Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
File: rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft (raw, json)
Hash identifier: dhOEEISTqR3L11WGBu1Ua9jap5UjVyO5984AwhUa+QM=
Subject key identifier: C3:E7:DB:D8:00:89:A4:46:EA:F9:B7:28:8C:C9:47:D3:D0:80:56:93
Authority key identifier: AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
Certificate issuer: /CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Certificate serial: 01A1DBA67E065B005FD03712E73169F35AC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
Manifest number: 07A7
Signing time: Sat 14 Nov 2026 20:01:23 +0000
Manifest this update: Sat 14 Nov 2026 20:01:23 +0000
Manifest next update: Sun 15 Nov 2026 20:01:23 +0000
Files and hashes: 1: Pq9ZuZBzVIXXjgHCRmaDImbQg2Y.roa (hash: 11bzHyr21wFIMkaSiukQigkPWPjefTdm2bknAq+/9g4=)
2: rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl (hash: 0HAZtF3ZHXJrlhnDMMT/2bwQtMqgRsLkCgTctllBQ6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 20:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:a6:7e:06:5b:00:5f:d0:37:12:e7:31:69:f3:5a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Validity
Not Before: Nov 14 20:01:23 2026 GMT
Not After : Nov 15 20:01:23 2026 GMT
Subject: CN=c3e7dbd80089a446eaf9b7288cc947d3d0805693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ab:fa:af:3d:eb:bd:9f:b0:8d:81:21:53:b2:
b2:26:da:c8:b1:7b:7f:8e:e9:98:a7:06:65:f1:aa:
1b:43:bd:94:fb:cb:c9:bd:5d:b8:c6:8a:d1:d6:ef:
12:9d:c8:0a:fb:95:23:76:eb:d7:a1:43:f6:f7:86:
f3:4a:c2:a2:e1:b9:69:69:21:77:f5:fc:18:c8:77:
d1:4c:46:86:51:d3:de:a0:93:db:b1:e6:a0:8e:1d:
38:d2:d1:fe:24:19:d7:15:c9:f3:a9:8c:75:58:99:
ad:1e:37:1c:d0:ab:f4:b5:6f:63:5c:09:ee:86:f2:
23:e5:ec:57:56:80:3d:aa:fc:54:d9:4b:d0:dc:ed:
9b:b0:34:a7:7f:1f:7d:0d:bb:dd:b5:07:52:fa:14:
a2:c5:32:a3:22:da:8e:61:a3:89:36:e0:0a:ae:0e:
6a:62:a0:a7:74:ee:eb:9e:c9:cd:37:08:e9:4b:b4:
ce:7b:d2:81:5c:fd:a5:ba:33:a7:01:fa:2d:37:72:
08:2a:c3:4a:3f:77:d8:61:87:c1:b9:ff:96:20:1a:
a6:d7:46:c1:16:9b:e6:f0:9f:25:2d:85:c4:32:22:
66:37:b7:56:77:65:16:23:51:9d:6d:07:cd:d9:e9:
0c:8a:83:35:61:ab:f1:92:d0:a8:4f:98:2e:48:58:
ea:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E7:DB:D8:00:89:A4:46:EA:F9:B7:28:8C:C9:47:D3:D0:80:56:93
X509v3 Authority Key Identifier:
keyid:AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:bc:88:69:00:bb:b7:c9:9f:4f:4e:15:b1:09:e8:62:44:b5:
1c:13:11:0c:5d:9e:e2:29:63:00:4e:c1:55:ed:be:85:93:ca:
21:e6:38:01:bf:a1:02:30:f8:10:e2:c7:88:9f:18:12:51:64:
0d:4f:b9:a1:f7:2e:bf:23:2c:6a:2c:df:8d:47:bf:08:bb:f3:
35:61:60:19:d5:11:1e:7d:81:48:27:32:5d:47:9e:ee:a2:cf:
5d:56:1b:d4:bf:b7:9e:3e:3e:9a:cf:c6:57:fe:36:96:fa:d9:
3d:08:df:be:a9:c8:0b:dc:35:5b:1d:09:bc:95:5f:33:2c:bc:
0c:62:42:e1:fb:2d:e2:58:c9:96:e6:98:38:dd:b0:dd:1f:32:
c4:6f:16:a3:9f:c2:9b:e5:9e:fa:f9:bc:67:c6:f3:ef:01:d7:
b8:8b:ad:cd:bb:06:8d:4b:2c:ea:07:a7:17:82:b1:c5:0b:26:
c0:86:01:e5:63:e7:47:f8:90:45:0b:44:fa:ac:1b:1e:8c:86:
91:0d:e8:14:3e:de:76:09:34:8a:a4:9d:aa:63:9f:1d:59:7c:
31:b3:73:5c:be:f7:0a:d6:3a:c9:e5:b0:04:51:84:e0:be:a3:
e3:76:c7:69:a8:9a:9c:4a:e7:ff:88:23:97:4a:56:af:f8:71:
8a:17:c9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:11:22 2026 by rpki-client