Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
File: fGlngv8SGuWm2dXPo4R5dotr8L0.mft (raw, json)
Hash identifier: X3CkEHyVbyL5rMCG9+XsD4KoXtP4Yql7I2wt42HjOCE=
Subject key identifier: B0:87:50:C2:8C:C2:3C:E4:37:30:F2:2A:42:52:82:20:EA:6D:57:57
Authority key identifier: 7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
Certificate issuer: /CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Certificate serial: 019CAB346DE924C93904C53C2C9FA6F37104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 21:01:05 +0000
Manifest this update: Sun 01 Mar 2026 21:01:05 +0000
Manifest next update: Mon 02 Mar 2026 21:01:05 +0000
Files and hashes: 1: VDuV_ga9fKWg5ZTg4MIqY7BMCyw.roa (hash: KhFc35C6NWJw+95DJdGU/WqBGVukwlgQW3Tv6X8QShQ=)
2: YV2FC6tSLQepIUe84M0yNrIYwXI.roa (hash: a1BK4hhpvi1wRKKydzXpZZxOv3b6LUqaoMmqbdgZ8n8=)
3: fGlngv8SGuWm2dXPo4R5dotr8L0.crl (hash: H1S92yG70Wa+w5H7cywg9P64JJcr24SInuGsobv7AHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:6d:e9:24:c9:39:04:c5:3c:2c:9f:a6:f3:71:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Validity
Not Before: Mar 1 21:01:05 2026 GMT
Not After : Mar 2 21:01:05 2026 GMT
Subject: CN=b08750c28cc23ce43730f22a42528220ea6d5757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:72:46:db:fa:4b:2f:ed:35:bd:2d:83:f2:
94:f7:c7:3a:33:6a:0b:23:b1:ff:14:86:b9:7e:63:
96:25:d3:91:31:7e:42:06:b0:80:35:49:88:d2:dd:
5d:fd:24:76:63:56:95:6a:7c:52:d8:bd:2f:db:03:
83:64:fb:00:e5:e8:2b:28:fd:2f:bd:1f:6e:d7:5d:
22:4e:27:f6:c7:4a:ea:f4:c5:34:d2:c4:54:db:66:
c2:cd:1e:8e:8c:c0:90:9a:12:62:6f:01:66:f0:67:
06:3e:19:30:1a:b5:0a:23:fd:0f:3b:f6:4a:ae:76:
ba:7a:4a:1f:13:34:bd:13:5f:eb:9b:47:64:a5:ce:
66:e2:09:c2:15:c9:08:13:da:0b:39:50:9f:90:80:
8d:d9:8f:bc:52:68:6a:a8:6b:09:17:cc:ce:fd:ed:
40:4b:f6:5c:b1:ee:6e:17:6f:78:4f:6f:c3:a2:b4:
ec:2c:2e:bf:24:76:17:91:09:30:d7:95:30:e2:54:
4e:b9:31:9f:92:b5:94:67:f6:30:dc:f2:da:84:20:
20:65:b4:8c:16:b7:46:b8:7b:aa:6f:55:fe:cd:4e:
1f:8d:8f:05:a0:8e:20:4d:6f:01:57:68:b9:20:52:
ab:65:e4:96:a2:ef:29:65:05:ca:ed:25:e1:9d:d2:
16:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:87:50:C2:8C:C2:3C:E4:37:30:F2:2A:42:52:82:20:EA:6D:57:57
X509v3 Authority Key Identifier:
keyid:7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d0:ec:de:ca:1e:79:9b:58:0a:5a:f8:90:fb:87:23:59:22:
45:6a:a3:e3:2f:ca:fb:be:aa:d5:bc:57:9e:54:a6:a8:8f:be:
6b:96:97:14:0a:5d:8a:e7:44:94:e2:da:dd:1e:bf:8f:14:b6:
53:db:12:f5:28:6b:4c:66:6f:f8:40:ba:a6:dc:06:09:1e:f1:
c8:42:8f:58:cb:7a:9d:a6:3a:b6:de:d4:f8:db:89:d5:0b:72:
fa:1d:22:51:38:55:27:eb:89:96:d7:5e:11:81:a4:4c:81:9f:
fc:0e:b6:13:dc:53:fa:49:7c:04:e2:be:96:4f:17:1d:d7:2f:
cb:9a:1a:d5:c8:ad:ab:24:c1:ba:d4:0f:9c:35:54:9c:76:36:
43:17:5d:68:b0:3b:f6:99:49:f8:7f:09:ae:f0:89:96:c2:4d:
ba:4e:6d:f8:6d:80:8f:e8:bf:d7:e1:0f:98:76:be:ed:0a:cd:
ea:0b:93:7b:76:6d:93:ac:3a:6e:df:69:85:76:a5:58:18:f3:
2b:2a:0c:c4:6b:35:80:5b:1b:1a:8d:22:95:ba:3d:d0:68:d6:
bf:ec:67:ee:31:d6:80:18:a9:21:ab:bd:5e:82:99:78:44:6d:
ca:a0:47:1a:16:f7:61:93:a3:1b:7d:c7:78:74:3b:67:ff:94:
3c:d0:ae:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:22:35 2026 by rpki-client