Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
File: RxGaIFaDFnklufBBdDEmN7FgDAc.mft (raw, json)
Hash identifier: eWu1pk+lYZCBjxtVnbpw3cDY3akcfVkfE3/4d7u9lLk=
Subject key identifier: B1:BC:BE:27:5C:17:E5:37:52:18:DB:38:72:8F:D0:76:EF:45:13:D5
Authority key identifier: 47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
Certificate issuer: /CN=47119a205683167925b9f04174312637b1600c07
Certificate serial: 01A1039285B105F3FD9A617E8B60E208A1A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
Manifest number: 1A87
Signing time: Sat 03 Oct 2026 21:01:36 +0000
Manifest this update: Sat 03 Oct 2026 21:01:36 +0000
Manifest next update: Sun 04 Oct 2026 21:01:36 +0000
Files and hashes: 1: RxGaIFaDFnklufBBdDEmN7FgDAc.crl (hash: vP3+oACeOYFkBnL0N/olTfSA600cDyQj7P2Roawt6M0=)
2: SQFAkjt57y-pTXhYLYstw04Yit8.roa (hash: hgGTZStyS8714Gh8ubpZL/WCwm7djUM9MS9CR1krlpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:92:85:b1:05:f3:fd:9a:61:7e:8b:60:e2:08:a1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47119a205683167925b9f04174312637b1600c07
Validity
Not Before: Oct 3 21:01:36 2026 GMT
Not After : Oct 4 21:01:36 2026 GMT
Subject: CN=b1bcbe275c17e5375218db38728fd076ef4513d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e9:12:41:12:6b:a6:8c:cd:4d:68:c1:04:3d:
67:d2:1b:e0:48:60:43:ee:44:d2:1a:14:67:b9:3e:
de:af:06:a0:5c:ad:c3:42:c3:96:36:67:ae:45:62:
d8:b6:f6:5e:81:be:d1:7e:68:fe:7f:b3:f2:dd:83:
d9:b1:6c:f8:93:9b:96:93:3a:86:62:e9:d6:68:2c:
bc:0d:36:9c:39:16:74:ad:d4:83:b6:36:72:54:52:
d0:c6:7f:cf:75:ab:69:ab:5a:bd:fd:c5:61:a3:1c:
47:90:9f:73:2c:a3:df:74:35:2c:a3:64:3b:bd:30:
6f:ca:3e:42:4a:24:6f:c1:28:5e:58:76:2d:16:0f:
2e:eb:19:b5:81:82:32:33:df:88:b2:e2:9d:2f:a2:
86:55:1c:1e:2c:43:35:c9:c4:22:2d:1f:b1:a4:e2:
cd:47:65:f3:0e:ec:82:f5:50:89:71:5c:f8:c8:ee:
e5:f6:be:7c:2c:54:fe:95:7e:dc:7e:73:77:35:9b:
24:89:83:1d:6a:c1:c5:81:36:97:48:66:7e:c5:90:
c1:88:23:20:a5:56:bc:ce:35:09:2c:9c:22:97:3c:
9b:2f:ea:8e:4c:4e:b2:83:6e:cb:2e:c4:cf:e8:c2:
f2:74:ff:3c:a5:42:3c:45:bc:d8:41:70:ff:fd:18:
84:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BC:BE:27:5C:17:E5:37:52:18:DB:38:72:8F:D0:76:EF:45:13:D5
X509v3 Authority Key Identifier:
keyid:47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:bd:c6:8c:92:47:1f:3e:8b:19:79:29:ba:f8:ef:2e:38:42:
ff:ea:5e:be:2a:4d:e0:7f:d7:16:3c:dd:58:d4:21:76:f4:32:
