Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
File: rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft (raw, json)
Hash identifier: LtclcRaC5EgDzZ0aeYKA5dqQEQilgH7I8Tv5H8ECRXI=
Subject key identifier: FE:CA:48:6D:A3:B5:23:67:11:70:6A:C2:4D:00:CE:7B:7E:D7:19:89
Authority key identifier: AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
Certificate issuer: /CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Certificate serial: 01A1C479055FEFA4D47336C31126AC357EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
Manifest number: 079B
Signing time: Tue 10 Nov 2026 08:00:27 +0000
Manifest this update: Tue 10 Nov 2026 08:00:27 +0000
Manifest next update: Wed 11 Nov 2026 08:00:27 +0000
Files and hashes: 1: Pq9ZuZBzVIXXjgHCRmaDImbQg2Y.roa (hash: 11bzHyr21wFIMkaSiukQigkPWPjefTdm2bknAq+/9g4=)
2: rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl (hash: 5slJ147Ng3ZyW11HvOiSzKamzw96qsRSFPENzjJnd0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:79:05:5f:ef:a4:d4:73:36:c3:11:26:ac:35:7e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Validity
Not Before: Nov 10 08:00:27 2026 GMT
Not After : Nov 11 08:00:27 2026 GMT
Subject: CN=feca486da3b5236711706ac24d00ce7b7ed71989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:62:f4:1a:94:d1:8e:f5:b5:88:89:d4:44:
12:1c:0d:67:27:40:48:5f:79:c9:01:4b:24:12:9f:
a6:ac:44:44:d6:35:d7:a9:17:e5:d1:3e:ec:ad:8c:
dc:b6:3c:68:61:8b:68:82:aa:f8:38:30:e3:ae:8b:
30:a0:e3:31:18:74:b5:04:8c:70:70:34:95:55:fc:
b8:f4:d3:f9:92:53:ac:ec:99:f8:c9:60:ae:c8:ee:
cc:b9:37:89:1d:11:21:1e:79:ae:fd:bb:fd:ab:70:
89:23:c7:95:7e:23:46:c4:e5:be:2a:21:56:73:59:
1c:4e:91:44:cb:b5:e6:ec:ce:1c:3e:a1:4e:51:43:
45:7c:42:70:94:ab:16:1b:36:3e:82:fe:6d:76:b2:
50:76:d5:5e:33:6f:03:39:37:e7:66:20:08:fb:e9:
35:04:56:37:51:9e:73:5c:6e:3e:1c:7d:bf:60:5c:
19:6d:64:9d:bc:e8:d3:bb:9d:a7:50:05:ce:84:43:
0f:05:10:ca:fb:0f:60:b0:3e:eb:ac:ee:e3:b2:47:
ce:ce:dc:95:fa:be:67:b9:13:0a:de:25:12:ea:f2:
f5:63:ae:d1:46:f0:13:d8:3e:23:cb:cd:e7:66:e8:
12:ad:bf:5a:17:c8:b9:8d:b1:64:26:70:3c:88:d3:
f8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CA:48:6D:A3:B5:23:67:11:70:6A:C2:4D:00:CE:7B:7E:D7:19:89
X509v3 Authority Key Identifier:
keyid:AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:15:ea:02:1c:87:97:5e:32:0d:96:22:c1:1c:95:9f:06:ff:
72:07:e9:9d:76:81:e2:b4:21:fd:71:fa:47:04:4b:8c:e4:de:
