Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.mft
File: rfLQhXs0qcROPlRbVqgWm8fD7Zg.mft (raw, json)
Hash identifier: c8XRoLKHsiCYxjtcPNZAcYr2IaXY0TdS88gPJ51Z3QE=
Subject key identifier: 74:8C:97:36:4A:E6:D0:8E:A1:B1:80:8C:98:75:6F:DE:95:B1:1B:3B
Authority key identifier: AD:F2:D0:85:7B:34:A9:C4:4E:3E:54:5B:56:A8:16:9B:C7:C3:ED:98
Certificate issuer: /CN=adf2d0857b34a9c44e3e545b56a8169bc7c3ed98
Certificate serial: 01A13A49B4696A940F47FBB098CED4477BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfLQhXs0qcROPlRbVqgWm8fD7Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.mft
Manifest number: 011C
Signing time: Wed 14 Oct 2026 12:01:10 +0000
Manifest this update: Wed 14 Oct 2026 12:01:10 +0000
Manifest next update: Thu 15 Oct 2026 12:01:10 +0000
Files and hashes: 1: en3Dgcg-QCYV7nam7q3FCP5ZkR0.roa (hash: l3a1Se4v22VtVm5ZL/5W5MYgFfditJOkAKvu9Xf04q4=)
2: rfLQhXs0qcROPlRbVqgWm8fD7Zg.crl (hash: VEmWLlZhXCSZFpDdrKWGrsjdOprY5vLPM6KjlDfChUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfLQhXs0qcROPlRbVqgWm8fD7Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:49:b4:69:6a:94:0f:47:fb:b0:98:ce:d4:47:7b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf2d0857b34a9c44e3e545b56a8169bc7c3ed98
Validity
Not Before: Oct 14 12:01:10 2026 GMT
Not After : Oct 15 12:01:10 2026 GMT
Subject: CN=748c97364ae6d08ea1b1808c98756fde95b11b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:38:88:c7:df:e4:19:0f:15:c5:ed:bb:2d:a0:
83:bd:2a:85:01:c4:b3:70:a5:eb:49:24:2f:15:dc:
e7:f2:7d:0c:64:c2:bb:b7:7e:7e:0a:0b:78:2a:fe:
28:3b:0d:6c:c9:da:55:c1:30:73:3b:7a:65:67:e6:
8c:e7:a9:d9:fb:cf:5a:71:7e:cd:9b:3d:a5:ef:e6:
ea:e3:e1:11:91:3c:7f:77:f4:bd:27:48:af:6c:5b:
9f:1a:1a:85:d9:7a:a6:20:1d:21:6b:18:6e:cc:40:
7a:bb:76:cc:f6:5e:02:c7:16:77:8f:89:34:1e:9a:
73:d2:a9:9b:55:8d:3a:f5:3b:1c:fd:e6:77:78:72:
84:9e:ee:14:e3:16:34:ff:ab:b7:a0:a0:7c:a5:5e:
da:ec:12:b4:ff:cb:45:0d:53:99:86:95:f9:ba:74:
39:ad:2e:f4:b0:e9:e4:6a:ee:85:ce:35:41:a9:b6:
85:53:d8:61:c5:5e:46:49:a2:0a:61:ff:a8:6a:d6:
e3:15:21:8b:24:19:7b:b8:c0:dd:83:be:33:55:ba:
4e:d7:16:27:14:9a:79:8c:56:5b:76:9e:cd:73:9a:
b4:1c:8b:7e:a0:a7:cc:71:7f:21:f8:68:22:47:a1:
ad:ea:95:57:31:7b:f7:9c:bd:57:68:6d:a1:a0:14:
34:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8C:97:36:4A:E6:D0:8E:A1:B1:80:8C:98:75:6F:DE:95:B1:1B:3B
X509v3 Authority Key Identifier:
keyid:AD:F2:D0:85:7B:34:A9:C4:4E:3E:54:5B:56:A8:16:9B:C7:C3:ED:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfLQhXs0qcROPlRbVqgWm8fD7Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3a:50:65:16:d0:21:cc:32:bc:7d:a1:e4:18:c0:d6:a1:80:
9c:db:4f:26:6d:4c:af:4c:bb:78:1c:99:fb:d7:40:a3:ca:5a:
95:7b:bf:17:16:cc:a3:9b:b0:11:b3:00:f8:b4:03:e0:bc:2d:
f0:22:76:25:ec:8c:39:fb:6a:26:93:f4:cb:e2:38:1d:e2:b3:
5f:d1:3d:f6:a7:d3:b8:b6:03:68:8e:39:67:78:17:91:04:60:
82:be:17:5f:70:aa:5d:c3:ee:c3:ab:98:68:45:5d:59:07:f3:
e0:0e:82:c2:f7:7f:16:3c:7e:3e:cc:f4:2b:de:22:1f:b5:c6:
27:75:38:9f:70:0f:59:75:b7:d9:a2:07:8b:7e:51:b7:92:45:
fe:0e:90:06:51:dd:e5:32:fd:07:c0:07:bf:de:47:a1:47:53:
f3:68:26:95:28:d4:b7:9a:0a:11:df:1c:df:63:9c:43:57:30:
76:e0:91:b9:9b:16:fb:ac:23:0a:43:2b:c8:ab:ee:0d:f6:2a:
6f:f5:f2:30:14:93:3f:0f:c0:8a:2c:f1:59:9b:5b:24:5a:df:
df:76:9e:a9:c8:ba:cf:0e:5e:82:c2:dd:f4:b1:cc:b5:9b:bb:
7b:b0:1a:f4:11:fa:12:4d:43:45:b1:d4:79:c9:59:fa:ad:3f:
4e:43:fb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:40:43 2026 by rpki-client