c1:ac:73:5e:c6:0d:76:3c:61:93:45:a0:19:b5:94:3a:97:02:
6a:9d:14:4f:90:19:a4:bf:fb:3c:3e:57:46:b4:42:f1:6f:6c:
f7:f5:f9:e5:47:26:e9:2d:dd:5c:4a:c3:de:4b:a8:4a:b9:df:
4a:87:e1:94:65:a3:b4:bb:b9:92:22:07:bd:04:33:72:2f:81:
32:3d:e0:fe:2e:f9:eb:28:2e:39:33:98:bf:23:18:3e:8f:be:
24:2e:9a:ca:13:3c:1e:69:64:33:da:16:60:06:27:c8:f5:e8:
d8:6b:a3:a3:d7:e6:cf:e1:5c:24:38:89:33:00:f6:d1:c4:e8:
ba:bb:d3:ed:03:2b:28:b2:3a:14:64:d5:ea:d0:d6:e4:33:8b:
23:2a:c4:ec:f2:93:52:1f:11:d0:2f:2a:29:43:4f:19:cc:c8:
3c:2b:70:02:d8:81:fc:f3:1e:14:ea:61:28:4e:37:ab:17:64:
58:07:9c:99:28:b5:2f:58:29:0e:66:9d:d2:19:f9:8b:57:12:
14:10:2a:c2:27:07:b9:c1:81:72:92:61:9f:4e:00:9a:0b:4e:
e1:ea:76:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEDkoWxBfP9mmF+i2DiCKGhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MTE5YTIwNTY4MzE2NzkyNWI5ZjA0MTc0MzEyNjM3YjE2
MDBjMDcwHhcNMjYxMDAzMjEwMTM2WhcNMjYxMDA0MjEwMTM2WjAzMTEwLwYDVQQD
EyhiMWJjYmUyNzVjMTdlNTM3NTIxOGRiMzg3MjhmZDA3NmVmNDUxM2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOkSQRJrpozNTWjBBD1n0hvgSGBD
7kTSGhRnuT7erwagXK3DQsOWNmeuRWLYtvZegb7Rfmj+f7Py3YPZsWz4k5uWkzqG
YunWaCy8DTacORZ0rdSDtjZyVFLQxn/Pdatpq1q9/cVhoxxHkJ9zLKPfdDUso2Q7
vTBvyj5CSiRvwSheWHYtFg8u6xm1gYIyM9+IsuKdL6KGVRweLEM1ycQiLR+xpOLN
R2XzDuyC9VCJcVz4yO7l9r58LFT+lX7cfnN3NZskiYMdasHFgTaXSGZ+xZDBiCMg
pVa8zjUJLJwilzybL+qOTE6yg27LLsTP6MLydP88pUI8RbzYQXD//RiEHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLG8vidcF+U3UhjbOHKP0HbvRRPVMB8GA1UdIwQY
MBaAFEcRmiBWgxZ5JbnwQXQxJjexYAwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnhHYUlGYURGbmtsdWZCQmRERW1ON0ZnREFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hYjM2YTAtMDRlYy00MTkwLWI1OWQt
MmEwZTQ1ODYyYzAzLzEvUnhHYUlGYURGbmtsdWZCQmRERW1ON0ZnREFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hYjM2YTAtMDRlYy00MTkwLWI1OWQtMmEwZTQ1ODYyYzAz
LzEvUnhHYUlGYURGbmtsdWZCQmRERW1ON0ZnREFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj73GjJJH
Hz6LGXkpuvjvLjhC/+pevipN4H/XFjzdWNQhdvQywaxzXsYNdjxhk0WgGbWUOpcC
ap0UT5AZpL/7PD5XRrRC8W9s9/X55Ucm6S3dXErD3kuoSrnfSofhlGWjtLu5kiIH
vQQzci+BMj3g/i756yguOTOYvyMYPo++JC6ayhM8HmlkM9oWYAYnyPXo2Gujo9fm
z+FcJDiJMwD20cTourvT7QMrKLI6FGTV6tDW5DOLIyrE7PKTUh8R0C8qKUNPGczI
PCtwAtiB/PMeFOphKE43qxdkWAecmSi1L1gpDmad0hn5i1cSFBAqwicHucGBcpJh
n04AmgtO4ep2AQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 00:47:59 2026 by rpki-client