Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
File: fGlngv8SGuWm2dXPo4R5dotr8L0.mft (raw, json)
Hash identifier: clVjWIAPDXnXXWBmKh1SZGLr0pu3LpkB7auBElPOEhk=
Subject key identifier: EF:54:2D:1A:25:F5:6B:26:56:AB:04:98:95:24:AF:4E:26:D0:72:1D
Authority key identifier: 7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
Certificate issuer: /CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Certificate serial: 01A0D34B2930CA1F5909F4E7527911C5B0F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 12:01:53 +0000
Manifest this update: Thu 24 Sep 2026 12:01:53 +0000
Manifest next update: Fri 25 Sep 2026 12:01:53 +0000
Files and hashes: 1: VDuV_ga9fKWg5ZTg4MIqY7BMCyw.roa (hash: KhFc35C6NWJw+95DJdGU/WqBGVukwlgQW3Tv6X8QShQ=)
2: YV2FC6tSLQepIUe84M0yNrIYwXI.roa (hash: a1BK4hhpvi1wRKKydzXpZZxOv3b6LUqaoMmqbdgZ8n8=)
3: fGlngv8SGuWm2dXPo4R5dotr8L0.crl (hash: 6S0K+GDBB2UEBtXwfyUleU+0LYVvOahzGcypX8gXe9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4b:29:30:ca:1f:59:09:f4:e7:52:79:11:c5:b0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Validity
Not Before: Sep 24 12:01:53 2026 GMT
Not After : Sep 25 12:01:53 2026 GMT
Subject: CN=ef542d1a25f56b2656ab04989524af4e26d0721d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fb:25:71:f9:8e:a4:62:a6:f5:e4:5c:f1:74:
2f:fc:4d:63:2c:7f:6f:1c:1a:6d:0f:3c:23:e3:aa:
50:ca:76:87:a9:6f:2e:3c:18:a5:74:cc:0d:0c:64:
e7:06:ce:9a:a5:95:9e:75:84:9f:e7:ff:ee:5b:ad:
c6:5d:02:05:80:5e:d8:a5:8d:67:aa:12:54:56:20:
01:2c:25:61:ae:f2:79:db:35:eb:c2:71:06:43:92:
9e:6b:c2:80:d7:60:2a:ff:a7:f2:05:58:a9:91:74:
25:36:ef:bb:86:b1:b7:f3:ad:31:74:b8:0a:0e:c5:
21:9e:1c:81:95:5b:ff:af:1a:cc:bd:eb:58:cd:d5:
a4:b7:9d:b6:1d:79:8e:c1:37:0c:cf:38:53:d8:cb:
2a:80:9a:a4:57:55:97:8d:08:72:76:54:b1:d5:e5:
3f:53:d8:ad:38:2e:8c:a0:69:21:3e:7e:cc:46:84:
3e:e4:52:3f:1a:55:79:2b:49:d0:85:78:73:7f:70:
5b:18:e0:5c:5a:84:9d:be:8a:69:cc:d1:ee:a8:43:
20:df:ac:43:6d:27:8a:e4:2d:36:36:16:e8:9d:2b:
35:e1:8d:51:a3:18:04:a2:cd:4f:d0:a6:9f:53:d5:
59:7a:60:ed:9b:0f:bd:88:f5:fb:b9:0b:4d:39:81:
b5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:54:2D:1A:25:F5:6B:26:56:AB:04:98:95:24:AF:4E:26:D0:72:1D
X509v3 Authority Key Identifier:
keyid:7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d9:7b:0a:22:80:50:37:8e:41:14:b2:6b:2d:57:a0:2c:fc:
48:cb:9c:49:c8:9a:bc:2f:50:81:b1:ac:bd:f8:47:a0:cb:7c:
99:87:e6:3b:43:32:97:9d:e0:39:aa:d0:16:c7:df:36:05:d5:
51:54:96:e0:d1:e9:b9:e3:d8:92:ff:ea:50:d3:1d:cd:88:4a:
da:e5:a6:f2:67:19:05:be:7d:98:b6:03:a7:7b:fc:51:44:54:
f1:85:e5:ac:bd:03:e0:8e:30:ba:1a:42:f2:77:fa:a7:40:08:
02:ad:d0:51:34:5a:42:af:38:91:20:be:4f:08:e1:c8:fc:82:
ec:9c:25:69:5f:a3:4d:58:dc:37:4a:56:59:7b:4f:f7:ab:2b:
16:61:64:51:08:03:73:8a:33:09:3a:9d:89:d6:75:1a:2f:02:
f2:49:08:58:ae:6b:b3:96:d3:06:0d:53:5e:a8:c2:ac:c8:8e:
06:83:4f:36:db:f9:7a:3f:be:36:00:f8:dc:c1:79:57:46:38:
dd:42:8d:6a:20:90:af:55:4b:1e:64:33:ec:6e:c6:f1:6a:b1:
78:59:ef:16:9d:dc:ad:8e:b3:e8:70:c2:e0:59:42:6f:69:0a:
3c:6a:ce:07:12:e4:9e:d0:c2:e4:83:4f:84:d1:ca:00:13:c5:
aa:d0:ca:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:40:22 2026 by rpki-client