Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
File: rCGhE9G6AdEH_feRMIwKUfPQbdo.mft (raw, json)
Hash identifier: eTzQMT4XzKm4759L5ZwGAxzuL+ndxEb62MdmK+8dm3E=
Subject key identifier: 06:51:71:86:31:95:B4:BC:9F:5A:47:D0:9D:B1:BC:3C:43:FE:88:11
Authority key identifier: AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
Certificate issuer: /CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Certificate serial: 01A13C3827DB106CD3BBBFFC4832E9CA084D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
Manifest number: 098C
Signing time: Wed 14 Oct 2026 21:01:15 +0000
Manifest this update: Wed 14 Oct 2026 21:01:15 +0000
Manifest next update: Thu 15 Oct 2026 21:01:15 +0000
Files and hashes: 1: Hv-HpYlBtcGtjlR8qtNflDayGpQ.roa (hash: aBGsg4UHN28OpsS2xFbkAdXhnlHxP423kuvv3ReKy28=)
2: rCGhE9G6AdEH_feRMIwKUfPQbdo.crl (hash: VOlv8hL1v0LPJkd8UKYCapXiS1coVfDVBIT0VQ+FIUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:38:27:db:10:6c:d3:bb:bf:fc:48:32:e9:ca:08:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Validity
Not Before: Oct 14 21:01:15 2026 GMT
Not After : Oct 15 21:01:15 2026 GMT
Subject: CN=065171863195b4bc9f5a47d09db1bc3c43fe8811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:08:ae:25:cd:3e:3c:87:f4:73:eb:d8:55:a3:
16:e5:67:30:3b:58:01:59:84:4f:f8:a3:a0:41:92:
ef:65:f9:84:af:a2:13:92:92:51:fd:d1:2e:67:65:
40:1e:16:7e:a3:fd:ac:a5:db:5b:c1:49:be:52:6b:
e1:e1:73:fd:71:29:8c:9b:d5:35:10:e5:ab:34:ec:
7b:72:2d:c3:9a:82:d4:eb:9b:5f:3f:c2:19:b8:d5:
a4:ec:bb:82:0b:0f:5c:e4:37:9f:6f:2b:89:ad:c5:
77:bd:5a:83:53:95:2c:24:7f:ae:49:4b:18:ee:a1:
e2:58:6f:1a:c0:4f:7f:8b:95:3f:4e:08:de:70:92:
41:be:4d:b3:99:78:6c:2d:bc:2a:0d:43:7f:0f:c6:
76:46:18:13:87:98:00:b3:61:63:cb:ac:b3:85:c9:
5a:4f:57:2f:82:21:c4:67:3d:65:80:b4:d5:ed:f6:
fd:79:6a:64:a7:ed:d8:49:8b:63:10:21:b5:7f:cf:
76:03:39:b5:75:6f:c7:dd:05:3e:58:82:b6:c8:15:
44:70:0b:a4:0c:72:9f:07:7a:9a:87:db:dc:71:49:
fe:01:ce:26:54:de:e3:7d:67:9b:1f:4d:82:01:2e:
be:30:2d:06:6d:d9:40:5c:16:0b:f7:66:02:f4:aa:
fa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:51:71:86:31:95:B4:BC:9F:5A:47:D0:9D:B1:BC:3C:43:FE:88:11
X509v3 Authority Key Identifier:
keyid:AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c9:c9:ca:38:86:21:02:91:cb:30:be:be:56:ce:4a:65:1c:
e0:14:e0:44:3f:fb:35:5f:c2:95:fb:65:6b:a1:c9:f4:4d:34:
a9:dd:fd:1f:ce:77:58:18:09:4c:a4:15:70:db:b2:e2:7a:4b:
c3:a0:6f:9f:85:ff:64:a4:77:01:6c:17:36:ba:86:aa:de:5c:
89:9a:9d:2d:7e:2d:2d:73:0e:9a:ca:b4:2b:55:c0:64:66:7d:
31:ce:f6:0a:e7:d9:a8:50:9c:26:f3:56:5d:3b:88:0a:15:95:
f3:26:d1:22:45:fb:ab:79:5c:03:8c:77:c3:c7:8f:2d:c6:e2:
e2:96:6b:cd:af:9e:7b:29:b4:c2:e8:9f:06:0e:53:b4:71:7e:
bf:68:03:cc:a3:8c:42:d4:f6:e9:66:e2:6a:ce:ed:b7:98:64:
05:0e:46:02:26:6f:d2:2f:c4:93:e4:22:b8:ee:4e:bb:36:ff:
61:c9:88:ed:b1:76:23:32:be:62:78:ee:26:98:85:46:46:86:
c9:a1:d1:8f:ba:c8:59:5b:95:56:33:97:88:cb:5a:55:17:95:
78:f6:62:78:13:65:81:85:e3:2b:e2:60:3b:b4:2d:b7:61:37:
ae:73:41:60:22:49:91:2f:dc:d3:1d:0c:f6:2d:ce:cc:62:b4:
b1:bc:4b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 00:17:30 2026 by rpki-client