Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
File: RI63RgCeGCwI7YT4F30ACKZIWD0.mft (raw, json)
Hash identifier: XiWu1+9v52q/yEwPuX+7/RffThfey9n4fZvQi5wRdoA=
Subject key identifier: 3B:84:E7:60:AE:53:57:2F:31:C6:36:D1:06:78:01:9A:3A:D9:DC:C7
Authority key identifier: 44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D
Certificate issuer: /CN=448eb746009e182c08ed84f8177d0008a648583d
Certificate serial: 01A0CFDB0FE75F6F266298DC6627F671ED81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
Manifest number: 021B
Signing time: Wed 23 Sep 2026 20:00:35 +0000
Manifest this update: Wed 23 Sep 2026 20:00:35 +0000
Manifest next update: Thu 24 Sep 2026 20:00:35 +0000
Files and hashes: 1: QVq18C8a73aIQH-AcKRLMzpO3YQ.asa (hash: 2HTUzLpfDHOgyVFMt6dJ4aJ9WtaWtmAe0f3l6ljlAeU=)
2: RI63RgCeGCwI7YT4F30ACKZIWD0.crl (hash: 4Lzj2IKuxx+J66ZSxxdKKPNUaHwO9aDkS/eJ7JIfLCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:db:0f:e7:5f:6f:26:62:98:dc:66:27:f6:71:ed:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=448eb746009e182c08ed84f8177d0008a648583d
Validity
Not Before: Sep 23 20:00:35 2026 GMT
Not After : Sep 24 20:00:35 2026 GMT
Subject: CN=3b84e760ae53572f31c636d10678019a3ad9dcc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1b:88:47:49:06:d4:93:45:7a:a0:73:8a:84:
84:aa:c8:14:ed:b1:d6:c6:f9:f8:fb:cb:13:ee:be:
cb:51:ce:06:34:96:4b:8c:1b:c7:4d:82:4b:a1:c5:
5d:73:62:20:b5:5e:65:f9:06:26:9e:72:f0:3f:2b:
78:cb:3d:ca:70:6a:b5:d4:46:12:2c:9b:2a:00:ba:
4b:a6:25:86:0a:c4:3b:42:49:59:46:2f:d5:e7:14:
30:79:4f:52:00:d7:78:b7:90:09:06:93:2d:e4:9d:
b7:81:3d:fd:20:66:94:23:96:65:f3:82:20:21:e8:
10:18:91:81:17:4c:c6:04:86:d1:fa:cc:b0:5f:7e:
12:cc:5b:f9:5f:22:a9:1f:49:9b:81:44:27:72:90:
35:77:5e:9e:3c:38:57:09:97:2c:21:71:bc:33:c2:
0a:ef:49:aa:99:1b:70:5c:fd:35:4d:ea:58:c5:b9:
75:27:da:26:2b:f6:d5:24:5a:92:36:2f:f7:af:11:
75:08:e1:2e:b3:4f:65:2d:94:d1:69:1e:58:97:8e:
24:fa:d0:cf:b4:57:e7:b4:e1:d9:8d:2c:97:cf:d8:
41:40:85:b1:90:e7:1b:b1:b9:56:78:b3:f3:d1:82:
a8:f9:2a:0d:5f:71:22:4d:13:9b:61:5b:f2:fb:04:
fb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:84:E7:60:AE:53:57:2F:31:C6:36:D1:06:78:01:9A:3A:D9:DC:C7
X509v3 Authority Key Identifier:
keyid:44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b7:a3:85:71:e5:aa:a8:8f:82:3d:11:db:a5:71:c0:cb:0c:
5f:6a:90:a5:a5:15:27:7b:2b:5f:63:3d:e1:36:d7:b1:0a:1c:
1c:34:d4:62:44:bc:5f:b7:49:bd:12:95:c4:a3:42:22:15:87:
d7:e9:81:69:80:2b:5b:24:02:7b:d5:28:3f:75:72:4d:ea:3f:
58:85:d8:02:61:d4:f9:81:07:83:2c:41:c7:4d:45:2a:3a:b2:
5c:ec:29:fb:83:0f:3d:fa:eb:c3:56:1f:3f:ab:12:95:d1:f3:
92:79:60:4b:de:c5:d1:b6:0a:7a:f2:06:29:9c:ee:da:c3:7e:
29:04:b4:26:a1:47:76:ca:03:6e:38:37:b2:5e:f2:6a:d3:bc:
cb:69:42:94:df:47:38:c9:81:26:22:b6:9e:2d:00:bc:94:1d:
cc:20:6f:d7:39:d6:e3:74:8c:15:b2:64:b9:94:a8:f2:51:e0:
96:a0:3a:ff:7e:54:df:9c:94:6c:3c:20:11:ce:b0:1d:2e:4b:
40:b5:0e:52:2c:90:ff:11:97:45:b4:0a:6a:da:66:db:7c:9f:
b7:9f:15:9c:c4:17:a6:aa:0c:76:a4:b0:c4:85:c9:d4:18:96:
4c:9f:2c:e6:db:d9:01:d0:c9:e0:ed:63:c7:af:5c:51:04:b4:
1c:7d:7d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:54:11 2026 by rpki-client