Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
File: fGlngv8SGuWm2dXPo4R5dotr8L0.mft (raw, json)
Hash identifier: ISNgKBHk+zQPjBu2k00WB6Q/gsjI3XZ46muXF+DMWQY=
Subject key identifier: 84:E5:E4:B0:D7:A8:75:60:50:E4:E0:D7:C0:C1:A0:AA:1E:6B:78:9B
Authority key identifier: 7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
Certificate issuer: /CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Certificate serial: 01A06CF0857CB7561F02FEFA6D1CD46E90CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
Manifest number: 1A37
Signing time: Fri 04 Sep 2026 15:01:37 +0000
Manifest this update: Fri 04 Sep 2026 15:01:37 +0000
Manifest next update: Sat 05 Sep 2026 15:01:37 +0000
Files and hashes: 1: VDuV_ga9fKWg5ZTg4MIqY7BMCyw.roa (hash: KhFc35C6NWJw+95DJdGU/WqBGVukwlgQW3Tv6X8QShQ=)
2: YV2FC6tSLQepIUe84M0yNrIYwXI.roa (hash: a1BK4hhpvi1wRKKydzXpZZxOv3b6LUqaoMmqbdgZ8n8=)
3: fGlngv8SGuWm2dXPo4R5dotr8L0.crl (hash: upZ+V+wSaTNus19H/si5wnkXo7f+eqCXx0Cxrr5bp9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:f0:85:7c:b7:56:1f:02:fe:fa:6d:1c:d4:6e:90:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Validity
Not Before: Sep 4 15:01:37 2026 GMT
Not After : Sep 5 15:01:37 2026 GMT
Subject: CN=84e5e4b0d7a8756050e4e0d7c0c1a0aa1e6b789b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9e:12:71:46:8f:df:a2:4c:85:66:3d:55:01:
97:b0:09:e3:93:d6:56:ee:28:b6:cf:56:ec:49:b6:
bb:2a:be:22:55:bc:b4:e1:7c:22:7e:a1:19:b8:8b:
f5:fa:dc:a3:37:32:62:d1:ca:fb:a3:41:70:0d:86:
1d:ea:c1:67:d0:72:81:22:c0:95:a3:5e:49:85:26:
1f:d4:30:ea:d7:7d:62:99:c7:8e:e5:bc:d2:be:4d:
a7:17:34:c3:a9:e8:60:f6:b5:81:c2:b5:6d:67:ba:
b9:f1:6c:aa:f3:c7:f0:7c:bf:28:15:56:34:59:be:
0b:b3:dd:65:2c:f6:b7:f8:9f:b5:5f:59:f9:ce:e8:
a9:26:30:ee:3a:a3:d2:ad:c8:29:ac:6d:1e:8f:75:
1b:0d:83:c3:6c:0a:ce:f1:09:ff:0c:04:57:1c:d1:
51:4f:99:03:b2:c1:62:e0:f8:40:06:78:d5:31:d0:
b9:a2:9c:d1:1f:f8:0d:42:97:65:12:99:5e:25:46:
be:65:e4:94:f6:5f:02:04:f6:48:77:48:dc:4d:99:
ad:69:d7:b7:56:31:38:85:05:ab:a6:65:5a:e6:9a:
17:5b:26:65:57:9b:f7:59:72:a7:19:10:e6:b5:3f:
77:4e:b7:6a:0b:02:70:cf:82:3c:1c:73:b9:cd:9b:
2a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E5:E4:B0:D7:A8:75:60:50:E4:E0:D7:C0:C1:A0:AA:1E:6B:78:9B
X509v3 Authority Key Identifier:
keyid:7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:93:3b:59:20:7f:1f:96:c6:08:d0:a9:04:d8:ba:57:e0:28:
