Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
File: 20GLzzGUMXucKIEZMZb-tZj9nu4.mft (raw, json)
Hash identifier: lVTdbhExue+ChZS46mQ28QyPKMwqW5rbXdk9NPiMPfs=
Subject key identifier: 5A:BE:C8:AF:E5:A1:AF:77:D9:48:BC:2C:FD:8F:8D:DD:0D:18:9C:53
Authority key identifier: DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
Certificate issuer: /CN=db418bcf3194317b9c2881193196feb598fd9eee
Certificate serial: 01A0CD48084BD9CABC7E58B15C8D6B7E4166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
Manifest number: 1A69
Signing time: Wed 23 Sep 2026 08:00:45 +0000
Manifest this update: Wed 23 Sep 2026 08:00:45 +0000
Manifest next update: Thu 24 Sep 2026 08:00:45 +0000
Files and hashes: 1: 20GLzzGUMXucKIEZMZb-tZj9nu4.crl (hash: mAiT6hrWHQNqAFhm1Ei0Jgx4mvKR0+1tHCoQgR0BIao=)
2: oT3Rxl2OFf4kaJDbTi8hc1n-RvM.roa (hash: U0lf5akSoaRZ7m2KsTwFQy8jypSmGTV7L8sismPyTHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:48:08:4b:d9:ca:bc:7e:58:b1:5c:8d:6b:7e:41:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db418bcf3194317b9c2881193196feb598fd9eee
Validity
Not Before: Sep 23 08:00:45 2026 GMT
Not After : Sep 24 08:00:45 2026 GMT
Subject: CN=5abec8afe5a1af77d948bc2cfd8f8ddd0d189c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cb:ec:30:3c:13:7e:45:45:a0:b7:a7:3f:5e:
20:3f:60:9a:bd:fd:b0:7f:fc:ee:62:b3:dd:79:28:
31:1c:e6:da:d7:03:a5:46:8d:60:07:cd:e1:07:20:
80:9a:06:3d:82:90:f4:36:28:da:fb:45:f9:eb:e3:
e2:5b:3c:a6:0f:43:9d:fd:d0:5f:1b:fe:ea:57:74:
1c:a7:30:bc:23:e9:74:ba:10:c1:64:d6:00:a5:63:
57:a2:80:b7:e8:cf:b4:b4:03:ba:f9:9d:ac:b8:05:
04:ae:cc:49:5e:f0:f7:50:2a:79:fc:68:44:48:ba:
e8:18:5c:8a:cc:86:21:99:38:39:83:f1:77:1f:35:
5a:13:41:99:51:7b:91:2e:d7:f8:dc:f7:f6:89:fe:
e9:5e:d1:c2:b9:89:db:aa:2c:d9:6d:7b:60:00:41:
af:29:18:39:d9:27:4a:ef:75:cf:00:fb:c8:a4:c6:
8e:ad:6d:d1:44:09:ee:6f:49:10:d5:5d:22:58:da:
a5:92:ea:46:ef:f9:df:8c:93:7e:3d:2b:40:65:0a:
4e:e1:7b:f7:93:b5:83:42:3f:c5:35:92:6f:02:48:
fc:39:91:4d:74:7c:be:1a:ba:10:af:ab:89:c4:43:
64:10:20:7a:ed:cc:fd:b5:d1:68:7b:68:3c:f8:97:
92:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BE:C8:AF:E5:A1:AF:77:D9:48:BC:2C:FD:8F:8D:DD:0D:18:9C:53
X509v3 Authority Key Identifier:
keyid:DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:3a:90:02:6b:b5:20:60:b7:49:53:ed:17:bf:af:da:4d:4c:
6f:3d:7b:bc:96:a4:31:ff:de:37:5e:a3:33:fb:ef:60:be:58:
68:3b:cd:ff:38:ca:0a:67:ae:2f:e3:7a:be:f6:de:3e:d6:8e:
1c:d3:2a:35:66:96:63:ca:2b:2f:a1:b1:cb:a0:68:27:9e:b2:
eb:01:fe:aa:95:f2:1e:96:37:13:6b:9c:62:22:34:53:5a:c7:
ca:36:a3:74:33:3f:65:21:31:3f:f4:e9:ab:0f:46:55:9a:16:
ae:f3:dc:72:6c:78:34:8f:a1:eb:28:64:df:e8:24:0d:83:87:
98:f3:68:76:9a:e6:74:d4:ab:ae:eb:90:ee:0f:1c:ca:fe:85:
fd:16:da:eb:05:2d:a6:0d:a0:d3:a8:fb:cd:d0:de:38:bf:14:
51:ef:20:05:4b:48:3e:19:b5:41:84:3b:dc:d0:f4:c1:13:b8:
5e:f1:56:36:32:b4:b5:4e:ce:9b:34:b6:6b:ff:99:40:4b:b8:
33:19:34:89:9e:c2:36:e7:e4:af:92:b8:f2:ad:10:5f:5b:8c:
3f:b6:40:73:3d:dc:8d:64:63:39:79:27:46:81:a2:21:48:a0:
5a:11:9a:5d:20:bf:a1:b9:fb:8b:d4:c8:08:77:87:90:7b:33:
66:fc:ed:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:14:29 2026 by rpki-client