Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
File: fGlngv8SGuWm2dXPo4R5dotr8L0.mft (raw, json)
Hash identifier: l6K/j4Aj2M+HAOv6QBFm2DEbcPg4IpH+MKU85zD0rnY=
Subject key identifier: 4B:9B:FF:FF:29:E7:BF:F7:20:E0:7E:61:B2:DC:B6:45:67:68:84:16
Authority key identifier: 7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
Certificate issuer: /CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Certificate serial: 01A1DBDD3BCFD23ECA0170B137E8AB305044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
Manifest number: 1AF5
Signing time: Sat 14 Nov 2026 21:01:11 +0000
Manifest this update: Sat 14 Nov 2026 21:01:11 +0000
Manifest next update: Sun 15 Nov 2026 21:01:11 +0000
Files and hashes: 1: VDuV_ga9fKWg5ZTg4MIqY7BMCyw.roa (hash: KhFc35C6NWJw+95DJdGU/WqBGVukwlgQW3Tv6X8QShQ=)
2: YV2FC6tSLQepIUe84M0yNrIYwXI.roa (hash: a1BK4hhpvi1wRKKydzXpZZxOv3b6LUqaoMmqbdgZ8n8=)
3: fGlngv8SGuWm2dXPo4R5dotr8L0.crl (hash: baPnz8B9XysNLLrfwUwgycc9iprnb3WgP/uO9PN3u90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:dd:3b:cf:d2:3e:ca:01:70:b1:37:e8:ab:30:50:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Validity
Not Before: Nov 14 21:01:11 2026 GMT
Not After : Nov 15 21:01:11 2026 GMT
Subject: CN=4b9bffff29e7bff720e07e61b2dcb64567688416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:da:76:49:06:2b:77:cf:cc:22:a3:be:b4:7c:
7f:42:cb:5e:fa:c2:26:ce:d9:d0:f2:de:46:43:56:
64:b1:1c:1d:d8:83:3e:b1:10:96:a7:77:ea:1d:76:
4e:3d:5d:e4:73:86:02:a5:31:7a:91:18:91:9f:c4:
b1:78:17:02:63:4a:ed:47:9f:e5:61:38:e1:e5:9f:
22:21:7a:49:45:1e:3a:be:84:cf:03:1e:44:d5:8b:
37:13:13:3f:c8:cf:97:94:5b:99:30:fc:2e:4b:97:
7d:0e:d5:b7:6c:67:6f:b1:62:81:c5:17:17:21:19:
89:cb:56:bb:a4:62:48:6d:ca:39:fe:4e:79:6f:0d:
cd:ac:dd:e1:a6:14:3b:6f:b8:55:69:a1:1b:d9:9a:
fc:a6:c9:f3:9a:72:73:b3:5d:a9:26:22:12:d6:bf:
44:81:ee:75:71:d5:6b:02:24:0d:c1:98:4e:15:07:
65:ad:f5:87:31:6e:78:26:2f:20:ab:72:8e:5b:24:
ca:88:7c:e1:7d:ea:5e:e9:41:b7:c3:d8:a4:fb:b2:
99:62:d5:07:4f:0d:a4:5b:95:eb:02:be:ae:5e:ce:
a6:31:b5:8f:9d:fc:83:86:00:4f:4b:7a:65:af:41:
fc:9a:6c:e3:0e:87:eb:ce:71:16:02:b6:39:8d:2f:
cf:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9B:FF:FF:29:E7:BF:F7:20:E0:7E:61:B2:DC:B6:45:67:68:84:16
X509v3 Authority Key Identifier:
keyid:7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a8:47:e7:8c:b9:0f:cb:82:0b:69:67:20:6e:8b:24:58:c5:
9e:8a:f8:22:35:cd:20:83:31:90:97:4d:ab:3f:77:85:cf:50:
0a:e1:3e:41:cd:da:bd:e4:0c:7a:63:d2:79:0b:9a:1e:fe:5a:
41:e8:6d:67:1f:ee:84:1f:81:de:0d:a4:79:b4:86:3b:a1:c1:
7b:79:38:62:e9:cc:6e:5a:67:27:14:3f:66:92:cf:81:75:89:
e8:e3:8d:4f:3b:3e:35:07:03:6f:7c:e0:52:0d:57:e0:fe:89:
6a:05:c3:09:4e:bd:33:65:4d:31:1c:ab:dd:5d:bf:95:7b:4b:
3d:98:9a:33:6b:24:bd:a5:eb:c7:64:2e:1f:0b:ff:15:b7:ba:
35:56:f3:42:a0:fa:3b:10:a9:96:54:6a:b4:1f:b6:7b:f6:63:
c4:06:dd:ee:f9:c0:e6:53:72:a7:7d:58:bd:34:55:be:71:97:
dc:cb:c5:43:7b:ed:42:79:f1:ed:5e:0c:84:f0:4b:c0:fb:e2:
b0:d7:62:49:eb:4e:93:23:9d:23:97:fa:6d:f0:e9:e8:dc:42:
df:bd:7f:25:d6:0e:0e:93:be:42:c5:65:a8:43:7a:bf:00:43:
73:85:f1:15:37:37:84:a3:7f:eb:2d:f6:99:7e:09:9a:c1:17:
12:ce:2f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:59:31 2026 by rpki-client