key Identifier:
keyid:AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:92:b3:81:63:fa:e5:18:88:a8:db:32:13:eb:83:ff:e9:6d:
7b:dd:ec:f8:07:2d:c1:78:96:18:fd:e6:62:97:e1:80:25:a5:
5f:88:0a:fe:d7:68:3b:ab:c6:59:eb:0f:30:59:bd:fc:c8:34:
94:1b:66:e1:32:5a:bc:4a:b8:07:af:47:c2:70:55:40:06:bf:
22:6c:72:ba:c5:29:95:55:ad:e7:e3:b7:52:ef:81:8c:f5:6b:
3e:cd:cd:87:01:fa:ea:e8:a3:f8:7c:72:6f:f6:9e:92:4f:a4:
44:62:5b:18:67:56:ad:e3:af:c4:8a:9e:74:13:07:2b:e7:c2:
b4:8e:72:aa:fa:d1:94:82:52:62:6e:0b:19:75:98:b8:3a:3f:
bd:b4:eb:5e:21:27:9a:79:ec:88:42:20:31:2b:ea:00:34:4e:
5f:49:8c:b1:a2:2d:76:c8:b1:21:53:50:dd:53:d8:8c:3b:67:
e3:69:31:02:14:ad:59:10:0f:39:d0:6a:e0:5b:eb:d0:22:72:
14:fa:2f:e7:4a:7d:ab:7c:20:b2:ca:af:6b:f5:4d:45:cf:e5:
c7:b0:8d:71:95:ca:c5:d6:8e:ef:b5:5f:70:25:31:cc:26:0d:
0d:5e:db:7e:b3:3d:06:72:69:3e:4d:87:eb:18:27:bb:b8:1b:
38:56:fc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:57:42 2026 by rpki-client