Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
File: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft (raw, json)
Hash identifier: enPnkKgWsmn99ErDTmdzK1EqHiKrlmzXoz+m041yuSA=
Subject key identifier: 36:57:06:6C:B6:87:73:68:A6:7D:78:ED:97:08:7B:B7:97:97:70:D4
Authority key identifier: 77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
Certificate issuer: /CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Certificate serial: 01A18B9C00111B6DF22605392964391203FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
Manifest number: 1ACF
Signing time: Fri 30 Oct 2026 07:00:18 +0000
Manifest this update: Fri 30 Oct 2026 07:00:18 +0000
Manifest next update: Sat 31 Oct 2026 07:00:18 +0000
Files and hashes: 1: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl (hash: 1hDmp0kD4Jp961+LBiUbfOrfgEfn6Q9ly59P61c6EbI=)
2: mQsjU1zOjVRO_u3D1WDC_GA_q4U.roa (hash: 4af//0/sTljaocW55fj5PkOIaVuuWa8S7DrXdP1GzbU=)
3: oFwZbtA1lxypnx_w-x5XCq34vRQ.roa (hash: i/Rl9TaZZIbdRkmJK6JnEtSg149s52oPIfIzhWvJ8BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:9c:00:11:1b:6d:f2:26:05:39:29:64:39:12:03:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Validity
Not Before: Oct 30 07:00:18 2026 GMT
Not After : Oct 31 07:00:18 2026 GMT
Subject: CN=3657066cb6877368a67d78ed97087bb7979770d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3a:13:07:59:eb:1b:26:0a:ee:5a:0d:da:63:
6a:e6:bc:7a:26:14:f7:24:85:07:a8:3d:35:bb:c7:
7e:0e:6e:8c:17:1c:4a:d4:18:ab:2a:b7:da:cd:1d:
18:01:8b:a2:86:31:a2:d4:8a:4d:43:7f:f7:a0:d4:
71:e9:a8:6f:60:83:c3:39:4f:66:80:5a:9c:28:54:
5c:33:a2:a3:26:48:26:72:50:0b:31:c2:93:58:00:
62:69:7f:e7:e5:ba:26:a2:c1:af:ca:a5:44:8d:fd:
24:81:15:f5:65:14:f0:52:e1:ea:d1:e2:cc:7d:49:
6a:e4:9a:6a:6e:5c:4c:79:8c:67:53:e1:4e:d1:d0:
be:d1:64:4a:a5:58:50:4f:6b:40:d1:d3:dc:eb:4f:
ae:50:5f:d1:9d:5a:db:59:23:45:fc:57:0a:d5:75:
90:42:84:b7:d7:62:73:45:24:67:cc:6d:e5:af:42:
3e:db:c9:9f:47:c9:f7:59:d9:ca:4b:de:4f:f6:75:
fd:43:a7:d4:86:06:58:e8:44:d9:ec:09:59:ed:c5:
90:86:07:fd:3d:5e:6d:7b:c4:e3:9d:52:cf:13:88:
38:ae:c6:af:f8:b0:67:ef:80:a7:b2:a1:4d:e6:4d:
87:d3:07:ca:6c:0e:93:f1:1a:45:5d:87:60:e3:37:
28:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:57:06:6C:B6:87:73:68:A6:7D:78:ED:97:08:7B:B7:97:97:70:D4
X509v3 Authority Key Identifier:
keyid:77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1c:5a:08:e2:3f:03:91:9a:c8:37:e3:c5:ed:68:a9:3e:c3:
9c:82:8d:f9:f1:d7:98:29:2b:74:95:9e:65:3d:05:fc:d3:c8:
94:63:99:02:5c:6d:85:b4:ed:12:aa:35:0a:06:06:97:be:e9:
2b:2c:e9:c7:4b:08:d2:1e:62:32:8c:ae:49:88:5b:fd:97:6a:
a4:46:02:4c:7c:c3:0b:ec:e3:94:3b:51:3e:5d:06:03:0d:ff:
bf:61:40:d2:b8:f2:de:95:d6:30:1a:a6:97:99:8b:cb:88:04:
3a:3c:2d:8b:aa:6b:c4:4f:09:3f:2c:c8:3e:aa:76:57:a0:dc:
b4:e5:da:e5:9a:d6:84:e3:01:05:b5:99:d9:33:d9:77:d0:19:
6c:23:94:27:8b:58:63:a7:04:9f:43:70:c7:8f:84:b5:f5:da:
87:69:03:bb:7c:45:29:a0:74:18:ab:10:91:ff:6a:39:4c:77:
91:36:fd:db:98:c3:2e:ad:9c:fe:d9:9e:ab:71:71:23:dd:39:
62:2a:93:c7:40:49:e1:0c:3a:f0:25:fd:0a:a6:76:03:5c:9e:
7f:84:c3:51:4c:2a:04:6d:de:4a:56:d6:c1:77:98:66:9d:6a:
3c:0f:87:36:b8:74:9a:1a:69:e2:0b:57:22:a8:16:b1:39:b2:
c5:25:ab:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:10:04 2026 by rpki-client