Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
File: RFZsGig9VT7z9lb1ciOYTdp8NV8.mft (raw, json)
Hash identifier: CbaJBYwPJn4+oyV3gcI0bkJ1V1PoyPckf1gCulYgHgs=
Subject key identifier: 84:38:99:95:70:BB:A3:68:C5:31:F8:20:29:28:85:B5:03:F7:73:FD
Authority key identifier: 44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
Certificate issuer: /CN=44566c1a283d553ef3f656f57223984dda7c355f
Certificate serial: 019FA2299B3538AD74056BEAE6755C637786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
Manifest number: 19D3
Signing time: Mon 27 Jul 2026 06:01:03 +0000
Manifest this update: Mon 27 Jul 2026 06:01:03 +0000
Manifest next update: Tue 28 Jul 2026 06:01:03 +0000
Files and hashes: 1: RFZsGig9VT7z9lb1ciOYTdp8NV8.crl (hash: GmKsVIdTvigcEKIjDWKt/WlZM1qT09eyrNze9quj5Kw=)
2: sg6tgAybBjXrNxu4j4vvtnhkeRs.roa (hash: znWkPFTjms0Q4dHid9C/SISTIFSJsDcguftIuJobD7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:9b:35:38:ad:74:05:6b:ea:e6:75:5c:63:77:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44566c1a283d553ef3f656f57223984dda7c355f
Validity
Not Before: Jul 27 06:01:03 2026 GMT
Not After : Jul 28 06:01:03 2026 GMT
Subject: CN=8438999570bba368c531f820292885b503f773fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f2:b9:f3:57:a7:04:a1:0d:ef:02:83:76:67:
dc:a5:1d:f2:cd:68:f2:78:6f:d0:db:f2:a6:57:0e:
3f:f1:ae:f8:05:35:3d:b9:ba:a6:e4:c2:8c:4c:75:
90:45:a6:61:73:d9:f4:2c:b7:51:64:bf:8d:6a:4d:
6b:f4:59:fc:7a:fe:a2:98:53:dd:7e:cd:5e:16:7f:
70:13:1f:46:a3:86:80:44:76:18:19:f8:5c:19:08:
96:23:be:6c:63:c1:e8:bd:45:a1:02:73:fd:c3:d8:
88:e1:45:70:17:03:6a:21:b9:a6:03:77:52:3c:07:
df:0f:6e:e6:06:d8:82:13:18:99:a6:e8:9c:d1:37:
e7:f5:2d:49:89:02:37:62:01:ff:b1:a4:dd:27:b7:
67:d0:9e:37:a5:ca:dd:55:25:b4:c2:64:72:a6:af:
6c:83:52:2b:c5:26:0d:a7:f4:a1:35:ab:cb:56:79:
ce:77:62:8b:5c:62:26:a8:ee:05:d6:f6:20:3a:32:
f8:37:0a:d0:a5:c5:35:05:13:08:57:d6:d3:5f:75:
9f:bc:b1:a0:0c:36:90:a9:cf:bc:4e:f1:01:72:c2:
26:df:67:4c:7d:9b:d6:c5:88:74:5f:40:7f:1a:76:
b1:5f:22:bf:bf:09:e3:8f:d8:61:3a:b9:c3:e2:8c:
7e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:38:99:95:70:BB:A3:68:C5:31:F8:20:29:28:85:B5:03:F7:73:FD
X509v3 Authority Key Identifier:
keyid:44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ac:2e:d1:69:41:63:93:ab:fb:70:a9:97:d8:54:32:d7:ca:
c5:39:a8:7a:7d:51:aa:47:d5:17:4e:79:10:40:c6:2f:52:14:
2f:6f:61:2f:82:3b:e6:1b:ed:9b:0d:09:42:f1:59:aa:c7:78:
4b:2e:9d:65:39:3e:e5:a0:db:a2:a9:3e:a9:b1:e1:f7:3f:f0:
57:f3:9a:65:98:86:7a:5a:01:81:47:ee:9e:49:a4:7b:45:74:
22:d2:ec:14:b8:81:2e:73:24:91:17:c8:d6:5c:35:86:86:c3:
5c:0e:96:db:8b:ae:d7:1b:4e:e2:e2:7c:d1:b8:51:02:31:cf:
af:3d:66:49:9b:49:5e:d8:7c:74:c1:88:60:63:d6:e5:0f:a5:
54:14:c8:b5:27:7c:92:b3:f7:00:99:4d:b4:df:ed:f3:9a:ca:
77:f7:f7:34:96:91:f9:5a:7d:7f:10:1a:5a:e2:bc:f5:45:c8:
71:2d:5a:4c:a9:f0:2b:c7:f3:2a:7f:dc:ec:1e:30:59:60:e0:
ff:ab:d8:f6:9a:5f:a1:87:99:2c:3a:30:e5:c0:20:7d:56:d1:
92:aa:34:69:ab:7f:37:1a:15:99:11:34:ea:13:1b:5f:b8:80:
d2:b1:e6:3f:1c:ca:71:5f:f4:60:fc:7f:a6:4b:55:d5:79:0b:
33:9f:1e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:04:58 2026 by rpki-client