Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
File: rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft (raw, json)
Hash identifier: Dzmb0pJdXb+ilg0SnvZcO+KlHZfjamggiuppcjrqLaw=
Subject key identifier: 4F:AF:07:6E:4D:93:E0:D7:7E:12:97:03:90:40:9C:80:E3:52:2C:76
Authority key identifier: AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
Certificate issuer: /CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Certificate serial: 01A03BCCB3B2E6A2602063DD911137A1B556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
Manifest number: 1A20
Signing time: Wed 26 Aug 2026 02:01:05 +0000
Manifest this update: Wed 26 Aug 2026 02:01:05 +0000
Manifest next update: Thu 27 Aug 2026 02:01:05 +0000
Files and hashes: 1: CEyBPj5VD8UxRiqVxqInbi9mDx8.asa (hash: OtsKbdUFAn6cy1skhcCn+WuIejDR78hfMFZ1vJq0JOA=)
2: rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl (hash: hN06rqC6QDL+xTk6dxqnEKCtbmfIpHkNXHVZN7zMjkU=)
3: srGtxdotdL1gGYebpFyhRC2KgLw.roa (hash: peHYPQm6+m6K0GIm1p2M4aZrPJFnCNdM3/dYTyUbnoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3b:cc:b3:b2:e6:a2:60:20:63:dd:91:11:37:a1:b5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Validity
Not Before: Aug 26 02:01:05 2026 GMT
Not After : Aug 27 02:01:05 2026 GMT
Subject: CN=4faf076e4d93e0d77e12970390409c80e3522c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8d:53:1d:fd:fd:5d:d1:27:48:d9:c7:31:8a:
78:b7:a4:ce:90:41:aa:c6:7f:2f:e7:72:55:64:af:
cf:d7:79:b8:0b:2f:1c:14:38:c4:20:57:0a:b2:05:
85:6d:fe:6d:f8:e1:28:1e:c3:e1:db:d2:09:07:fb:
49:c4:b3:d7:d5:20:40:c4:51:2f:73:59:49:67:ff:
50:20:cd:0e:01:2d:0f:f3:d1:2d:35:43:45:a1:f5:
19:87:49:e4:0d:76:4a:cb:83:89:7d:15:e9:ef:55:
69:84:f6:95:f3:31:00:6f:76:2c:ef:a9:fd:2d:85:
3a:d2:78:b5:90:9c:60:fd:ef:e9:97:89:08:6a:b3:
36:48:9c:17:b6:5c:79:f8:0a:e8:2a:dd:a9:b6:3f:
42:4d:45:c9:ac:89:ff:e3:df:0f:c0:dd:4a:59:fa:
46:e5:7c:27:81:e7:65:84:55:91:d7:8c:01:d7:84:
12:46:90:9a:83:b9:3a:6f:8d:f1:94:c5:00:b9:02:
9e:b5:3f:a6:1f:25:cb:ee:9a:0a:fd:fc:ae:2d:bc:
e9:32:a1:52:9d:f0:f8:3e:08:4a:bb:b0:b1:ab:d8:
2a:af:29:eb:18:1a:56:5d:4e:26:c3:f0:15:25:88:
00:ec:11:5d:2f:53:7b:a9:36:56:23:3a:43:51:0e:
fd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AF:07:6E:4D:93:E0:D7:7E:12:97:03:90:40:9C:80:E3:52:2C:76
X509v3 Authority Key Identifier:
keyid:AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:7d:27:cb:3b:8b:42:4b:06:0e:25:b3:97:ea:4a:57:fa:04:
41:b2:b8:83:68:11:65:b8:44:2c:9c:02:63:f4:62:a4:c2:94:
41:40:20:93:15:b9:6f:63:c3:7f:d5:67:59:78:09:79:5f:0c:
6f:8e:d0:3c:2a:c8:c8:ca:f7:74:e7:39:50:0a:52:d1:e1:32:
2a:aa:0a:d9:0d:5d:e6:e5:f8:50:64:48:e0:32:4b:c6:b2:2c:
2e:dc:fc:4d:88:31:41:af:e6:8e:2a:93:35:11:d3:e8:10:f1:
74:c8:c1:60:64:ba:2c:49:03:94:01:34:d4:b7:8b:81:2d:1b:
46:30:e6:b8:c7:72:98:47:f1:d0:f2:d3:41:72:a1:5b:08:21:
c3:29:71:c7:85:d4:06:d0:f7:3f:b1:58:76:83:ea:25:45:5e:
19:f5:a3:3f:0e:cc:9d:e0:c2:73:60:67:b5:95:c1:ef:0a:2e:
d2:b4:89:f6:fa:c8:b3:80:07:3d:4a:14:cd:52:d8:60:01:17:
36:de:4a:14:71:5e:5b:1d:0e:8e:5b:ff:f4:88:a3:ed:c6:d7:
2f:0b:47:f2:90:32:15:cd:f3:94:c6:03:9f:ca:92:94:5d:79:
de:a2:2f:b8:5d:51:5d:9f:45:a0:64:b1:0b:22:27:99:15:8a:
b0:e4:4e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:05:32 2026 by rpki-client