Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
File: rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft (raw, json)
Hash identifier: hvphIaMWn9dTulpljzGFoSjERFDVvYKhnwgORnnxJ8A=
Subject key identifier: 90:FE:F0:DB:CF:73:39:8E:FE:C7:C3:9A:0D:90:DD:B4:70:AF:5F:8A
Authority key identifier: AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
Certificate issuer: /CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Certificate serial: 019CAC0FB9E54EE82AA0FEFB5D771844B079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
Manifest number: 185A
Signing time: Mon 02 Mar 2026 01:00:37 +0000
Manifest this update: Mon 02 Mar 2026 01:00:37 +0000
Manifest next update: Tue 03 Mar 2026 01:00:37 +0000
Files and hashes: 1: 9yXjetA_9LZJZxTsSX9y22ZXwZI.roa (hash: lMfThegQdVTCBwkXRaAXX4LmXRlXKEgH0ZgEcCTMjEk=)
2: WcITaUECKrRS-00UJB2toA0EWBA.roa (hash: 7Dbd0N6O8xlvKSw9ngaRpgSG6WpLRxBISHsmkzDSkD8=)
3: ldmxJAkKvmlHgUpkQnhFLSPjlKg.roa (hash: f+2m7+QBQ2xNK66onBBuHDLsOd1zJ2s1AavJSLAavCU=)
4: rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl (hash: 0HEaUhr22P/BXXe2nREBOp93n/EI7x4nw0dHPp/Cfu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:b9:e5:4e:e8:2a:a0:fe:fb:5d:77:18:44:b0:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Validity
Not Before: Mar 2 01:00:37 2026 GMT
Not After : Mar 3 01:00:37 2026 GMT
Subject: CN=90fef0dbcf73398efec7c39a0d90ddb470af5f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7c:7e:e9:6e:d6:21:cc:c9:f0:13:1b:4f:3e:
14:cb:6b:d2:e7:78:e7:7b:c6:37:11:83:5f:6e:2e:
ab:7f:74:e8:89:f3:32:49:0f:3a:61:58:93:31:0d:
ac:9a:05:de:89:0c:f6:03:f2:f2:b1:d6:87:39:c5:
32:8b:dd:d9:12:44:06:b8:f7:b6:bd:12:b1:7f:77:
99:03:f9:c3:45:54:02:cd:5d:4e:eb:16:9f:f2:8f:
02:42:e0:03:ee:45:66:92:03:ce:49:c8:96:6c:16:
d0:f3:82:c2:70:94:b1:92:2d:55:5e:c7:c3:cc:e5:
62:d4:fc:4e:85:c0:36:b0:1c:89:45:2d:72:16:21:
89:63:d0:b4:87:61:52:f3:21:37:90:de:7e:e7:4a:
39:5b:bb:79:2c:45:b5:8c:1f:4e:1d:6d:7c:16:02:
97:75:89:7f:89:38:30:8c:70:d4:bd:c9:c4:fc:02:
90:37:4f:58:1d:12:67:85:49:07:ee:fa:1a:a0:aa:
3b:0e:a7:d3:74:c0:50:a7:40:93:81:1a:0e:72:49:
c1:d5:09:6a:3b:c7:c2:a9:fd:45:46:6c:b7:00:ba:
e5:7d:f9:3a:ec:cd:ae:e2:80:16:67:e1:95:d2:6f:
9d:26:9a:69:8b:69:74:02:ab:3c:49:bb:cd:3b:c9:
58:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FE:F0:DB:CF:73:39:8E:FE:C7:C3:9A:0D:90:DD:B4:70:AF:5F:8A
X509v3 Authority Key Identifier:
keyid:AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:40:74:62:5b:fc:4d:3d:ec:8f:0d:65:36:d8:0c:f7:ae:44:
b9:2c:27:7b:23:ea:0e:59:fb:aa:7c:0a:de:53:a7:0e:53:64:
73:2b:26:ca:ab:d6:66:86:a9:42:06:9a:30:23:c5:9c:2a:3a:
f0:e9:a3:9f:03:6e:d7:16:81:84:d0:bb:76:c4:bf:ef:b5:ae:
46:95:88:6e:8c:e7:b7:ef:28:21:3c:a0:66:d4:d0:08:59:d1:
79:02:ca:2c:4c:d9:43:bc:9e:a6:e2:4e:37:d4:01:df:ad:f9:
26:5a:0e:62:b9:56:94:b9:99:ec:53:88:82:3e:7d:fa:fc:05:
23:69:3d:48:74:3b:d6:e3:50:88:83:6b:da:b9:15:33:35:bf:
1a:92:67:b8:25:f7:7f:e2:d8:cd:81:05:93:a3:48:73:29:a1:
db:cf:1d:2f:a9:1d:c9:6a:35:1c:12:40:56:a7:d7:af:5e:aa:
e8:db:28:f3:64:0a:0d:0f:5d:3e:26:47:5c:7b:5e:ab:40:06:
1c:8b:d0:f4:76:80:05:57:d6:e2:5f:0b:54:e9:fa:a8:b7:6a:
ae:54:c0:b7:5e:4c:dd:57:fe:c8:30:86:17:2b:2c:a9:ee:66:
1c:5d:7d:0a:56:5e:39:71:f5:9b:1a:30:1f:ff:58:a5:9f:cb:
ad:63:be:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:45 2026 by rpki-client