Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
File: rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft (raw, json)
Hash identifier: BdzpCYvJqDeTK/FWP/xnpyGvSzrWWrClbjwMC4ieN2g=
Subject key identifier: 23:83:C9:54:96:01:0D:41:0D:DE:92:FE:A6:31:4C:B0:13:44:37:28
Authority key identifier: AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
Certificate issuer: /CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Certificate serial: 01A1028045745E3AE2828954C3980D465B88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
Manifest number: 1A99
Signing time: Sat 03 Oct 2026 16:02:03 +0000
Manifest this update: Sat 03 Oct 2026 16:02:03 +0000
Manifest next update: Sun 04 Oct 2026 16:02:03 +0000
Files and hashes: 1: 9yXjetA_9LZJZxTsSX9y22ZXwZI.roa (hash: lMfThegQdVTCBwkXRaAXX4LmXRlXKEgH0ZgEcCTMjEk=)
2: WcITaUECKrRS-00UJB2toA0EWBA.roa (hash: 7Dbd0N6O8xlvKSw9ngaRpgSG6WpLRxBISHsmkzDSkD8=)
3: ldmxJAkKvmlHgUpkQnhFLSPjlKg.roa (hash: f+2m7+QBQ2xNK66onBBuHDLsOd1zJ2s1AavJSLAavCU=)
4: rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl (hash: TOQ9V3s9XIzyjoTh8whcc0K+TBKYZG7NOxRcqoceNfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:80:45:74:5e:3a:e2:82:89:54:c3:98:0d:46:5b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Validity
Not Before: Oct 3 16:02:03 2026 GMT
Not After : Oct 4 16:02:03 2026 GMT
Subject: CN=2383c95496010d410dde92fea6314cb013443728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:45:ab:c7:1f:30:ee:96:ab:dc:7c:ff:e9:9f:
9e:b2:28:53:32:8e:1c:66:3b:b0:4f:43:57:28:3b:
90:7c:47:1a:a4:ba:41:8c:f6:46:7c:e8:42:b7:f6:
c2:6a:b9:01:ca:07:06:16:c7:56:77:84:87:11:18:
ba:cd:62:ca:9a:22:3e:06:b9:c5:fb:d1:ae:bb:88:
46:ee:0b:24:7f:12:4f:dd:a6:dd:90:5c:a0:44:fc:
4b:69:96:cc:29:67:d4:4b:66:f8:db:ea:06:54:3a:
5b:3d:7f:b4:89:64:fb:77:3e:69:21:ef:03:f1:69:
98:98:d7:28:e6:39:07:3e:f8:c4:f7:5c:2c:99:0d:
32:fb:78:fd:9e:dc:be:0b:f7:69:cb:2a:3c:a3:de:
a7:00:e7:44:8f:49:40:c1:c2:cd:9d:8b:84:22:35:
4a:26:ea:30:83:19:f2:57:0d:ff:f2:4c:67:d2:fb:
d6:43:81:32:ff:ff:ab:9c:b8:8e:f3:1b:d5:1a:8e:
fc:d5:98:b5:71:6d:14:5c:97:e8:20:6a:2a:32:9a:
00:ef:9a:05:0e:40:0f:ba:23:ba:de:f4:c2:74:23:
f4:a0:86:3d:c5:6a:c0:57:c3:b3:c1:fc:ed:dc:1e:
ee:68:f8:99:2b:a8:c3:82:6a:d4:f7:e3:47:fb:eb:
2f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:83:C9:54:96:01:0D:41:0D:DE:92:FE:A6:31:4C:B0:13:44:37:28
X509v3 Authority Key Identifier:
keyid:AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f5:ff:a5:ab:60:28:26:f1:1f:c2:89:95:c8:47:31:02:aa:
20:c7:ef:83:35:d8:d2:32:df:c3:2a:fd:40:b3:0e:5a:87:82:
c7:dd:68:44:dc:e5:c8:3c:24:42:89:11:37:78:b9:45:6c:1b:
8c:94:4a:1c:4e:70:98:54:68:fa:fd:2b:ac:dc:bb:9b:9c:28:
a1:2c:71:67:df:94:b5:7b:c7:9b:4b:84:07:70:21:f7:0f:e1:
2a:f9:c2:0a:4e:65:23:97:e1:55:07:f7:29:5c:0e:6a:39:3c:
a0:dd:6d:e1:a7:ae:ad:d4:f4:4e:34:d5:c7:ea:89:3e:fc:ac:
1f:6c:7d:22:0b:aa:9c:7e:92:34:c7:73:d4:0e:de:a3:a3:da:
11:88:7a:e2:b5:4b:f3:25:1d:6d:68:42:b2:ac:37:39:05:07:
d4:51:c4:05:5e:5b:59:9f:c1:7b:c1:08:23:85:3d:79:a9:c8:
90:82:93:4c:cb:3c:1b:4a:41:98:f0:c9:a5:a4:9a:72:e7:6c:
e8:e6:eb:77:07:ca:3c:84:3f:17:6f:38:e4:7f:41:26:39:cc:
67:4c:9e:ef:2b:5a:48:66:4d:86:bb:40:9a:bc:b2:c3:99:95:
dd:5a:65:67:36:08:87:76:95:b9:5d:96:08:8b:08:30:91:e1:
04:ed:c0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 23:06:18 2026 by rpki-client