Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
File: doFcfQ6GPCF4D4v0uezDqcZFkpg.mft (raw, json)
Hash identifier: aHZaw4i0eNGiYR+5b1sfWIKTz7MyY2Ibs5Q9w29x7c0=
Subject key identifier: 85:41:5B:78:0F:87:5E:E3:0E:A4:DD:01:31:81:37:DD:15:1A:06:70
Authority key identifier: 76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98
Certificate issuer: /CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298
Certificate serial: 01A0D23707EE4201BE972F99A930CCDDDEC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
Manifest number: 0763
Signing time: Thu 24 Sep 2026 07:00:16 +0000
Manifest this update: Thu 24 Sep 2026 07:00:16 +0000
Manifest next update: Fri 25 Sep 2026 07:00:16 +0000
Files and hashes: 1: NwXP9XjEV_tAQNFwDQBmSN78alU.roa (hash: I0Ts9gFxat3bJUV/IHoujUultkWM8WN3TtuoR0WHIVg=)
2: doFcfQ6GPCF4D4v0uezDqcZFkpg.crl (hash: guaO165qy9UQKA1ciIYGgzyqqTzWveMvV450d0Ry8vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:07:ee:42:01:be:97:2f:99:a9:30:cc:dd:de:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298
Validity
Not Before: Sep 24 07:00:16 2026 GMT
Not After : Sep 25 07:00:16 2026 GMT
Subject: CN=85415b780f875ee30ea4dd01318137dd151a0670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:80:04:65:db:19:40:5b:85:ce:0f:99:34:
7a:0d:79:4d:2a:7e:af:e4:59:42:7f:ee:a4:d4:64:
ab:8f:af:80:83:6e:37:dc:2b:f1:17:21:53:2f:d5:
ec:95:68:c1:a5:60:a1:c7:a1:62:58:93:29:ab:23:
98:87:c2:3a:2b:d4:3b:9e:4d:da:37:99:91:d3:0e:
b6:17:86:78:c7:f4:85:11:ab:41:3e:6d:61:cf:03:
f1:e8:7b:03:0d:21:a1:c3:60:9a:57:00:63:af:7c:
39:f6:2c:40:37:fd:15:d3:e9:2b:08:94:0c:be:a7:
76:c4:84:6b:a5:33:d9:b0:51:dc:bc:57:4e:d6:8f:
f7:f0:90:c9:13:51:5d:7b:77:8a:49:23:2c:f2:a3:
da:16:f0:08:2a:7a:63:84:cc:a7:cb:58:ae:a5:2d:
7d:ed:12:86:37:95:b9:94:09:c1:f1:ab:00:98:43:
db:cd:c2:d7:f3:31:f5:a9:ff:82:a6:c7:4e:80:a9:
a5:7b:1a:50:1e:4f:39:73:14:97:f9:10:2e:cc:dc:
72:b6:d1:ca:f2:ab:d8:79:20:37:d7:a3:0c:96:e8:
5e:f9:51:d8:c6:45:8d:c1:70:63:36:0b:ab:85:fb:
57:8d:cc:7d:24:c9:2b:04:a0:ee:e7:16:75:7d:75:
6f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:41:5B:78:0F:87:5E:E3:0E:A4:DD:01:31:81:37:DD:15:1A:06:70
X509v3 Authority Key Identifier:
keyid:76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:1c:b5:ed:cc:18:71:42:4f:24:e9:3f:06:62:98:8a:8a:6c:
59:f1:e1:11:73:5d:68:9c:7e:c0:d5:7a:bf:9d:cb:23:bc:84:
5b:84:95:7a:40:16:e3:71:43:17:f3:32:52:a5:01:0c:17:32:
38:d2:89:0a:f8:42:a6:df:3a:51:56:5a:c5:01:3b:31:7e:c5:
59:bb:17:49:d9:17:3d:e9:43:d4:5e:dd:7c:92:fc:76:ed:7b:
ae:78:e2:b6:c1:91:5b:5d:5d:f5:cc:09:56:87:fe:64:cc:5f:
a8:01:95:77:48:46:ab:48:71:50:5d:ef:17:a6:f8:46:e7:63:
5d:bc:7d:61:4b:59:00:4c:c6:aa:58:53:03:33:e2:9b:3b:d3:
ce:bf:84:e2:19:65:95:56:a6:c5:bd:5b:61:6d:50:7d:de:42:
2c:54:04:f3:2f:e6:7e:1f:44:ca:91:ba:34:1e:36:d7:30:92:
b9:f3:9f:4a:e5:9b:9f:d1:ad:5f:5c:ee:ba:a9:1c:03:d3:4c:
c1:24:4b:c5:18:d9:2a:04:71:c4:5c:81:c0:f7:3d:71:10:40:
01:62:4e:8c:8a:4b:a4:1c:d2:33:58:f9:c6:c5:14:60:2c:5f:
36:03:4b:66:c0:49:83:47:4f:b1:86:2c:54:58:fc:20:fe:b9:
4d:3e:62:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:06:54 2026 by rpki-client