57:19:a1:ab:23:2a:e0:91:da:3c:f5:cd:44:ba:d6:9e:64:af:
02:f6:3b:b4:36:b0:ae:91:51:40:29:44:5a:04:b8:31:b7:3d:
4e:d9:eb:d1:c1:5e:f8:08:fa:a5:c0:9c:c5:5c:6b:16:a1:f2:
6b:c8:8f:d0:1c:4c:39:2a:4f:2a:37:7b:ab:c0:ab:2b:c5:78:
39:31:93:f6:d8:f9:34:4a:13:db:88:38:96:3f:4e:4c:b8:31:
d2:9e:bb:65:12:41:be:d3:49:4d:16:85:79:71:b4:ee:12:f3:
fb:15:44:3d:73:cb:fa:c5:8f:7c:fb:5b:54:34:00:a6:b9:ca:
e2:6f:a6:d6:58:b3:3b:71:fb:75:fa:87:97:27:40:22:0c:11:
ab:c6:b4:43:60:f5:91:a6:ed:30:cf:e1:5a:0d:1b:11:59:61:
d7:e7:06:98:63:3e:2f:6d:a1:17:90:6f:24:01:1e:8b:68:3f:
f1:01:92:a2:19:f5:a2:82:70:8a:72:86:51:e0:4c:b0:19:cc:
fa:6a:5c:f4:79:97:3d:89:46:af:2b:45:2d:9a:05:d2:7d:5b:
b9:24:a4:f4:e2:07:00:7c:00:0f:1d:6b:42:21:4c:54:c5:57:
d2:e7:40:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBs8IV8t1YfAv76bRzUbpDMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNjk2NzgyZmYxMjFhZTVhNmQ5ZDVjZmEzODQ3OTc2OGI2
YmYwYmQwHhcNMjYwOTA0MTUwMTM3WhcNMjYwOTA1MTUwMTM3WjAzMTEwLwYDVQQD
Eyg4NGU1ZTRiMGQ3YTg3NTYwNTBlNGUwZDdjMGMxYTBhYTFlNmI3ODliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJ4ScUaP36JMhWY9VQGXsAnjk9ZW
7ii2z1bsSba7Kr4iVby04XwifqEZuIv1+tyjNzJi0cr7o0FwDYYd6sFn0HKBIsCV
o15JhSYf1DDq131imceO5bzSvk2nFzTDqehg9rWBwrVtZ7q58Wyq88fwfL8oFVY0
Wb4Ls91lLPa3+J+1X1n5zuipJjDuOqPSrcgprG0ej3UbDYPDbArO8Qn/DARXHNFR
T5kDssFi4PhABnjVMdC5opzRH/gNQpdlEpleJUa+ZeSU9l8CBPZId0jcTZmtade3
VjE4hQWrpmVa5poXWyZlV5v3WXKnGRDmtT93TrdqCwJwz4I8HHO5zZsqgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITl5LDXqHVgUOTg18DBoKoea3ibMB8GA1UdIwQY
MBaAFHxpZ4L/EhrlptnVz6OEeXaLa/C9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkdsbmd2OFNHdVdtMmRYUG80UjVkb3RyOEwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84ZWM4ZTAtOWI5My00OGZjLTk2MmEt
NmY4MzZmMzVmNTk0LzEvZkdsbmd2OFNHdVdtMmRYUG80UjVkb3RyOEwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC84ZWM4ZTAtOWI5My00OGZjLTk2MmEtNmY4MzZmMzVmNTk0
LzEvZkdsbmd2OFNHdVdtMmRYUG80UjVkb3RyOEwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5M7WSB/
H5bGCNCpBNi6V+AoVxmhqyMq4JHaPPXNRLrWnmSvAvY7tDawrpFRQClEWgS4Mbc9
Ttnr0cFe+Aj6pcCcxVxrFqHya8iP0BxMOSpPKjd7q8CrK8V4OTGT9tj5NEoT24g4
lj9OTLgx0p67ZRJBvtNJTRaFeXG07hLz+xVEPXPL+sWPfPtbVDQAprnK4m+m1liz
O3H7dfqHlydAIgwRq8a0Q2D1kabtMM/hWg0bEVlh1+cGmGM+L22hF5BvJAEei2g/
8QGSohn1ooJwinKGUeBMsBnM+mpc9HmXPYlGrytFLZoF0n1buSSk9OIHAHwADx1r
QiFMVMVX0udABw==
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:26:07 2026 by rpki-client