Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.mft
File: RPCGM8H1_XFU2I3h1syc17gEMK0.mft (raw, json)
Hash identifier: FRPpBKKH5NiPZouEGOQXs3I7OLO6Twxr4lfTPrAr8Do=
Subject key identifier: 84:E8:E6:01:47:A4:F1:9F:C1:AF:A7:55:F9:AD:F9:C7:E7:99:2B:0F
Authority key identifier: 44:F0:86:33:C1:F5:FD:71:54:D8:8D:E1:D6:CC:9C:D7:B8:04:30:AD
Certificate issuer: /CN=44f08633c1f5fd7154d88de1d6cc9cd7b80430ad
Certificate serial: 01A0D6150D13529868CB85173E888D1A5012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPCGM8H1_XFU2I3h1syc17gEMK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.mft
Manifest number: 0134
Signing time: Fri 25 Sep 2026 01:01:38 +0000
Manifest this update: Fri 25 Sep 2026 01:01:38 +0000
Manifest next update: Sat 26 Sep 2026 01:01:38 +0000
Files and hashes: 1: 5KctcxsYT_6CBJ2cdoYPOhQAGc4.roa (hash: +1bCb5V2QswAKGR65R9SngG1RC/2PS62IO4DT3u7w0w=)
2: MT7FDc3brVHPS51pC1TSYkG931E.roa (hash: OXmE7HUkMdWGmBsN2LVDSTT5wVdQkht8zETc4dCdqB4=)
3: RPCGM8H1_XFU2I3h1syc17gEMK0.crl (hash: wSCeMGf8vIygM+1eV5IUUJlHVNsFhdtpQw7Dsx0lTEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPCGM8H1_XFU2I3h1syc17gEMK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:15:0d:13:52:98:68:cb:85:17:3e:88:8d:1a:50:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f08633c1f5fd7154d88de1d6cc9cd7b80430ad
Validity
Not Before: Sep 25 01:01:38 2026 GMT
Not After : Sep 26 01:01:38 2026 GMT
Subject: CN=84e8e60147a4f19fc1afa755f9adf9c7e7992b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0d:08:f6:bb:0d:b7:ad:f0:64:e2:50:16:e6:
40:c7:31:91:49:7d:2d:66:1d:2a:ae:e6:d4:e5:39:
99:7e:25:ff:d9:c1:d1:6a:33:85:72:44:7a:14:d4:
1a:c1:ff:03:3b:66:42:07:e9:dc:5b:7f:c7:53:e7:
37:5b:34:cf:aa:e8:62:69:f1:64:1b:69:b0:5d:8b:
c8:e6:bc:d6:40:26:b6:aa:fd:a4:8d:a8:ab:3e:a5:
ca:db:c5:2f:57:97:61:11:21:7c:7f:15:3e:82:32:
22:2a:0e:3a:0e:51:22:62:9b:bf:e8:96:b6:0c:25:
fa:03:fa:94:6c:5b:0f:18:52:b0:fa:2d:48:c8:b2:
51:c3:40:df:33:0d:98:25:b2:3a:ae:8e:24:bf:3f:
63:00:01:22:82:cc:8f:8b:25:3a:f9:78:51:32:ac:
89:8d:39:cb:d6:df:17:f8:63:89:58:8b:e8:23:06:
61:20:03:6b:3a:d2:95:58:7e:b1:58:79:7d:18:7c:
e2:41:44:81:81:b1:2c:2d:9d:6f:c7:50:80:f8:c3:
c0:0c:a9:23:fd:3d:e3:77:56:51:4a:2f:8f:33:2b:
38:f9:2e:2e:48:61:92:66:90:59:bf:0a:69:df:79:
b5:e7:4c:bc:56:00:fc:0e:74:1b:4a:35:ce:20:8b:
2a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E8:E6:01:47:A4:F1:9F:C1:AF:A7:55:F9:AD:F9:C7:E7:99:2B:0F
X509v3 Authority Key Identifier:
keyid:44:F0:86:33:C1:F5:FD:71:54:D8:8D:E1:D6:CC:9C:D7:B8:04:30:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPCGM8H1_XFU2I3h1syc17gEMK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:35:62:54:67:62:71:94:8e:09:82:3f:4c:0a:fc:69:eb:52:
33:c8:29:2b:f1:72:c5:b1:2b:9d:d3:76:ba:26:39:bb:74:b8:
bb:de:f5:a2:64:d4:82:bf:35:6e:50:a8:a4:31:80:eb:57:3d:
93:3d:cf:52:d0:7d:55:ed:8e:ad:41:e9:9b:6d:e7:1e:7e:04:
63:92:a7:92:51:c2:74:0c:c6:51:ed:53:aa:4d:99:5f:39:88:
f9:cd:ab:b5:de:12:8c:dc:f6:db:fe:bb:48:66:10:61:32:64:
7e:67:4c:3e:c5:7f:7f:0e:99:1f:80:10:11:54:79:c8:19:3c:
4e:d2:43:ba:93:6f:70:42:dd:73:65:db:e1:45:e2:1a:ba:f7:
27:28:11:cf:08:1c:8e:5c:e3:a3:49:34:54:93:47:9a:4d:ca:
79:c7:a1:34:71:80:65:0e:ff:9f:3f:11:a0:26:54:fd:0e:fa:
ea:0a:6d:62:9c:7d:29:5b:24:44:06:aa:7d:78:73:bc:ed:8f:
12:27:21:bb:25:1a:94:6e:0d:81:64:5a:e4:eb:37:1e:2e:70:
e0:3f:61:db:42:a9:cb:61:17:11:c3:ec:9b:78:1d:68:fb:4e:
2e:c5:11:87:fd:14:69:c6:ba:c2:7d:20:88:75:d0:19:c8:a9:
aa:0d:42:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:12:42 2026 by rpki-client