e6:1b:94:46:72:66:66:c6:ec:4f:3e:03:8c:2c:b9:43:65:86:
23:13:f1:c8:18:4f:f3:d8:43:c1:63:73:80:e3:07:da:8f:58:
ee:68:70:bf:e1:c7:55:f7:8a:29:30:b5:42:a4:8d:a3:58:87:
5a:2f:5e:59:f2:3a:08:32:d7:9d:b5:a7:a2:21:1d:7c:88:48:
aa:64:e3:90:0c:0a:42:ab:6f:aa:86:72:1b:a4:6c:ec:c5:47:
a8:7f:8f:62:cf:36:09:20:4a:3d:07:1c:91:f3:ac:f6:54:9b:
1d:6b:cd:5e:cc:97:55:d1:94:cd:f4:f1:99:64:e0:ff:08:27:
55:68:43:49:b2:39:08:66:60:be:58:ae:5d:1a:6d:b5:62:98:
02:df:59:5f:5b:0b:02:18:a8:ee:b2:cd:fa:fd:68:f4:ea:f5:
58:18:0c:3a:b1:ac:85:83:18:80:17:57:11:ba:01:f9:7b:98:
24:6e:01:ae:ba:4a:a1:74:8d:fb:1d:99:e9:77:e6:b6:83:63:
2e:70:81:99:c5:3b:bd:77:ae:e4:86:77:bb:15:5c:a0:5d:dd:
c9:29:ad:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHEeQVf76TUczbDESasNX6yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYjgzODVkMDg1NzA4MGNmYzAxM2FhNTIxYmRlNmEzYTkz
ZTQ4MTIwHhcNMjYxMTEwMDgwMDI3WhcNMjYxMTExMDgwMDI3WjAzMTEwLwYDVQQD
EyhmZWNhNDg2ZGEzYjUyMzY3MTE3MDZhYzI0ZDAwY2U3YjdlZDcxOTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE5i9BqU0Y71tYiJ1EQSHA1nJ0BI
X3nJAUskEp+mrERE1jXXqRfl0T7srYzctjxoYYtogqr4ODDjroswoOMxGHS1BIxw
cDSVVfy49NP5klOs7Jn4yWCuyO7MuTeJHREhHnmu/bv9q3CJI8eVfiNGxOW+KiFW
c1kcTpFEy7Xm7M4cPqFOUUNFfEJwlKsWGzY+gv5tdrJQdtVeM28DOTfnZiAI++k1
BFY3UZ5zXG4+HH2/YFwZbWSdvOjTu52nUAXOhEMPBRDK+w9gsD7rrO7jskfOztyV
+r5nuRMK3iUS6vL1Y67RRvAT2D4jy83nZugSrb9aF8i5jbFkJnA8iNP41wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7KSG2jtSNnEXBqwk0Aznt+1xmJMB8GA1UdIwQY
MBaAFKy4OF0IVwgM/AE6pSG95qOpPkgSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckxnNFhRaFhDQXo4QVRxbEliM21vNmstU0JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yYWE0NGQtM2JmMy00MjBiLWFlM2Ut
ZThhNmExNDQxOWQ5LzEvckxnNFhRaFhDQXo4QVRxbEliM21vNmstU0JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8yYWE0NGQtM2JmMy00MjBiLWFlM2UtZThhNmExNDQxOWQ5
LzEvckxnNFhRaFhDQXo4QVRxbEliM21vNmstU0JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfRXqAhyH
l14yDZYiwRyVnwb/cgfpnXaB4rQh/XH6RwRLjOTe5huURnJmZsbsTz4DjCy5Q2WG
IxPxyBhP89hDwWNzgOMH2o9Y7mhwv+HHVfeKKTC1QqSNo1iHWi9eWfI6CDLXnbWn
oiEdfIhIqmTjkAwKQqtvqoZyG6Rs7MVHqH+PYs82CSBKPQcckfOs9lSbHWvNXsyX
VdGUzfTxmWTg/wgnVWhDSbI5CGZgvliuXRpttWKYAt9ZX1sLAhio7rLN+v1o9Or1
WBgMOrGshYMYgBdXEboB+XuYJG4BrrpKoXSN+x2Z6XfmtoNjLnCBmcU7vXeu5IZ3
uxVcoF3dySmthA==
-----END CERTIFICATE-----
Generated at Tue Nov 10 17:15:05 2026 by rpki-client