Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
File: rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft (raw, json)
Hash identifier: gTUmBtgG19m+naElu8qsD/eFfzCXyxYEhgguVOaSWNU=
Subject key identifier: C7:5A:CA:05:0B:F2:08:CC:25:EC:82:A8:5E:35:BD:7B:05:F0:6B:B5
Authority key identifier: AC:8B:77:1E:25:7B:AF:27:DD:A1:0A:08:AB:58:B2:6C:F8:F7:5E:09
Certificate issuer: /CN=ac8b771e257baf27dda10a08ab58b26cf8f75e09
Certificate serial: 01A0CE2384419DD6246FDF721AD7EE24DABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIt3HiV7ryfdoQoIq1iybPj3Xgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
Manifest number: 01F8
Signing time: Wed 23 Sep 2026 12:00:28 +0000
Manifest this update: Wed 23 Sep 2026 12:00:28 +0000
Manifest next update: Thu 24 Sep 2026 12:00:28 +0000
Files and hashes: 1: rIt3HiV7ryfdoQoIq1iybPj3Xgk.crl (hash: oFO3kT3JZcD/qrwtK/DRisKlgqHw6D9tO+lzTgDR6LY=)
2: rcclP2fW2M9d6FzhFGpcIug6Slw.roa (hash: Ah4o3LwYLB7WSaBBzcrCq3rn0s5Unn57tKa0V6nN2u0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIt3HiV7ryfdoQoIq1iybPj3Xgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:84:41:9d:d6:24:6f:df:72:1a:d7:ee:24:da:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8b771e257baf27dda10a08ab58b26cf8f75e09
Validity
Not Before: Sep 23 12:00:28 2026 GMT
Not After : Sep 24 12:00:28 2026 GMT
Subject: CN=c75aca050bf208cc25ec82a85e35bd7b05f06bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:11:03:8c:71:92:8b:d3:02:f5:c9:94:1f:be:
53:f1:bf:0f:e8:1b:77:e7:d4:e7:b7:7e:a1:0b:ee:
9a:51:1e:cf:2e:79:02:c5:eb:c6:be:36:b2:84:e3:
a8:97:4f:8b:33:29:81:69:f6:02:1e:8c:09:27:43:
60:c8:3e:d6:53:7b:dd:5c:f1:9e:10:b5:db:41:9c:
83:82:95:81:ab:df:d4:52:04:8d:65:92:3d:9f:74:
57:ee:75:a0:44:33:c4:d5:5f:fb:8c:05:be:b3:64:
fa:ed:00:ff:0b:4b:0f:c7:0d:19:9f:6b:fc:89:74:
f5:dd:f9:7f:68:7f:6c:6d:87:5c:ea:7f:fa:15:9a:
a6:f6:db:66:1e:fe:04:53:c3:81:90:09:84:02:85:
17:62:ff:7f:f3:c5:05:3e:8d:a3:2c:4c:98:d0:b8:
96:81:57:3c:be:3d:17:c5:64:4a:dd:18:b0:44:8c:
13:81:3c:1d:5a:10:2b:0d:31:5a:e7:b7:52:aa:a0:
be:c7:c6:cd:92:41:ef:60:b8:58:d5:ab:59:e0:ec:
d4:71:13:62:96:3d:a6:2a:04:dc:1b:68:2b:2f:f3:
2b:ff:0e:09:1d:17:9a:fa:a4:1f:43:25:bd:bb:16:
55:5b:d4:8b:59:ba:c6:53:d1:3e:53:93:c6:90:90:
01:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5A:CA:05:0B:F2:08:CC:25:EC:82:A8:5E:35:BD:7B:05:F0:6B:B5
X509v3 Authority Key Identifier:
keyid:AC:8B:77:1E:25:7B:AF:27:DD:A1:0A:08:AB:58:B2:6C:F8:F7:5E:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIt3HiV7ryfdoQoIq1iybPj3Xgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f7:73:6f:47:b7:1d:bf:b6:67:43:4a:ce:a2:c5:d0:9c:b9:
00:c5:bb:ed:ba:db:69:cf:62:58:02:4a:46:a2:f9:1f:4a:fd:
57:9a:be:5f:c7:23:e4:17:3d:3d:a5:38:c9:99:7b:e4:92:74:
c8:e2:fd:6b:38:a1:9b:90:b6:41:c2:5d:89:87:77:e4:7e:ca:
42:44:1f:78:3d:c6:ab:a0:02:03:9b:46:69:b8:fb:20:f8:06:
86:36:87:2d:08:0b:92:6f:54:d7:3d:f0:1e:b1:ae:3e:a6:23:
b7:82:b9:60:5d:de:0f:a3:b8:52:93:4b:f9:fb:c1:4b:c0:17:
bd:25:94:f2:96:76:af:ae:85:72:13:81:a3:39:57:6b:36:9b:
a8:39:f8:d4:40:32:47:73:a5:1a:1d:90:63:82:38:12:47:4f:
fa:79:1c:d4:13:86:0c:0a:e6:b8:e0:27:ab:db:e2:e5:27:46:
83:60:8d:4d:5d:6d:26:10:f9:17:bc:bb:22:e9:b1:79:e8:26:
ea:31:7b:42:35:62:a7:90:4a:2a:1a:01:1b:7f:36:ac:42:12:
17:cb:3d:84:f8:92:16:f4:a5:14:b1:3f:87:d3:03:a4:56:90:
5b:f7:da:e0:83:e3:0e:0b:56:08:19:46:85:10:b1:4c:a3:a9:
be:f6:58:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:30:09 2026 by rpki-client