Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
File: fNG8cAkF0axtdzOuvDJj5q52-pc.mft (raw, json)
Hash identifier: HUpKDFzhLQ0h+w5xtYr915aUadeLVIL2Q8l67HwsEL8=
Subject key identifier: 84:DF:51:EE:B9:12:A1:8D:EA:CA:63:E8:FD:2E:86:62:B0:9C:68:49
Authority key identifier: 7C:D1:BC:70:09:05:D1:AC:6D:77:33:AE:BC:32:63:E6:AE:76:FA:97
Certificate issuer: /CN=7cd1bc700905d1ac6d7733aebc3263e6ae76fa97
Certificate serial: 01A0C40DA5CE20F36E7A66F542D5697BA57F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
Manifest number: 044E
Signing time: Mon 21 Sep 2026 13:00:23 +0000
Manifest this update: Mon 21 Sep 2026 13:00:23 +0000
Manifest next update: Tue 22 Sep 2026 13:00:23 +0000
Files and hashes: 1: fNG8cAkF0axtdzOuvDJj5q52-pc.crl (hash: uLHjSJBGJW3SOXcc+G/fCnIjB6J/kVHjcVGLhZQcFyE=)
2: hhYndYmrtj6UVK4MXLjISC5kjY8.roa (hash: Hp6kG7ylNYSrFI+JCOb5ieLSxf03lMDks7YDXEs5v7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:a5:ce:20:f3:6e:7a:66:f5:42:d5:69:7b:a5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd1bc700905d1ac6d7733aebc3263e6ae76fa97
Validity
Not Before: Sep 21 13:00:23 2026 GMT
Not After : Sep 22 13:00:23 2026 GMT
Subject: CN=84df51eeb912a18deaca63e8fd2e8662b09c6849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e0:69:df:74:bd:6a:33:c6:c4:40:3a:53:5f:
d1:27:3b:be:73:2c:9f:97:22:27:fc:ed:e7:6b:6e:
61:06:b8:07:d5:4c:5f:f7:50:8a:b4:fa:dc:48:57:
9c:20:64:43:73:4a:56:ad:00:b0:ac:2c:28:03:c7:
42:e4:71:ee:ed:cc:77:10:40:ec:cb:8c:5f:7b:f7:
7a:7a:48:9f:7b:85:dd:8b:1c:c1:37:c1:a2:87:34:
f1:c0:44:c2:d5:fb:11:53:3a:4b:94:d3:f8:a5:28:
76:d8:13:78:7d:b3:e6:d6:b2:0f:7b:e4:18:e2:92:
b0:b4:a2:aa:6b:92:0f:43:72:50:68:43:76:b1:3a:
a9:12:5c:36:a0:54:d3:20:6a:a0:2a:87:8e:a3:05:
a6:31:ba:8f:49:96:d6:a3:c4:10:fb:22:c4:85:28:
33:e2:68:52:69:fb:a2:cc:d1:f5:ab:42:6a:1e:f0:
8e:55:e9:4f:59:a6:14:7c:12:5a:9c:fa:a5:74:36:
55:b8:7b:b8:4c:94:12:fb:e7:08:e7:53:27:6d:8f:
e8:c0:37:a6:7b:75:91:39:87:a9:ef:1e:f0:c0:ea:
6a:50:b1:56:95:34:2d:ca:bf:b7:33:9c:ec:f6:b3:
40:ee:ba:16:a4:06:75:2c:0d:d8:99:83:62:70:5f:
8e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DF:51:EE:B9:12:A1:8D:EA:CA:63:E8:FD:2E:86:62:B0:9C:68:49
X509v3 Authority Key Identifier:
keyid:7C:D1:BC:70:09:05:D1:AC:6D:77:33:AE:BC:32:63:E6:AE:76:FA:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:53:45:98:29:2d:ef:c7:34:95:2b:5a:e4:ed:3b:1f:51:8d:
fb:db:31:c1:ed:77:a4:a9:94:b8:0d:0e:91:0d:5e:c8:d3:8a:
da:70:7f:66:fa:a2:bd:74:c3:be:0b:3e:20:b2:2f:98:79:40:
cc:eb:3e:2f:fb:ef:7b:a3:88:d5:18:9b:58:b8:af:72:71:7d:
d2:55:d7:06:1d:ca:a6:74:5c:32:10:99:2c:e8:98:02:3c:b2:
c0:bd:43:0a:7e:6c:6b:2e:50:f3:3a:96:51:28:a2:3f:61:a7:
ee:a3:4b:b5:78:30:a4:a6:e6:6d:3b:7c:d9:d2:a5:96:c1:07:
75:35:14:34:a3:40:bb:a4:a8:85:7d:6b:13:a8:4f:b1:23:4b:
f2:08:c9:25:2c:f5:50:a4:a3:42:6b:d9:17:a3:69:ce:4c:a3:
9d:6c:2b:e7:de:4a:b7:b0:f2:a2:52:bc:1a:3f:32:61:bc:8c:
3b:c6:38:85:86:25:d1:ba:83:0c:1d:e8:7d:b6:54:ae:88:b5:
be:55:40:fa:22:08:1f:30:fd:6f:a6:9c:57:ef:1b:59:cd:56:
bb:22:6f:3c:f9:87:60:29:39:11:d6:b7:54:24:01:3f:53:46:
76:30:e8:dc:b1:27:7a:09:eb:91:07:e6:9a:bd:72:90:eb:ac:
d2:03:c0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:43:31 2026 by rpki-client