Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
File: fGlngv8SGuWm2dXPo4R5dotr8L0.mft (raw, json)
Hash identifier: dO5oZ/OskHEWV89SXa27ALuuJwXHeIGX3T35YjyvbNM=
Subject key identifier: 70:02:14:2A:18:EC:D4:D5:5E:FE:8F:20:20:49:3A:BD:F0:72:13:41
Authority key identifier: 7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
Certificate issuer: /CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Certificate serial: 01A0C5C5A07C5D5A644D9CFF8492BA4A3AE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 21:00:58 +0000
Manifest this update: Mon 21 Sep 2026 21:00:58 +0000
Manifest next update: Tue 22 Sep 2026 21:00:58 +0000
Files and hashes: 1: VDuV_ga9fKWg5ZTg4MIqY7BMCyw.roa (hash: KhFc35C6NWJw+95DJdGU/WqBGVukwlgQW3Tv6X8QShQ=)
2: YV2FC6tSLQepIUe84M0yNrIYwXI.roa (hash: a1BK4hhpvi1wRKKydzXpZZxOv3b6LUqaoMmqbdgZ8n8=)
3: fGlngv8SGuWm2dXPo4R5dotr8L0.crl (hash: NBkvoGLnaLgi87nfyS4FZe/ujS6CJtd71vsm9OaXhvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:a0:7c:5d:5a:64:4d:9c:ff:84:92:ba:4a:3a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Validity
Not Before: Sep 21 21:00:58 2026 GMT
Not After : Sep 22 21:00:58 2026 GMT
Subject: CN=7002142a18ecd4d55efe8f2020493abdf0721341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:82:ce:bc:f4:bc:ed:e1:3d:8d:0b:1c:00:13:
f0:31:5a:6a:4d:e1:84:93:e1:87:21:9a:d4:6c:fa:
cf:22:58:d7:12:aa:73:29:dc:23:fe:0b:15:3b:98:
c3:48:65:00:96:2d:28:ef:e3:53:f0:6f:7f:05:a0:
d9:3b:f0:cc:19:a4:d0:82:70:26:80:d4:e8:7f:37:
c8:6e:f2:8b:12:ad:89:72:a3:71:fb:c8:b8:ef:8d:
b9:f7:c9:db:5c:d6:28:1e:d1:33:8e:a7:d8:01:93:
e4:77:c3:87:fc:66:53:ae:97:15:19:2f:34:59:7d:
54:6b:03:f2:5a:73:24:e4:87:c8:c3:a8:2b:ef:89:
ee:aa:da:a6:27:30:02:6b:c0:6d:06:26:2c:80:b4:
9e:f1:64:18:1a:b1:de:a6:ea:11:2c:c5:50:6a:9f:
78:60:08:bf:e2:7f:06:c9:09:20:fc:92:ec:96:e0:
24:86:82:df:c8:22:af:55:eb:db:c0:97:df:12:1c:
78:b2:a4:7c:fb:c2:4b:74:0c:94:32:86:db:20:66:
bf:12:27:36:57:64:dc:9f:2f:14:3a:4f:8f:cb:05:
5f:a0:84:85:a2:42:6f:bc:6e:a9:6d:24:e4:a6:da:
c0:23:5c:f2:e1:bf:8c:c8:af:57:75:f4:3b:9d:97:
94:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:02:14:2A:18:EC:D4:D5:5E:FE:8F:20:20:49:3A:BD:F0:72:13:41
X509v3 Authority Key Identifier:
keyid:7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7a:82:70:f5:4a:40:03:4c:4f:c6:d0:6d:76:a9:d6:96:66:
b9:22:6a:44:41:d8:15:d5:2d:34:1b:f7:b0:5b:2e:ad:76:87:
b5:70:09:6b:c1:58:39:0c:78:40:3c:81:cf:fa:ad:10:5c:4e:
b3:5e:34:d6:5f:4c:38:70:fa:c6:4a:b4:d7:a5:f8:57:12:de:
3e:44:d6:ba:b9:51:92:29:f9:9d:73:5b:e5:20:04:84:ed:52:
0e:11:92:16:43:f7:f1:cd:db:89:b8:40:40:e7:2e:b6:df:ea:
b2:93:5a:39:d2:35:9c:ae:e5:c2:d7:a3:26:0a:a5:a2:f3:45:
cc:be:2a:10:a4:8f:e5:c4:d7:9e:91:6f:96:ac:33:d0:be:ea:
fd:31:e0:e3:66:91:5c:46:62:83:6b:06:ab:42:03:69:30:0c:
b4:d6:de:72:25:b2:62:cf:db:c5:39:88:94:dc:b5:ff:b5:ff:
4d:ba:75:d1:03:f9:37:73:0d:ec:f0:01:ef:92:de:44:57:72:
70:7d:56:0e:24:7b:8c:8c:88:b7:81:9e:1f:fb:38:1c:06:01:
ab:77:17:c1:47:9e:78:09:2b:67:2c:b1:d0:1a:d1:71:03:1b:
e8:40:29:30:46:12:a5:9e:fb:4e:04:2d:b7:3d:e7:23:1a:01:
54:65:3a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:30:50 2026 by rpki-client