Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
File: 20GLzzGUMXucKIEZMZb-tZj9nu4.mft (raw, json)
Hash identifier: AHQzbGu7+J72gsvuvFDOvoJ9QQ0Np9XqoIZTk2AFqbA=
Subject key identifier: CC:46:47:6E:A7:0E:2F:33:FC:B3:74:F1:0F:17:65:43:C5:51:18:DB
Authority key identifier: DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
Certificate issuer: /CN=db418bcf3194317b9c2881193196feb598fd9eee
Certificate serial: 01A13D4A34780D15E643AC32FA5AFCF5B4A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
Manifest number: 1AA3
Signing time: Thu 15 Oct 2026 02:00:35 +0000
Manifest this update: Thu 15 Oct 2026 02:00:35 +0000
Manifest next update: Fri 16 Oct 2026 02:00:35 +0000
Files and hashes: 1: 20GLzzGUMXucKIEZMZb-tZj9nu4.crl (hash: ISisnTnEViD+B7WMenoBOc53tpzVCXzRDAJZYZV5F7o=)
2: oT3Rxl2OFf4kaJDbTi8hc1n-RvM.roa (hash: U0lf5akSoaRZ7m2KsTwFQy8jypSmGTV7L8sismPyTHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:4a:34:78:0d:15:e6:43:ac:32:fa:5a:fc:f5:b4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db418bcf3194317b9c2881193196feb598fd9eee
Validity
Not Before: Oct 15 02:00:35 2026 GMT
Not After : Oct 16 02:00:35 2026 GMT
Subject: CN=cc46476ea70e2f33fcb374f10f176543c55118db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:42:28:22:70:36:db:67:70:f2:26:dd:2e:40:
dd:dd:0d:de:de:24:b0:8a:77:ed:93:b7:03:71:2a:
bb:f8:10:30:17:2e:00:94:ce:f5:d6:7f:4b:f7:da:
4b:81:53:23:61:26:e3:5b:69:d7:2d:46:c0:63:39:
ba:4e:35:2a:58:3e:ce:9c:c7:ab:d5:76:bc:c8:4e:
af:8f:00:7c:52:c1:77:1c:ca:53:f4:f5:08:bd:ee:
9a:52:c4:a3:5f:b2:80:04:95:a2:1d:52:1a:e2:f2:
5d:ad:c7:cc:af:98:39:8f:03:cf:ca:e9:e5:e9:e4:
55:65:8e:74:59:37:05:d6:a2:78:16:d2:78:92:16:
73:c5:f0:8c:f6:6d:78:65:e9:4b:6f:8c:13:e7:87:
3e:8d:6a:2b:e7:f9:41:73:84:a0:fb:c6:23:4c:d2:
50:0d:b4:db:1b:42:90:e8:3b:a1:59:e3:54:dd:fa:
a2:0e:a2:75:ca:ef:c7:45:87:81:9f:b8:d9:73:3d:
f5:23:0b:4f:72:7d:3a:83:60:ac:9c:29:7d:6e:76:
b6:b4:53:f5:dc:6d:ab:d1:2a:aa:97:38:b0:98:06:
da:ff:fa:52:d0:63:23:cb:8a:77:24:46:dd:39:1f:
73:24:f1:bc:19:a8:cb:23:6f:e6:d6:6c:3a:8f:08:
85:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:46:47:6E:A7:0E:2F:33:FC:B3:74:F1:0F:17:65:43:C5:51:18:DB
X509v3 Authority Key Identifier:
keyid:DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:4f:3f:a2:b0:3a:fd:4a:f6:d1:a0:c2:82:a1:2b:df:e4:52:
a5:67:6e:48:a8:b3:d2:38:ec:98:58:f9:69:7c:9e:a0:a6:69:
33:70:ac:0c:ed:39:df:39:28:2d:1c:ba:5a:f3:64:6d:d8:66:
83:4b:fc:c0:f4:d8:11:38:b0:59:4e:18:22:4f:5f:87:8b:f7:
ba:11:87:33:51:9f:f2:80:93:61:67:df:75:c5:cb:5f:0c:e8:
58:e3:21:a9:c1:a2:33:b6:7b:e7:f6:b0:4f:cd:0f:fa:a2:f7:
53:f5:20:04:e4:15:46:aa:7d:43:a8:31:9b:f2:d9:b2:2c:e5:
f7:e4:f1:ec:1a:59:f9:95:98:9c:4b:20:e3:27:02:0a:ab:50:
86:1d:dc:41:8f:ed:de:a8:4d:07:8f:19:d7:a0:be:d2:a8:e9:
35:bf:62:a9:f9:49:da:8c:d0:aa:52:4f:f1:a1:1a:0a:a6:ee:
c4:ed:9a:05:45:94:7f:0e:1b:ba:f0:f7:14:4a:55:73:90:8d:
51:70:1c:46:8d:4f:9f:a6:8a:c2:60:89:5b:8b:e0:35:14:11:
c8:52:33:24:18:be:b1:6e:59:17:46:6a:09:99:34:f1:c0:7e:
d0:a1:81:b5:20:4c:61:f7:63:5e:e1:28:5a:f9:39:10:b1:d4:
29:9c:62:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:12:36 2026 by rpki-client