Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
File: RKiGN0mLGI_AvOrgu_BoF2GknUs.mft (raw, json)
Hash identifier: 1gcSSq5ZdPLqJrKc33c0jpBF+Wx3axQMYomkSDpWCnQ=
Subject key identifier: 21:92:EC:7B:A0:99:EF:7D:6A:4A:8D:C4:77:8E:FE:FF:A3:6A:74:69
Authority key identifier: 44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B
Certificate issuer: /CN=44a88637498b188fc0bceae0bbf0681761a49d4b
Certificate serial: 019CC93EEA3F9B986E1EDDC5CD2274931D7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
Manifest number: 0FA8
Signing time: Sat 07 Mar 2026 17:01:09 +0000
Manifest this update: Sat 07 Mar 2026 17:01:09 +0000
Manifest next update: Sun 08 Mar 2026 17:01:09 +0000
Files and hashes: 1: IlmmCphtbxCSj-g8MGUHlc5fMJI.roa (hash: ogImPjEXfsHsVXyMK+YnBJnOYbD+aI/1HsAtRVA/WoY=)
2: RKiGN0mLGI_AvOrgu_BoF2GknUs.crl (hash: KLtdCeVE/BuGqXfQza74vxezm3tgLt4cTjLtBMCrlN4=)
3: hdC4Kn8NS6Sap65oEbc6C4-8rkI.roa (hash: shJCpeavm5lRb/pX8j4NjPSwHatzb8Ath7/zQC9o4/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:3e:ea:3f:9b:98:6e:1e:dd:c5:cd:22:74:93:1d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a88637498b188fc0bceae0bbf0681761a49d4b
Validity
Not Before: Mar 7 17:01:09 2026 GMT
Not After : Mar 8 17:01:09 2026 GMT
Subject: CN=2192ec7ba099ef7d6a4a8dc4778efeffa36a7469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c5:62:e1:5e:ce:36:b5:7e:f3:e1:2e:7b:0e:
e1:fb:7f:c2:df:02:1a:8f:33:e4:66:6d:41:dc:3b:
9a:2c:81:c3:a6:7c:d0:5f:00:a9:11:02:05:f0:5c:
67:2d:48:9e:9e:51:a9:a4:c1:24:ba:9a:16:0c:79:
7f:03:b9:c3:71:eb:59:2d:63:72:a0:41:0a:56:69:
ce:74:88:55:e7:b6:37:6e:24:18:d1:c3:7d:e0:99:
12:d6:01:2e:25:61:5f:10:43:b3:a7:76:d5:f0:f0:
4b:4c:8b:f6:a0:10:ff:bb:a1:24:b1:50:25:54:9e:
77:8a:6f:0e:6b:60:ea:1f:5b:75:04:32:ac:7e:fe:
63:72:29:b2:77:6d:fd:ae:ea:fb:06:04:df:cd:30:
03:6f:84:7a:50:78:58:53:ba:63:17:47:62:d4:44:
3b:a6:72:48:01:e3:b9:41:ed:ef:92:c2:de:e5:21:
0b:34:b5:41:7d:f3:18:da:9d:4f:e1:38:48:aa:55:
ab:50:93:e1:98:1f:5b:39:80:b3:14:e4:6f:13:c8:
76:2f:52:7c:32:53:ed:d5:e0:17:c9:c8:68:8f:7d:
cd:85:5d:a3:8c:4e:bc:b0:61:f9:0b:12:88:71:47:
26:58:67:35:63:cf:81:bd:9b:9c:90:6e:7e:17:fa:
f9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:92:EC:7B:A0:99:EF:7D:6A:4A:8D:C4:77:8E:FE:FF:A3:6A:74:69
X509v3 Authority Key Identifier:
keyid:44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:db:35:e5:f1:f1:7c:20:27:4d:8b:03:7b:f2:43:4a:f2:0b:
ac:59:7a:48:06:ff:cd:93:76:41:ad:09:bc:f7:8e:8f:91:20:
29:d5:5c:d0:a2:1c:fe:fa:2d:ec:a0:70:04:e7:4d:87:9d:99:
f5:c9:56:f0:31:bd:f2:ea:91:45:d4:fa:d2:69:73:c9:20:e2:
c0:73:2b:dc:24:57:cc:65:46:23:1f:1f:c5:0d:59:d3:35:db:
de:36:8b:e2:33:61:fd:0e:8a:36:f2:0b:a7:c3:ae:ae:cc:f9:
b2:cf:05:5e:d1:b9:42:08:b1:e5:23:8f:4e:c3:54:96:3a:2c:
44:5d:e5:e0:00:18:ba:17:19:a3:b0:c7:4e:84:8b:ef:a2:53:
9b:9b:fc:64:16:64:cb:0e:f1:34:f8:9e:7f:98:19:6d:c2:5a:
7d:50:40:42:f2:ff:f0:7b:a3:ed:c3:31:cb:7a:d1:1a:73:98:
71:d4:19:3c:0e:10:0a:07:3d:e4:ed:25:ae:f4:25:8a:36:6b:
c5:e8:d9:4f:62:1a:c1:96:3f:c3:d5:1e:98:e4:9e:82:9a:2c:
27:9b:8a:2a:c4:dd:4c:12:ec:a4:d5:0c:d5:07:15:c9:b3:58:
b7:c2:f1:e5:55:46:c5:62:98:90:cd:c2:87:74:45:3b:27:07:
84:5c:68:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 20:48:23 2026 by rpki-client