Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/n0GAXmDdl0CETR3HpMFKq6uEhR4.mft
File: n0GAXmDdl0CETR3HpMFKq6uEhR4.mft (raw, json)
Hash identifier: xTzKTFrFhrfrYFHHSEyvGlba7E/X5qGmDtRlLs/qEu8=
Subject key identifier: 88:3D:A1:37:A4:3A:A4:10:D7:97:73:F3:79:E5:1A:89:82:CA:CE:BD
Authority key identifier: 9F:41:80:5E:60:DD:97:40:84:4D:1D:C7:A4:C1:4A:AB:AB:84:85:1E
Certificate issuer: /CN=9f41805e60dd9740844d1dc7a4c14aabab84851e
Certificate serial: 01A0FC7DA41E830F8384462B07FBDA56CECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n0GAXmDdl0CETR3HpMFKq6uEhR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/n0GAXmDdl0CETR3HpMFKq6uEhR4.mft
Manifest number: FC
Signing time: Fri 02 Oct 2026 12:01:27 +0000
Manifest this update: Fri 02 Oct 2026 12:01:27 +0000
Manifest next update: Sat 03 Oct 2026 12:01:27 +0000
Files and hashes: 1: TOC7yt8pwcnAu99gFYCGhlQGgZg.roa (hash: PsN09pvtWWcsEJydhp81MFNJ3GP97ijkJSu2F+CCjjs=)
2: n0GAXmDdl0CETR3HpMFKq6uEhR4.crl (hash: 0bIi/uXXID0ap8/roQDO5iWQ67/5S9Ot8xBFLCo0xnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/n0GAXmDdl0CETR3HpMFKq6uEhR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/n0GAXmDdl0CETR3HpMFKq6uEhR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n0GAXmDdl0CETR3HpMFKq6uEhR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 12:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:7d:a4:1e:83:0f:83:84:46:2b:07:fb:da:56:ce:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f41805e60dd9740844d1dc7a4c14aabab84851e
Validity
Not Before: Oct 2 12:01:27 2026 GMT
Not After : Oct 3 12:01:27 2026 GMT
Subject: CN=883da137a43aa410d79773f379e51a8982cacebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0d:2a:ae:00:ad:be:dc:be:5e:d6:92:3a:58:
56:84:8b:3b:e7:20:27:b9:2a:4e:89:c5:87:57:d9:
f5:44:a7:57:72:fd:52:dc:42:24:f9:90:af:d8:b0:
7d:52:2c:7c:02:02:c1:1e:a1:8f:67:87:a3:e1:d2:
97:50:4e:5c:cf:0d:98:66:bb:9b:57:ab:e5:a6:d6:
11:d2:01:e0:c7:87:05:a1:3a:9c:f8:ba:d2:07:8c:
dd:67:7e:da:3d:2b:bb:57:95:8f:b3:dd:65:3a:49:
0c:a9:cb:c1:75:65:18:78:7b:2e:d9:d3:79:6b:0a:
aa:4f:dc:7a:23:ac:85:ef:59:75:3b:3a:49:01:e1:
9a:73:4f:a3:a1:e8:68:a8:08:0c:e7:a8:53:c1:c6:
ec:0f:f0:af:eb:6e:be:b4:40:d9:65:f0:85:52:21:
08:d1:3e:d4:c3:12:b7:bf:df:cc:d5:1d:ad:8a:38:
16:1b:8f:8a:31:f2:5a:f9:ec:f2:74:0e:30:ca:b0:
e7:fd:3a:db:4f:36:a2:70:bb:73:bc:b2:e4:c2:80:
56:d6:65:18:b0:f8:b5:a7:17:55:7f:43:a6:ad:9c:
f7:1a:c6:32:f9:41:91:4b:40:20:62:31:9a:4f:46:
4e:e8:f2:67:20:4e:56:89:ea:81:42:58:9d:0b:9e:
f4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3D:A1:37:A4:3A:A4:10:D7:97:73:F3:79:E5:1A:89:82:CA:CE:BD
X509v3 Authority Key Identifier:
keyid:9F:41:80:5E:60:DD:97:40:84:4D:1D:C7:A4:C1:4A:AB:AB:84:85:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n0GAXmDdl0CETR3HpMFKq6uEhR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/n0GAXmDdl0CETR3HpMFKq6uEhR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/n0GAXmDdl0CETR3HpMFKq6uEhR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:41:1b:75:eb:47:11:15:1b:9e:d2:2b:d2:3a:c5:b1:38:b6:
5c:66:5b:ba:a7:dd:54:67:48:25:5c:9e:81:2a:5f:bc:04:0f:
f3:5e:21:77:4a:d0:69:e6:36:89:04:36:73:00:39:ff:9d:c3:
0e:56:d5:0f:38:9e:89:70:d9:5d:17:35:77:39:68:e2:ae:b2:
92:3b:16:a3:d0:bc:7f:1e:49:79:16:81:28:87:fa:de:91:24:
00:68:0c:a4:04:e5:58:f1:b8:5e:57:34:a9:b7:0e:8a:de:b3:
7a:67:f5:85:53:43:53:ed:24:e5:64:ca:12:91:8d:37:91:75:
15:1a:16:2a:48:20:77:c9:e9:fa:6f:c3:b0:f2:62:f5:3c:4c:
5d:f5:98:8b:28:88:4f:e4:99:a4:45:70:6d:bb:20:4f:e8:19:
68:b1:86:10:c1:82:6c:2c:61:c7:17:2e:97:0e:fa:11:0f:2e:
d9:d0:a0:83:af:d6:52:08:e1:90:f8:4d:1b:7a:22:76:ee:25:
8a:3c:fe:68:b1:d7:39:04:5f:c5:ee:3a:20:94:56:b3:3f:e1:
9d:4f:ab:1b:b9:7b:ea:3f:57:55:21:71:63:2f:5b:8f:b0:10:
0a:01:ba:f7:4e:2a:f5:b6:70:dd:14:34:ea:76:6e:4a:84:94:
0b:ee:06:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:09:42 2026 by rpki-client