Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.mft
File: RPCGM8H1_XFU2I3h1syc17gEMK0.mft (raw, json)
Hash identifier: dmuwksXmZpQ3aHs9ecc7zgk0zdasPREWYJ5sNshBCfw=
Subject key identifier: 2A:F4:7C:F1:37:F9:27:11:91:4D:6B:B8:6C:FB:75:0D:40:9D:B3:B2
Authority key identifier: 44:F0:86:33:C1:F5:FD:71:54:D8:8D:E1:D6:CC:9C:D7:B8:04:30:AD
Certificate issuer: /CN=44f08633c1f5fd7154d88de1d6cc9cd7b80430ad
Certificate serial: 01A06FB9FAD1E0729353B432E691C35DC710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPCGM8H1_XFU2I3h1syc17gEMK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.mft
Manifest number: FF
Signing time: Sat 05 Sep 2026 04:00:54 +0000
Manifest this update: Sat 05 Sep 2026 04:00:54 +0000
Manifest next update: Sun 06 Sep 2026 04:00:54 +0000
Files and hashes: 1: 5KctcxsYT_6CBJ2cdoYPOhQAGc4.roa (hash: +1bCb5V2QswAKGR65R9SngG1RC/2PS62IO4DT3u7w0w=)
2: MT7FDc3brVHPS51pC1TSYkG931E.roa (hash: OXmE7HUkMdWGmBsN2LVDSTT5wVdQkht8zETc4dCdqB4=)
3: RPCGM8H1_XFU2I3h1syc17gEMK0.crl (hash: 9l7U4sjLG01OMyYphikqOIG6owI/oAf5K0TVM7UaUBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPCGM8H1_XFU2I3h1syc17gEMK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:b9:fa:d1:e0:72:93:53:b4:32:e6:91:c3:5d:c7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f08633c1f5fd7154d88de1d6cc9cd7b80430ad
Validity
Not Before: Sep 5 04:00:54 2026 GMT
Not After : Sep 6 04:00:54 2026 GMT
Subject: CN=2af47cf137f92711914d6bb86cfb750d409db3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:77:85:0c:9c:91:99:bb:9d:14:ce:7e:5a:31:
ad:8c:f2:3c:95:6d:54:36:c9:b9:d0:84:e1:12:9b:
70:24:01:a0:06:a9:ea:0d:b1:15:2e:55:2e:f4:2c:
48:ec:3d:6e:c6:1b:29:7d:01:4a:ea:4d:0e:ee:f2:
3e:d2:53:fc:0c:f7:1b:0e:94:a8:f7:59:65:c7:d0:
fa:96:5a:6c:9c:c0:a8:76:bd:37:31:3f:80:7b:fe:
f4:67:8a:91:48:7e:45:e4:ac:f5:0b:76:1e:90:fe:
e5:19:79:76:fa:f5:fb:c9:28:54:2c:fd:2c:54:53:
d3:a6:ea:68:fd:ab:17:bc:c3:77:65:62:22:83:cd:
98:e1:c0:5f:aa:e7:0e:d5:77:8f:3d:f1:9c:d9:4c:
a8:c1:d9:69:64:93:75:1c:2f:59:a0:fb:73:ef:bd:
8f:0a:b9:eb:e0:ed:61:2e:42:33:76:8b:57:31:a2:
b3:37:cf:4b:0f:e6:b3:0b:e9:72:60:b9:47:28:95:
ea:fc:65:af:a3:d5:23:d3:f7:f7:ad:b1:78:8e:89:
e2:60:33:0a:29:52:95:99:12:0c:6f:da:27:9c:a1:
76:49:d9:82:cc:68:93:e8:77:55:57:6d:b1:d4:e4:
ef:39:a1:cf:a1:b3:30:54:90:97:fc:76:a6:9e:6c:
0e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F4:7C:F1:37:F9:27:11:91:4D:6B:B8:6C:FB:75:0D:40:9D:B3:B2
X509v3 Authority Key Identifier:
keyid:44:F0:86:33:C1:F5:FD:71:54:D8:8D:E1:D6:CC:9C:D7:B8:04:30:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPCGM8H1_XFU2I3h1syc17gEMK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:67:cd:ac:38:cb:d4:e0:d4:7c:c7:24:0d:7e:60:a5:0d:bd:
4c:12:3d:9a:fa:c5:0c:bc:b8:01:92:64:46:a6:34:44:e5:e3:
43:99:46:54:79:3e:ac:29:51:4b:6a:0f:94:f4:f1:ea:7b:22:
a3:31:f1:d6:03:d5:89:90:8a:4a:f3:b8:5c:57:9d:0b:76:dc:
95:04:d7:b3:9c:12:f1:84:aa:48:6f:7f:1b:f1:73:a2:86:99:
b7:06:6f:06:73:82:be:67:f6:fb:7b:ec:f0:8c:36:ee:74:cd:
e0:29:e5:8e:fe:26:4e:5b:f4:8b:b0:c2:c3:5e:5b:2e:34:ec:
8d:36:2d:45:1e:fb:29:12:a3:dc:87:7a:d1:fe:96:c8:39:a1:
65:df:d2:bb:3e:a5:a6:7b:97:b5:b4:d1:63:18:f7:4e:16:af:
6d:41:5f:63:cb:d0:b4:24:b8:e7:bb:09:d3:44:99:00:57:cc:
80:6c:92:24:46:86:b2:4e:7c:3f:41:ce:43:5b:02:69:dd:9f:
03:3f:2e:67:de:c5:05:4a:89:ea:bc:5a:09:b8:13:4c:24:45:
b4:aa:7f:02:eb:13:1b:76:93:12:4f:47:47:bf:a8:92:a4:ff:
7c:d9:e6:71:30:49:6b:ad:f2:b1:03:48:95:8f:39:d9:cc:1b:
89:cd:3a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:41:36 2026 by rpki-client