Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
File: fGlngv8SGuWm2dXPo4R5dotr8L0.mft (raw, json)
Hash identifier: UwHAfLcmI0WPLzL0lUgnzzFT4S6KW4QqfnCq/XgONQI=
Subject key identifier: D1:9B:9B:3D:39:90:82:D2:98:CF:72:CC:9D:F0:6D:7C:A9:3D:AC:16
Authority key identifier: 7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
Certificate issuer: /CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Certificate serial: 01A1DDCBD977E961A19BDB1055C8403E03EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
Manifest number: 1AF6
Signing time: Sun 15 Nov 2026 06:01:26 +0000
Manifest this update: Sun 15 Nov 2026 06:01:26 +0000
Manifest next update: Mon 16 Nov 2026 06:01:26 +0000
Files and hashes: 1: VDuV_ga9fKWg5ZTg4MIqY7BMCyw.roa (hash: KhFc35C6NWJw+95DJdGU/WqBGVukwlgQW3Tv6X8QShQ=)
2: YV2FC6tSLQepIUe84M0yNrIYwXI.roa (hash: a1BK4hhpvi1wRKKydzXpZZxOv3b6LUqaoMmqbdgZ8n8=)
3: fGlngv8SGuWm2dXPo4R5dotr8L0.crl (hash: vhkuEfY4scQU9CJWM0A3Mqe7Y2UmCI/ke0CZ6qIrxWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cb:d9:77:e9:61:a1:9b:db:10:55:c8:40:3e:03:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Validity
Not Before: Nov 15 06:01:26 2026 GMT
Not After : Nov 16 06:01:26 2026 GMT
Subject: CN=d19b9b3d399082d298cf72cc9df06d7ca93dac16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:aa:c3:a8:92:b2:6b:02:ed:6a:e7:f5:f4:52:
e1:7b:25:93:ac:d6:b6:da:d0:ff:4c:6a:e6:4e:67:
7e:92:01:3a:55:05:42:be:de:8a:a7:0c:fc:d2:85:
43:88:90:f3:d9:df:fa:72:c3:22:fc:45:9b:50:2c:
94:1d:e4:3e:f3:ad:72:04:88:1a:34:68:c8:31:ea:
25:5c:fc:88:93:c2:e1:04:31:b9:9e:fd:c4:df:bf:
2b:8b:e2:2e:2a:9b:de:40:40:d1:53:4e:39:2c:93:
89:01:d0:df:f1:01:e8:90:aa:db:1f:b4:32:80:40:
95:a3:53:47:8a:1e:16:6d:fc:a1:7d:b1:ab:ee:45:
a0:f8:e8:dc:a5:7c:c4:d2:e7:5e:b3:2a:cd:d8:63:
62:93:52:e2:c3:b3:39:cb:10:91:79:9c:a4:09:a2:
31:71:ae:36:c0:51:24:4b:79:b9:83:40:47:c1:14:
8c:cc:3b:2e:44:08:d4:9b:01:3d:38:84:fd:04:38:
d8:35:c1:2c:4f:24:52:9b:8b:99:a8:ff:0c:9b:c8:
e3:93:88:e3:e2:24:f5:83:e6:1e:79:a0:c7:79:6f:
4f:90:b4:77:0c:94:eb:ae:ca:e9:44:e8:3c:f1:82:
66:3a:b0:04:13:b8:74:58:b6:63:ee:26:4b:ea:9c:
43:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9B:9B:3D:39:90:82:D2:98:CF:72:CC:9D:F0:6D:7C:A9:3D:AC:16
X509v3 Authority Key Identifier:
keyid:7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:bd:88:bc:63:ea:00:77:73:bb:0e:f0:6e:4b:2f:e0:ba:9e:
15:66:61:fa:6d:fc:c7:8e:04:ab:83:10:57:ec:1b:82:83:f3:
ed:4c:21:49:d6:d2:05:57:25:f5:24:84:3a:2e:82:a2:50:0d:
eb:40:22:7f:08:cc:b5:a7:d4:83:ba:ab:88:88:08:d4:78:e3:
c1:1c:fe:36:cc:b7:46:f1:c1:77:a4:c1:52:57:a2:8f:4b:8c:
47:aa:ea:a2:57:04:18:6a:8f:60:58:a4:d5:06:92:8a:4b:14:
70:f5:10:b4:0b:32:e4:80:d9:b0:ab:b4:8f:76:4f:38:c4:3c:
2e:2b:0e:d7:3f:c2:87:ea:3f:1d:db:b5:51:10:1f:70:1b:2f:
85:54:a0:c0:4c:6b:3f:6a:60:73:71:5b:36:c3:32:d3:bf:56:
0a:d6:bf:cd:95:c7:a7:86:f2:fa:45:2c:e2:e1:69:df:1a:3c:
81:57:42:bf:05:a8:35:f2:4a:41:30:9f:6d:7c:c7:ee:97:42:
cf:4e:e0:4f:2a:50:61:2d:15:c0:13:1c:7b:21:df:ff:fc:34:
c5:99:21:45:78:6a:40:43:d9:16:0b:74:73:65:cc:86:3c:c8:
bc:b0:33:4a:94:04:36:11:60:e1:94:7a:8c:2b:f7:18:50:37:
da:89:0e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:40:11 2026 by rpki-client