Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
File: RpG_08_sWhEI8choVHZOK5A9eIg.mft (raw, json)
Hash identifier: eQGLy+GriVSC3s0mQ+DfBB4amEf/n4wybK7p9lNouKE=
Subject key identifier: 41:DB:57:C4:69:17:6E:78:BB:25:53:F1:BF:2F:96:34:6D:26:49:B9
Authority key identifier: 46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88
Certificate issuer: /CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
Certificate serial: 01A12A68B41598A078C5DFECEBF5DDBB1BC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
Manifest number: 1A9E
Signing time: Sun 11 Oct 2026 10:01:07 +0000
Manifest this update: Sun 11 Oct 2026 10:01:07 +0000
Manifest next update: Mon 12 Oct 2026 10:01:07 +0000
Files and hashes: 1: 3gIp0do7jiNRekvTGYYcxp0N4KQ.asa (hash: NdEXhwinGvt8QXFqMCRPd1EsUHvL+9wNCdKJKLs61vs=)
2: 99lIgCZ8a0ei-5wRBXuee2SsGpY.roa (hash: 1ppSKjyGESECn+t5RQboX3iN+5A+rZBrqwtQSTJrj4A=)
3: RpG_08_sWhEI8choVHZOK5A9eIg.crl (hash: ViLYNoYph4lxePi/3yrZIKEF5Dcem/2xlCWixZKzaDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:68:b4:15:98:a0:78:c5:df:ec:eb:f5:dd:bb:1b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
Validity
Not Before: Oct 11 10:01:07 2026 GMT
Not After : Oct 12 10:01:07 2026 GMT
Subject: CN=41db57c469176e78bb2553f1bf2f96346d2649b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6a:5f:a9:ea:5a:53:eb:df:ab:df:9f:0f:9b:
b0:8e:fb:01:32:3f:5d:25:e9:b3:32:8b:e7:9a:3f:
b6:a6:ec:64:c8:2a:49:a9:fa:a0:6f:32:a8:ec:83:
63:db:c3:88:5a:1e:47:dc:60:91:1e:c3:55:c9:b4:
19:38:1c:4e:2b:11:10:03:b5:fa:0a:b1:41:63:34:
b2:d1:3e:cf:eb:23:13:78:48:30:00:c4:a8:87:27:
b5:be:94:37:ed:1a:4b:a0:98:4a:89:2b:e8:6b:96:
8c:db:6f:dc:eb:6a:30:de:1e:3c:4b:ec:1a:1f:7b:
b0:09:6e:82:87:fa:74:21:e5:c1:0a:7a:f5:6b:70:
06:b6:a8:67:5c:9a:49:91:f7:fb:b2:2e:cc:22:a0:
f7:41:2b:2e:8e:97:55:41:28:1e:18:79:1e:6b:17:
56:86:d2:88:a4:da:de:31:a2:7b:6b:85:c7:80:68:
b5:c9:37:1a:45:e8:d7:c2:79:c8:f6:a8:70:13:3d:
7c:0b:7b:b3:95:b2:8d:c3:79:3d:d0:f5:63:7b:34:
d5:38:50:f2:b3:cf:9a:94:b2:62:d5:9f:11:38:6c:
03:75:da:4c:a8:12:2d:e0:f4:9c:e3:75:a2:c9:53:
54:91:83:0b:11:70:42:a2:d5:8f:30:83:b6:fa:19:
21:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DB:57:C4:69:17:6E:78:BB:25:53:F1:BF:2F:96:34:6D:26:49:B9
X509v3 Authority Key Identifier:
keyid:46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f8:17:df:e7:f0:59:d8:a9:c6:fd:71:1f:53:da:8c:2e:db:
fc:91:b7:e6:f9:60:50:09:19:f1:39:d8:87:af:c5:ca:a4:ea:
c3:9c:95:42:97:19:d9:b1:3b:cc:e6:f7:a1:3a:57:2e:6f:0c:
64:3e:23:d9:b6:45:97:78:99:18:47:96:07:e6:4d:7d:c5:8a:
4a:ea:84:b1:43:5e:83:0d:34:9a:4d:4c:80:91:a1:3d:7d:f7:
9c:61:e3:c4:c7:f6:7c:ca:17:6f:77:59:8f:99:e2:9c:ba:35:
d9:29:9c:f7:26:9e:9e:4f:1c:68:38:9e:3b:bc:00:73:e6:28:
5a:64:d7:94:e8:2b:1c:42:fa:3f:95:41:50:e4:c4:ed:99:15:
a5:80:2b:db:ed:85:1e:37:87:02:fb:ef:5c:5f:52:c0:78:af:
00:4c:9e:c6:5c:fe:da:8f:95:76:f1:13:c2:65:cd:55:44:23:
7e:ce:85:31:9d:91:85:1e:79:bf:8d:34:ea:51:c7:22:e8:8d:
bd:18:50:25:39:33:45:5e:87:33:d7:f4:7c:7d:9f:1e:ed:b3:
be:8e:4f:1e:8f:b1:c4:af:aa:78:1c:e9:b8:a9:5c:c7:77:b6:
ad:33:1f:97:8f:55:12:64:2c:f5:7d:3a:84:12:99:0e:32:65:
88:bc:19:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:23:26 2026 by rpki-client