Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
File: rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft (raw, json)
Hash identifier: p1Va1L1csRddQZq5ga28dhcr2Sy/NXpZxn9GPOyKv9E=
Subject key identifier: 47:D9:61:71:A0:89:1F:62:77:08:72:99:93:11:D0:17:3E:F8:81:7C
Authority key identifier: AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
Certificate issuer: /CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Certificate serial: 01A181F5114FC95624B2C04E5BC3E1E9970C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
Manifest number: 1ADB
Signing time: Wed 28 Oct 2026 10:01:23 +0000
Manifest this update: Wed 28 Oct 2026 10:01:23 +0000
Manifest next update: Thu 29 Oct 2026 10:01:23 +0000
Files and hashes: 1: 9yXjetA_9LZJZxTsSX9y22ZXwZI.roa (hash: lMfThegQdVTCBwkXRaAXX4LmXRlXKEgH0ZgEcCTMjEk=)
2: WcITaUECKrRS-00UJB2toA0EWBA.roa (hash: 7Dbd0N6O8xlvKSw9ngaRpgSG6WpLRxBISHsmkzDSkD8=)
3: ldmxJAkKvmlHgUpkQnhFLSPjlKg.roa (hash: f+2m7+QBQ2xNK66onBBuHDLsOd1zJ2s1AavJSLAavCU=)
4: rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl (hash: BVn/46Yr6lSA4sAlVhcnBUfra9IW6mVw+5C0N+wkeB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:f5:11:4f:c9:56:24:b2:c0:4e:5b:c3:e1:e9:97:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Validity
Not Before: Oct 28 10:01:23 2026 GMT
Not After : Oct 29 10:01:23 2026 GMT
Subject: CN=47d96171a0891f62770872999311d0173ef8817c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a1:dd:c8:2a:a9:28:15:eb:d0:7b:a3:e2:07:
d8:b1:3a:b1:66:2e:22:91:c5:e9:d5:b3:c3:95:e3:
00:bf:19:e5:9b:71:d2:10:8f:8f:ef:6c:e0:ab:84:
18:90:78:a2:b9:73:87:5a:2c:0d:ab:eb:11:95:ee:
52:c6:3b:7e:3a:f1:f2:9f:c0:45:1b:31:22:06:53:
82:81:2f:7d:95:db:3e:65:7d:ab:0a:9e:36:d3:cb:
e7:71:9e:0d:a1:32:f3:eb:10:bb:83:4a:f5:54:bf:
99:ef:2f:c5:3d:33:72:a2:b9:de:80:fb:58:dd:90:
80:08:ac:32:fd:33:5a:8c:a4:1b:65:9a:f5:57:34:
8a:96:dc:2b:50:98:87:8c:f2:d1:41:19:08:dd:ac:
1b:ce:e8:d8:1a:8f:e3:de:f7:aa:0a:0b:84:3a:c3:
73:ac:f6:f8:45:0f:ab:47:c8:27:06:a2:4a:44:40:
33:91:d8:7b:6c:49:b7:84:79:5f:b5:34:3d:f4:03:
e1:29:3a:da:13:7a:a3:b5:b9:90:39:d0:18:dd:8f:
5d:b9:d0:68:fe:0c:19:d1:29:c5:ef:30:c5:5c:6f:
e1:e1:fc:df:4b:67:9c:65:a1:25:1e:34:58:39:0c:
ef:d9:c9:97:a4:dd:4b:30:35:2b:98:15:a3:19:dc:
bf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D9:61:71:A0:89:1F:62:77:08:72:99:93:11:D0:17:3E:F8:81:7C
X509v3 Authority Key Identifier:
keyid:AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:0a:6c:06:9f:ee:5c:cb:70:c1:d8:59:9e:18:38:89:ad:3d:
62:f8:81:d3:55:61:5c:c9:15:57:ea:0c:49:ad:6a:ef:9d:71:
6b:43:d1:96:0e:f9:77:15:df:63:f0:b1:e6:eb:7c:cc:ef:16:
17:d4:1f:ed:7d:8a:5c:42:06:0a:e3:d2:47:36:11:ca:20:8b:
63:9b:40:a9:63:aa:23:2f:d9:99:60:40:a0:00:d3:5b:d2:02:
dd:bc:d0:18:87:f4:f9:4c:7c:0e:67:66:fe:51:58:9a:cc:44:
a6:dc:57:37:6f:b5:fc:43:60:17:fc:20:3f:2a:cd:c9:01:7a:
19:2f:1f:02:61:c3:32:9e:92:8e:09:08:53:d7:c7:ed:69:d7:
dd:b2:73:43:7a:b1:f0:e2:00:a8:51:21:e5:dc:6b:97:94:cf:
ff:22:71:03:d9:f6:44:2e:b0:23:ce:9d:53:6a:9b:5f:41:a5:
ec:d2:69:7a:c6:d5:6d:bf:86:3f:ce:dc:1b:91:4f:52:4e:62:
0d:ac:81:cd:f7:c3:88:ec:60:48:b3:bb:7b:33:d1:14:0b:ca:
ab:65:7a:9b:14:11:39:6a:f4:fa:01:74:98:27:8b:64:0c:0d:
6a:74:50:49:a3:99:5d:37:ae:06:82:f2:5d:2b:eb:c6:8d:46:
db:b9:25:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:54:10 2026 by rpki-client