Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
File: doFcfQ6GPCF4D4v0uezDqcZFkpg.mft (raw, json)
Hash identifier: rp2HAMd8FspY5+uFSB2yf9lKRYhNGgmDM1CcGrtHRik=
Subject key identifier: FA:C8:ED:68:86:8E:8F:E6:50:F8:36:1E:46:4E:5F:C2:FB:46:71:91
Authority key identifier: 76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98
Certificate issuer: /CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298
Certificate serial: 01A17A3AF4F36D29AA06CF64ECE80EBC4C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
Manifest number: 07BA
Signing time: Mon 26 Oct 2026 22:00:46 +0000
Manifest this update: Mon 26 Oct 2026 22:00:46 +0000
Manifest next update: Tue 27 Oct 2026 22:00:46 +0000
Files and hashes: 1: NwXP9XjEV_tAQNFwDQBmSN78alU.roa (hash: I0Ts9gFxat3bJUV/IHoujUultkWM8WN3TtuoR0WHIVg=)
2: doFcfQ6GPCF4D4v0uezDqcZFkpg.crl (hash: B9gd3Nkzjit5s/mu6tXnlYp+BLb7Z7+1n+6/0gDqIMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:3a:f4:f3:6d:29:aa:06:cf:64:ec:e8:0e:bc:4c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298
Validity
Not Before: Oct 26 22:00:46 2026 GMT
Not After : Oct 27 22:00:46 2026 GMT
Subject: CN=fac8ed68868e8fe650f8361e464e5fc2fb467191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:44:4e:19:95:31:66:61:49:00:a0:83:c8:e9:
71:32:11:a2:2e:c4:da:4a:ed:df:ae:5f:7a:ba:36:
33:59:92:cb:bd:db:a0:48:ac:65:36:10:e8:87:74:
71:68:80:b3:c0:e8:a5:bd:49:3a:e1:08:d4:cb:4b:
a0:12:f5:b9:01:6c:dc:e8:6c:4b:81:7d:66:74:02:
0f:35:51:ae:77:bf:85:8a:c6:94:83:35:a6:20:36:
52:6f:2c:e1:6e:8a:6d:35:23:15:d8:88:d4:76:9c:
b7:ce:fb:61:b7:ab:b0:33:d6:41:ce:09:87:87:a9:
a6:72:4b:ab:05:1b:11:d0:22:91:e4:48:c1:19:fa:
e1:68:d6:7b:2b:c4:78:37:a7:dc:62:76:26:24:2c:
c7:4c:d4:f3:8d:dc:f2:9a:3f:2d:d1:e1:72:d2:24:
8f:dc:b8:de:27:72:21:0c:7a:6f:04:16:d1:e7:31:
f7:73:49:82:51:29:97:64:16:01:3d:a8:2c:fc:14:
3d:51:d9:53:a8:03:8f:4e:15:ec:d7:5b:1d:d5:1c:
f1:78:6c:35:97:d6:fc:a8:3a:82:c6:71:3c:27:8a:
ca:d8:10:fd:b8:8c:c7:15:d8:01:5a:db:88:c3:9e:
ea:16:4d:05:a0:61:98:60:ea:34:f9:82:3b:1d:94:
f3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C8:ED:68:86:8E:8F:E6:50:F8:36:1E:46:4E:5F:C2:FB:46:71:91
X509v3 Authority Key Identifier:
keyid:76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:52:55:86:4a:1c:74:23:2e:59:b0:b1:ad:9a:0f:41:64:77:
94:5d:01:a0:2a:35:79:b3:c5:26:36:e9:7c:58:94:fe:5d:28:
e0:41:52:34:cb:43:10:71:8c:71:fd:a3:f3:a2:8c:4a:cb:42:
c0:be:f2:22:5e:52:8c:d4:19:65:ee:68:10:26:9f:97:4b:e2:
9f:28:08:89:73:d5:03:43:98:54:1c:70:f3:51:a6:0a:86:2a:
3e:93:d5:dd:d7:b1:84:ba:9d:d3:2d:37:36:61:7f:62:ee:15:
98:0f:a8:89:59:76:c6:bc:b3:b8:12:80:9f:10:de:36:7a:01:
7f:2b:d1:3f:5d:28:5b:0c:bc:33:3b:27:a5:c1:3e:f6:e1:39:
98:1c:4b:f6:b6:2c:fc:b0:93:ff:15:49:9f:a7:96:78:8d:04:
d7:60:52:24:77:a7:85:43:d1:07:91:ea:38:2f:e7:61:fb:c4:
f2:18:72:bf:36:e0:65:88:4e:ff:89:be:83:3f:66:27:a6:9d:
ec:ae:36:fa:04:c6:ba:1d:8a:01:ce:34:33:08:bf:dc:e5:6f:
b3:6d:40:56:13:e6:9d:99:1d:a4:16:62:b7:48:45:ae:9c:d2:
16:e7:50:0b:f3:2b:5d:52:d1:21:08:04:94:f0:b5:35:54:a9:
3a:e1:ed:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:48:09 2026 by rpki-client