Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
File: rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft (raw, json)
Hash identifier: BG1bbyyRhE5pizOkPDgY/46gOOX4QOtB/01a3WK7Hwc=
Subject key identifier: 69:09:0E:C9:E1:5A:61:39:F9:DC:7D:CB:76:88:3F:C3:1C:CF:F8:88
Authority key identifier: AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
Certificate issuer: /CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Certificate serial: 01A0BFC32E4CD1275E2B1331AE14882AF363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
Manifest number: 0714
Signing time: Sun 20 Sep 2026 17:00:34 +0000
Manifest this update: Sun 20 Sep 2026 17:00:34 +0000
Manifest next update: Mon 21 Sep 2026 17:00:34 +0000
Files and hashes: 1: Pq9ZuZBzVIXXjgHCRmaDImbQg2Y.roa (hash: 11bzHyr21wFIMkaSiukQigkPWPjefTdm2bknAq+/9g4=)
2: rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl (hash: MXzsXCyhKRjRS0dqKgMm6PCWyHgU8uF7gNMfD2EiAME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:c3:2e:4c:d1:27:5e:2b:13:31:ae:14:88:2a:f3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Validity
Not Before: Sep 20 17:00:34 2026 GMT
Not After : Sep 21 17:00:34 2026 GMT
Subject: CN=69090ec9e15a6139f9dc7dcb76883fc31ccff888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:50:b6:58:74:f0:bd:82:b9:87:4c:54:38:
6d:19:55:fa:30:ba:ff:01:a2:eb:82:15:5c:a4:79:
2e:86:da:04:08:9d:d5:fa:21:c2:db:76:f1:56:9e:
7b:37:56:32:8e:60:c7:d8:9e:c4:37:e8:50:41:b7:
59:5f:76:d3:ee:d9:41:f9:57:bb:7d:6f:e6:13:17:
ad:ad:40:9a:0b:87:36:35:d2:77:ed:cd:c8:b4:72:
ed:18:1e:5c:13:af:c9:e5:2e:c1:a5:97:07:f3:6b:
24:1d:87:63:2d:a2:ec:ac:5b:f6:78:e5:38:45:a3:
a3:27:7d:e6:12:1e:46:72:04:0f:dd:01:b3:8d:ee:
e3:3e:10:95:9b:cc:36:ae:d0:cf:68:72:b7:6d:d1:
c3:c8:d7:5d:c1:e6:28:3f:d5:d0:fa:d7:e3:f0:1a:
e8:ec:18:dc:a9:8a:5d:32:48:c9:2c:e7:b1:67:32:
e0:28:07:cf:35:d7:79:40:ba:2c:e6:a9:e8:fd:8a:
1a:5c:11:a4:95:33:7c:2c:f6:9b:e0:76:7f:01:0a:
00:a0:c0:d6:2c:cc:f9:bb:ce:69:25:f0:45:77:f3:
df:2a:1a:25:0e:8a:e1:00:69:20:ec:d6:f0:fc:ab:
a6:3c:05:9d:6b:92:a3:5f:9d:1b:ab:d2:f1:7f:17:
26:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:09:0E:C9:E1:5A:61:39:F9:DC:7D:CB:76:88:3F:C3:1C:CF:F8:88
X509v3 Authority Key Identifier:
keyid:AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:cd:2d:54:bb:da:fe:ab:b0:04:2b:6f:92:ff:3a:0d:85:42:
a0:83:2b:fd:4e:e4:d9:42:f7:1e:2d:b7:29:a2:33:2c:eb:98:
29:61:a1:29:ba:7a:60:31:a0:e4:e2:5f:c2:12:64:69:a7:79:
02:75:02:ce:7c:88:65:6a:df:0d:e0:0c:4a:0a:df:cf:25:19:
6e:3c:64:26:f1:be:ae:64:a1:11:b9:a5:62:97:af:49:79:8d:
8f:ad:77:7a:4c:a5:3f:14:d3:26:01:3b:60:84:09:ac:63:5c:
95:ef:e8:39:a2:1b:95:6a:7e:75:79:95:c6:fc:cb:f2:4a:63:
7c:4c:88:df:61:f9:b9:51:e3:a3:73:31:a2:87:cd:e6:06:62:
f4:8b:6b:91:04:73:02:da:6d:23:68:ef:74:49:a9:85:bb:69:
32:ac:45:70:a7:fa:f0:42:2c:91:4d:99:4c:99:83:6c:45:52:
18:b6:96:28:c0:64:aa:61:50:8f:68:93:34:72:48:4c:c4:e3:
95:08:39:9f:19:05:6d:08:4c:12:4c:a8:e2:36:75:16:49:d6:
97:c2:d9:89:8a:4c:3d:b2:c9:0a:b3:49:a1:6d:1d:1d:33:cc:
da:24:f6:e5:51:77:5c:ca:33:b4:5d:fe:76:86:29:65:02:80:
a5:68:3a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:40:38 2026 by rpki-client