Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.mft
File: RPCGM8H1_XFU2I3h1syc17gEMK0.mft (raw, json)
Hash identifier: x8TBX/pxHINGwKR/EKd7vUdL6d1A8U5TUDjYjYoX0zI=
Subject key identifier: 98:88:CE:18:28:94:F5:67:EF:92:9F:64:21:65:AC:1A:DF:D3:22:37
Authority key identifier: 44:F0:86:33:C1:F5:FD:71:54:D8:8D:E1:D6:CC:9C:D7:B8:04:30:AD
Certificate issuer: /CN=44f08633c1f5fd7154d88de1d6cc9cd7b80430ad
Certificate serial: 01A0C4B2DF1A471AE38356B66E0836F7691E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPCGM8H1_XFU2I3h1syc17gEMK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.mft
Manifest number: 012B
Signing time: Mon 21 Sep 2026 16:00:51 +0000
Manifest this update: Mon 21 Sep 2026 16:00:51 +0000
Manifest next update: Tue 22 Sep 2026 16:00:51 +0000
Files and hashes: 1: 5KctcxsYT_6CBJ2cdoYPOhQAGc4.roa (hash: +1bCb5V2QswAKGR65R9SngG1RC/2PS62IO4DT3u7w0w=)
2: MT7FDc3brVHPS51pC1TSYkG931E.roa (hash: OXmE7HUkMdWGmBsN2LVDSTT5wVdQkht8zETc4dCdqB4=)
3: RPCGM8H1_XFU2I3h1syc17gEMK0.crl (hash: wWsqQfZhG1Xb7hq0EeX6ZN/DSi31mrbVxHr20Y4ZT70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPCGM8H1_XFU2I3h1syc17gEMK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b2:df:1a:47:1a:e3:83:56:b6:6e:08:36:f7:69:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f08633c1f5fd7154d88de1d6cc9cd7b80430ad
Validity
Not Before: Sep 21 16:00:51 2026 GMT
Not After : Sep 22 16:00:51 2026 GMT
Subject: CN=9888ce182894f567ef929f642165ac1adfd32237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f4:ab:a2:f2:39:72:1a:8d:9b:2c:ce:f6:3d:
78:71:6c:da:75:b9:38:7d:f9:51:69:d9:38:13:3b:
04:7d:6d:4c:8e:bb:a6:e1:60:9c:d5:17:1d:df:95:
1c:41:53:07:6e:73:a6:b0:e5:31:2b:21:7f:f9:61:
63:32:02:25:c9:d4:81:c2:01:fb:f1:0d:de:3c:4e:
be:fb:8b:33:a3:f3:71:a7:0d:25:4b:06:a1:54:fe:
3f:bd:ff:22:a0:42:d7:b0:5d:b9:00:9c:07:fa:b4:
61:6f:7b:5a:5f:09:e2:18:bc:e4:bb:9f:4d:12:2a:
91:c7:f3:b7:f8:14:6d:3e:e2:a7:86:a9:83:90:b9:
53:22:69:4b:35:b2:a1:0d:33:02:14:44:aa:87:bb:
48:57:32:ba:f8:27:aa:da:a8:e3:09:43:87:a8:66:
b4:49:7e:b2:19:51:fb:e5:8a:6a:b5:9e:64:c7:9a:
4f:80:c3:ad:fe:d7:e2:ba:66:77:c3:27:e7:89:1f:
1c:c6:ae:76:28:f8:21:03:d8:20:19:e8:0e:64:30:
f1:00:84:7a:51:1e:a3:70:4e:c9:7f:66:7d:eb:81:
f1:c4:bb:8f:22:be:4d:3c:9c:9b:87:9f:59:ea:54:
eb:d5:22:00:fe:db:94:e5:52:17:32:10:df:d4:a7:
1c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:88:CE:18:28:94:F5:67:EF:92:9F:64:21:65:AC:1A:DF:D3:22:37
X509v3 Authority Key Identifier:
keyid:44:F0:86:33:C1:F5:FD:71:54:D8:8D:E1:D6:CC:9C:D7:B8:04:30:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPCGM8H1_XFU2I3h1syc17gEMK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e9:ee:0a:2e:cd:89:76:fe:c8:e6:97:0e:d8:ce:7f:a4:c1:
15:e4:86:da:26:eb:36:e0:e6:03:f1:7b:5e:68:f1:18:38:ea:
7d:c5:cf:dc:b7:5f:1d:96:f8:76:61:99:d1:fb:62:8d:bb:fa:
56:e7:58:38:78:03:26:2f:a9:cf:16:7b:44:85:af:e4:33:4e:
f0:f0:99:c3:5f:b8:a7:52:cb:38:67:09:fa:37:ce:74:61:e7:
63:93:b0:d8:e2:62:81:bc:73:da:9c:24:e6:06:2d:e2:f3:86:
eb:54:77:91:b4:50:4f:f5:30:5e:4e:45:bd:90:2e:77:c3:b0:
e9:c0:ca:81:3a:a1:7a:fe:65:ba:68:28:3e:9f:d9:e9:1c:a7:
df:07:65:f5:94:6d:d6:ac:5d:05:65:64:9c:75:5e:5f:75:88:
a9:bf:67:92:6a:04:62:bd:e3:c7:08:1e:d5:2f:cb:90:ad:15:
fe:64:85:6b:80:b9:92:f3:b6:18:ec:22:7f:07:97:9d:27:dc:
bf:14:08:cb:16:dd:dc:31:79:7f:0d:2d:c9:35:f5:fa:6d:e2:
0f:21:e0:cf:4a:fd:df:4e:21:3b:ba:6f:cc:31:97:6c:15:c4:
94:5d:07:da:4c:5c:2c:ce:55:bd:81:5c:6b:85:cf:e7:83:d4:
87:b6:f2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:13:27 2026 by rpki-client