Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
File: rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft (raw, json)
Hash identifier: Sj5w53mQA3picVJPFVElumGFmvLSP61CPimh18UDIL0=
Subject key identifier: 15:CA:E8:CE:9A:00:2B:42:C1:D5:DE:C1:41:5C:8C:29:14:0F:5B:36
Authority key identifier: AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
Certificate issuer: /CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Certificate serial: 01A08EA056BE36A34AA48696E0E3D585D5C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
Manifest number: 1A5D
Signing time: Fri 11 Sep 2026 04:01:07 +0000
Manifest this update: Fri 11 Sep 2026 04:01:07 +0000
Manifest next update: Sat 12 Sep 2026 04:01:07 +0000
Files and hashes: 1: 9yXjetA_9LZJZxTsSX9y22ZXwZI.roa (hash: lMfThegQdVTCBwkXRaAXX4LmXRlXKEgH0ZgEcCTMjEk=)
2: WcITaUECKrRS-00UJB2toA0EWBA.roa (hash: 7Dbd0N6O8xlvKSw9ngaRpgSG6WpLRxBISHsmkzDSkD8=)
3: ldmxJAkKvmlHgUpkQnhFLSPjlKg.roa (hash: f+2m7+QBQ2xNK66onBBuHDLsOd1zJ2s1AavJSLAavCU=)
4: rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl (hash: iynWUvADUyqDrqqs5+QpmnnyjaA9ZUqBHRHYYKDCYXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:a0:56:be:36:a3:4a:a4:86:96:e0:e3:d5:85:d5:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Validity
Not Before: Sep 11 04:01:07 2026 GMT
Not After : Sep 12 04:01:07 2026 GMT
Subject: CN=15cae8ce9a002b42c1d5dec1415c8c29140f5b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6a:8a:d5:2b:d6:28:78:06:48:16:b6:a4:a3:
86:17:cf:1c:8f:a9:e8:c5:77:0d:3d:fe:e2:ce:bd:
ea:e3:c8:f4:81:80:e4:7d:35:8f:7e:46:2f:af:70:
7d:13:e6:0a:c4:43:ad:23:b1:12:0c:f1:28:d6:55:
64:03:ea:ad:e2:33:55:6f:44:5e:55:8f:6b:3a:48:
9c:44:02:f2:5c:a7:49:1f:ec:c3:41:e8:0e:a2:95:
a1:a7:2d:51:8d:ca:2e:a0:ce:9f:de:ea:cd:3b:d6:
8c:db:11:5e:3e:b5:9a:f5:a9:69:c5:48:ee:49:81:
85:d0:0a:02:94:54:62:24:9d:8e:ff:3b:aa:52:03:
b7:7f:db:9a:64:cd:37:89:20:75:7e:41:d1:62:81:
b2:e8:fa:08:ce:b2:e6:59:cc:72:c2:e3:67:f5:97:
34:0b:f4:3e:6d:c9:22:fa:ad:f3:84:46:b0:b1:7b:
60:d4:71:ac:db:dc:4c:9a:47:94:47:77:00:da:60:
51:66:b4:be:b2:17:ea:b9:fb:fa:57:eb:aa:80:ef:
a4:8e:78:4b:68:73:ee:dc:c5:68:c4:14:62:24:ce:
df:b0:bf:9d:2b:d6:a1:c2:73:7f:b9:f4:3a:a1:63:
8a:18:4a:f0:13:8e:3c:ab:54:f0:3e:11:af:81:a3:
bd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CA:E8:CE:9A:00:2B:42:C1:D5:DE:C1:41:5C:8C:29:14:0F:5B:36
X509v3 Authority Key Identifier:
keyid:AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:84:96:59:6f:f3:02:6a:7a:bf:6a:b5:8a:a5:54:93:b3:82:
a9:a0:2e:5b:f6:1d:fa:af:cf:f2:e7:78:88:1f:ec:fc:ae:8f:
da:6f:93:a4:fa:b0:41:e6:42:da:d6:c8:b5:46:8d:8c:d3:0b:
94:37:89:78:43:0c:7c:36:1a:b0:18:3d:a2:09:c7:0f:cb:6a:
43:dc:0e:e7:fb:89:a8:2d:40:be:a7:99:46:5e:c9:85:b3:71:
28:c9:56:ca:3d:83:59:dd:33:a3:93:88:8c:c8:d3:10:a4:cd:
74:c5:67:d0:d0:e6:60:d4:64:01:3e:83:f5:55:f7:57:59:d8:
55:6d:b3:43:5e:42:3c:bd:2b:46:6d:ec:42:e0:df:ec:07:b6:
8e:e7:45:6c:ea:9a:ef:82:2f:a5:13:15:b2:d5:d5:18:31:5a:
0b:bb:19:e6:bc:a5:4a:6c:87:db:44:de:c4:19:d0:14:c0:d5:
eb:13:f9:ef:75:2a:24:1d:e3:36:8d:90:34:0b:fa:82:ed:53:
26:6f:47:22:0f:9e:92:a2:94:c6:6f:73:48:a8:bb:3a:fa:72:
f4:c5:6e:ca:ef:e9:30:19:4a:91:62:fa:6a:48:12:e1:74:e8:
61:83:b6:cc:42:a9:ff:c2:db:c5:a4:78:9f:6a:6d:22:1d:6c:
b6:92:bd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:57:38 2026 by rpki-client