Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
File: RFZsGig9VT7z9lb1ciOYTdp8NV8.mft (raw, json)
Hash identifier: YVjFagZNt8kNKX9WTLPjFiQftoRkSE6lHTYs+Surhn0=
Subject key identifier: 98:8E:70:71:64:91:68:B6:88:14:B7:0A:49:55:F2:31:9C:54:D1:B0
Authority key identifier: 44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
Certificate issuer: /CN=44566c1a283d553ef3f656f57223984dda7c355f
Certificate serial: 01A181BDCCECD1E36619E055383CA330A8F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
Manifest number: 1ACC
Signing time: Wed 28 Oct 2026 09:01:01 +0000
Manifest this update: Wed 28 Oct 2026 09:01:01 +0000
Manifest next update: Thu 29 Oct 2026 09:01:01 +0000
Files and hashes: 1: RFZsGig9VT7z9lb1ciOYTdp8NV8.crl (hash: uMhmy0bApywCTaudzGUj6v3TjVAR6oMc+Ydxj6r17xs=)
2: unbj6R1pt1reWtClkg6u6qP97qU.roa (hash: ve6WwDA/IGFZ6obWRDfS0N46O05JHSdRDsvfP7NEV7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:bd:cc:ec:d1:e3:66:19:e0:55:38:3c:a3:30:a8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44566c1a283d553ef3f656f57223984dda7c355f
Validity
Not Before: Oct 28 09:01:01 2026 GMT
Not After : Oct 29 09:01:01 2026 GMT
Subject: CN=988e7071649168b68814b70a4955f2319c54d1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:68:d5:46:37:14:92:92:e5:80:37:61:71:da:
e5:65:0a:93:9a:ce:ed:ee:51:35:29:26:74:d2:55:
e1:af:3f:75:df:4b:07:f8:1b:68:9a:2e:74:cf:40:
b7:f9:e8:1a:5d:ce:28:78:91:e9:22:42:20:b8:25:
61:89:a2:ae:95:c7:8b:5e:e3:f3:c4:b4:3b:65:38:
03:0f:7d:22:57:b7:9a:bd:68:1d:39:eb:68:86:a0:
c3:d0:cd:5e:eb:83:64:f8:e6:8e:4a:51:b1:00:17:
81:34:e5:bc:bd:3a:35:a9:a4:15:3d:b8:93:c4:e0:
b8:9a:f7:95:4c:3a:de:f5:dd:6b:b9:32:02:01:7d:
d2:97:a0:9e:84:57:4a:51:84:60:8b:29:38:0d:f2:
1b:99:55:bf:7f:ac:7f:de:2a:79:26:a4:49:cc:fb:
b1:f4:99:a8:e6:52:ee:de:dd:d1:b0:e1:b9:f0:da:
92:36:7d:02:cb:15:5a:f2:3d:83:af:fe:bb:c5:60:
d5:8c:fc:ac:aa:99:6d:c5:c6:11:83:c4:4a:9e:2f:
0f:f9:d5:d9:11:02:29:f8:f7:81:ee:b2:09:6f:ee:
f1:bd:90:3e:72:9f:00:b3:c3:79:e1:b8:01:ec:f3:
cf:15:e8:2b:5f:8e:9a:f2:29:c2:3c:d2:ab:7b:aa:
30:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8E:70:71:64:91:68:B6:88:14:B7:0A:49:55:F2:31:9C:54:D1:B0
X509v3 Authority Key Identifier:
keyid:44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:da:dd:12:6d:0c:ae:d1:94:be:06:5a:c2:54:8d:68:18:4e:
c9:20:61:86:bb:7e:4d:d4:1e:30:f4:50:30:37:2b:d0:05:da:
15:46:ce:a3:15:8b:71:ac:ed:75:a7:3b:d9:72:bb:fa:74:d3:
b6:76:dc:ce:20:ae:ac:95:3d:97:56:b7:43:0b:a1:b2:84:5a:
c0:43:f3:b5:a3:7d:a1:e0:f6:61:7d:a4:f6:71:51:61:84:1c:
a0:c2:75:bd:b6:23:f5:85:93:f1:7c:e8:80:d3:1b:90:ea:d5:
bb:36:3a:6b:09:77:fa:fd:98:91:5c:3e:a5:42:bf:a7:fe:1d:
9d:25:da:3d:0a:ae:26:62:c5:44:4c:c6:07:f4:b9:93:f1:e4:
ad:a9:2f:64:21:39:77:dd:59:53:7b:b0:77:35:82:5b:8f:6b:
ae:c6:3f:cb:e9:4d:3b:b8:20:ae:a4:d1:33:e1:17:59:dc:9d:
bd:b6:62:91:60:be:ca:84:a4:5c:04:e5:2d:62:d5:40:cd:dd:
0e:b7:4f:f2:de:c7:c3:19:c2:06:ca:8e:60:f4:96:90:cb:eb:
41:34:71:ca:67:88:b1:9c:84:70:2a:6b:1f:db:e8:4c:78:26:
2d:a6:b8:ec:01:6c:83:b3:2b:6e:fc:7c:00:ef:53:24:c5:88:
30:e2:3c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:34:37 2026 by rpki-client