Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
File: doFcfQ6GPCF4D4v0uezDqcZFkpg.mft (raw, json)
Hash identifier: 85qhk+mpujLx6QU6cMWvr7qfe9e3mE00EpATWwrhAwk=
Subject key identifier: 94:56:64:44:7A:52:0E:C4:B4:CA:27:1B:B6:7B:84:5B:EF:A8:A3:4D
Authority key identifier: 76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98
Certificate issuer: /CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298
Certificate serial: 01A088D4F984BEE26DF6C96EC5BBD9B00708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
Manifest number: 073D
Signing time: Thu 10 Sep 2026 01:00:53 +0000
Manifest this update: Thu 10 Sep 2026 01:00:53 +0000
Manifest next update: Fri 11 Sep 2026 01:00:53 +0000
Files and hashes: 1: NwXP9XjEV_tAQNFwDQBmSN78alU.roa (hash: I0Ts9gFxat3bJUV/IHoujUultkWM8WN3TtuoR0WHIVg=)
2: doFcfQ6GPCF4D4v0uezDqcZFkpg.crl (hash: TgYqfwMEDYLOaHZymYCmY/hn9BRs0aYKtt3TbBgtZ4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:d4:f9:84:be:e2:6d:f6:c9:6e:c5:bb:d9:b0:07:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298
Validity
Not Before: Sep 10 01:00:53 2026 GMT
Not After : Sep 11 01:00:53 2026 GMT
Subject: CN=945664447a520ec4b4ca271bb67b845befa8a34d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ca:c1:d4:25:8f:e4:dc:e3:54:55:7e:c8:fc:
5f:91:32:97:92:7f:2f:33:08:f8:b6:99:d7:87:7c:
87:cf:31:c5:68:45:c3:8c:33:39:e6:5e:01:cb:2e:
67:8b:64:cd:05:15:78:82:1f:61:e2:fa:d8:19:e7:
40:cf:f4:fd:eb:5d:6b:56:86:c5:50:55:a0:e0:4a:
1b:89:6f:9f:73:40:64:99:fc:69:9a:41:16:21:c0:
a7:5a:45:6a:6f:5a:f9:36:61:16:bf:2d:55:3d:f7:
dc:72:ca:b4:0e:04:d7:cd:39:70:c0:91:94:17:49:
bf:0f:a1:cd:5d:31:26:89:8d:71:da:4f:11:c9:82:
2d:bb:3e:24:5f:c1:e2:d3:5e:2c:6f:d7:5b:d3:92:
ab:e2:94:0c:84:ac:e1:85:56:a8:d4:59:97:3a:35:
99:b4:82:d3:8b:9e:e9:32:f4:66:9f:ed:ce:c5:2f:
e3:ca:b3:d0:35:20:db:c3:fb:12:18:ea:33:c6:29:
57:6f:a9:4e:3f:2c:81:0b:81:cd:83:64:30:31:b2:
24:5a:01:8a:55:4e:31:13:38:10:d9:73:7c:37:55:
44:c8:4b:ad:92:55:f0:3a:b4:0a:e8:56:e2:7b:2c:
e7:ea:11:fa:2c:31:d7:13:d7:cc:cc:8a:ee:97:9f:
7c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:56:64:44:7A:52:0E:C4:B4:CA:27:1B:B6:7B:84:5B:EF:A8:A3:4D
X509v3 Authority Key Identifier:
keyid:76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:bb:15:42:6e:a2:91:b5:74:31:62:21:d9:f1:3a:c2:58:ec:
79:be:3d:80:c5:6a:cb:4c:54:ad:e1:6e:26:cb:8e:a1:26:dc:
2e:20:bd:18:56:7c:6b:c0:99:14:4f:95:90:38:97:7a:96:ba:
e4:ad:9a:29:70:8f:90:ff:5d:38:21:26:b5:d1:b3:08:3c:ea:
3c:55:0b:fd:23:78:69:f5:b7:87:8c:36:c9:83:e0:30:98:23:
02:07:04:a5:7c:1e:89:41:71:93:15:17:e4:5b:b4:be:59:ff:
53:20:6a:a0:80:36:60:13:d7:38:23:bd:79:55:60:f4:f7:2c:
2e:96:0a:2f:03:3a:07:5e:c1:70:6a:95:8c:b9:cf:70:26:e2:
2f:5d:c2:bf:8e:2c:b8:b0:5d:68:61:84:47:b5:69:85:8d:5e:
88:8c:41:42:be:b8:3c:e3:89:d3:26:ea:08:b2:7c:2d:ff:fc:
77:cb:ba:e2:30:fd:9b:3a:b7:b7:c8:0e:cd:3c:a7:b4:e2:4e:
cf:a7:10:c1:0d:cf:32:ab:41:33:09:79:07:fb:dd:a4:6a:22:
64:10:2b:a8:a1:41:69:df:84:4f:03:ad:95:4f:70:b5:ea:6f:
4e:bb:da:c9:64:d5:6a:2d:36:ba:0b:22:03:c1:47:a2:e0:0d:
72:6f:e6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:24:11 2026 by rpki-client