Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
File: doFcfQ6GPCF4D4v0uezDqcZFkpg.mft (raw, json)
Hash identifier: EM6bCzv5PiysBN2HSpN+POPclhq5Pl14zt062ObHPqY=
Subject key identifier: B0:9C:7D:AC:8F:98:D4:B6:76:74:5D:CB:F2:99:D8:B3:EA:BA:45:82
Authority key identifier: 76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98
Certificate issuer: /CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298
Certificate serial: 01A1DACA91B24816766776EA6F2BF509475F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
Manifest number: 07EC
Signing time: Sat 14 Nov 2026 16:01:10 +0000
Manifest this update: Sat 14 Nov 2026 16:01:10 +0000
Manifest next update: Sun 15 Nov 2026 16:01:10 +0000
Files and hashes: 1: NwXP9XjEV_tAQNFwDQBmSN78alU.roa (hash: I0Ts9gFxat3bJUV/IHoujUultkWM8WN3TtuoR0WHIVg=)
2: doFcfQ6GPCF4D4v0uezDqcZFkpg.crl (hash: lolJwl9bfC3km24oIDToOMkkehqG4+HqIP+4lS9afrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:ca:91:b2:48:16:76:67:76:ea:6f:2b:f5:09:47:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298
Validity
Not Before: Nov 14 16:01:10 2026 GMT
Not After : Nov 15 16:01:10 2026 GMT
Subject: CN=b09c7dac8f98d4b676745dcbf299d8b3eaba4582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b4:2f:40:6b:a8:ea:36:74:1a:2e:87:55:81:
eb:2c:37:b6:b6:76:bd:1c:30:2b:0d:9a:99:27:4a:
ac:d1:d8:48:7b:ae:9f:63:c2:e3:cd:1e:d7:4f:fa:
3e:63:77:a3:1f:2c:10:a1:f9:ca:ed:cf:01:f9:74:
d8:a2:d2:4c:34:89:58:27:3d:8e:7b:55:e0:a3:1a:
21:24:b5:53:0b:56:eb:24:4a:17:6c:43:e5:80:93:
ab:e8:1d:0b:35:29:1f:a8:6a:cb:26:bf:fd:44:e3:
b1:6d:2f:eb:e3:54:95:8d:2f:8d:4f:2e:00:c1:0f:
cf:cf:7d:1b:14:33:13:bb:e6:b9:ae:75:81:31:b1:
23:10:d9:aa:43:25:76:86:29:af:fd:fd:a1:f1:91:
51:4f:d6:94:ae:1e:8d:fb:96:79:8d:83:dc:de:31:
dd:ee:36:58:f0:36:df:5d:c9:6d:7e:ee:af:67:13:
88:97:b8:de:be:e5:36:31:34:18:d2:e7:78:6d:03:
d2:ef:cf:8f:06:29:02:bf:43:fa:fc:8b:1b:fd:6a:
b3:28:ce:9a:24:ca:9f:c1:aa:cb:f7:b6:a8:0f:d9:
31:2b:6e:b7:55:98:82:74:e5:8a:01:61:19:84:06:
f6:0e:21:fe:0f:8a:30:27:30:a1:50:73:c9:67:5e:
9c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9C:7D:AC:8F:98:D4:B6:76:74:5D:CB:F2:99:D8:B3:EA:BA:45:82
X509v3 Authority Key Identifier:
keyid:76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6c:40:e6:42:60:5c:2d:74:80:20:e0:1b:53:70:83:a2:49:
a4:e7:1c:95:b2:b1:ad:5a:41:0b:2a:db:0f:50:83:92:9f:42:
18:d1:46:59:0c:67:97:b3:77:5b:de:3f:c2:03:93:c3:57:6a:
b2:66:2b:9b:fb:cc:6d:10:3b:56:83:81:1d:4b:79:0c:00:13:
f7:50:77:29:63:59:ec:ca:e0:c9:a2:3b:f5:49:27:0f:e1:cb:
21:e1:28:a2:93:65:50:aa:87:3e:29:e8:79:b6:2b:fb:70:dc:
f8:b9:10:a5:4d:bc:da:33:00:49:44:5f:b8:27:be:78:50:cb:
71:44:03:40:65:5c:f8:2a:7e:df:0b:19:7c:fd:53:a9:2f:5a:
a7:0a:17:f0:7e:9f:3e:b5:05:07:86:5f:69:ff:5e:ff:f9:03:
33:a3:18:47:ee:18:f0:2b:7c:9f:52:dd:34:15:f1:e5:f2:5f:
64:21:b8:7f:88:de:72:df:71:a7:12:16:06:2c:e3:3e:9f:59:
51:b0:fc:fc:70:ee:62:20:31:17:06:a2:3b:8b:b9:d8:fd:3e:
a7:f6:e1:c7:4b:4e:a1:1f:96:6a:3b:af:0e:68:f0:87:19:52:
6c:5b:1f:16:0d:13:df:d1:4a:a4:9f:4e:96:11:63:fd:68:f6:
f1:89:15:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:05:33 2026 by rpki-client