Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
File: iuqCkaUdU780Tc2HYs22gp0eS8A.mft (raw, json)
Hash identifier: f+4veY1iAkxA3DKHoU/bSe2WfDqQNVgNIlipgkJyaxs=
Subject key identifier: C0:F6:24:F2:15:E0:6F:2F:A9:7A:1E:51:DE:CA:55:DB:64:67:68:90
Authority key identifier: 8A:EA:82:91:A5:1D:53:BF:34:4D:CD:87:62:CD:B6:82:9D:1E:4B:C0
Certificate issuer: /CN=8aea8291a51d53bf344dcd8762cdb6829d1e4bc0
Certificate serial: 01A1DCEFBEEDDF4728B49D0E8277E364EE7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
Manifest number: 021F
Signing time: Sun 15 Nov 2026 02:01:01 +0000
Manifest this update: Sun 15 Nov 2026 02:01:01 +0000
Manifest next update: Mon 16 Nov 2026 02:01:01 +0000
Files and hashes: 1: 4SlzM-sGWP46tyVv_wrUa4CabZA.roa (hash: Jx1fb+Jw8u6JyIBt5MEzG+uInp5htojQWTHAKQkPCzk=)
2: 8Fw18qqHOsVxESJSnEqQjEYBVLA.roa (hash: kmWtWMX5BU0WTULuU6kggkgEBqJ12MJjvBGvNu+rslw=)
3: iuqCkaUdU780Tc2HYs22gp0eS8A.crl (hash: rR0pZrRuHwntE2J5F28PfBF4q6Tz2ObQ57QvCv55d4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:ef:be:ed:df:47:28:b4:9d:0e:82:77:e3:64:ee:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aea8291a51d53bf344dcd8762cdb6829d1e4bc0
Validity
Not Before: Nov 15 02:01:01 2026 GMT
Not After : Nov 16 02:01:01 2026 GMT
Subject: CN=c0f624f215e06f2fa97a1e51deca55db64676890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:70:ec:62:a3:e7:54:46:65:55:66:68:ff:bf:
dc:2b:8e:66:1c:9e:dd:73:a9:7b:f7:f9:3d:9d:80:
28:6b:08:f4:cc:83:ba:43:32:b4:c0:af:0e:23:c7:
be:21:57:c0:41:5c:88:6c:89:fb:1c:f4:b7:ee:79:
de:77:2f:c6:90:29:ac:e8:80:ff:30:32:53:4e:cf:
f0:04:8c:20:b0:45:db:09:77:f1:a5:25:22:c4:e0:
8a:66:ee:2a:f6:7b:15:1e:88:91:df:d8:17:f1:5a:
dd:46:db:7d:88:2c:7c:f3:01:14:1b:ee:f3:51:66:
8a:65:8b:cd:13:04:18:e2:bf:fb:4d:24:9d:29:08:
3d:d8:56:a3:40:f6:93:72:1b:c9:63:e9:0c:bb:f3:
ba:02:09:48:9a:63:f0:6b:57:bd:19:bf:24:17:3a:
d2:e4:f0:89:c0:73:97:60:bd:06:b7:3e:bc:8c:ee:
d5:d2:89:f5:a7:b4:a0:c2:73:d1:1d:41:61:71:1c:
3a:56:be:6f:4d:b1:a9:cb:f8:43:99:c3:d3:8b:cc:
05:93:d1:b3:4d:80:fc:29:f9:fa:fd:97:3b:8a:d6:
d5:35:fe:94:f2:39:f8:8a:d4:ef:d6:b3:9c:3d:4f:
87:0b:5b:e8:db:b8:65:20:74:0f:fb:3b:ec:14:60:
15:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F6:24:F2:15:E0:6F:2F:A9:7A:1E:51:DE:CA:55:DB:64:67:68:90
X509v3 Authority Key Identifier:
keyid:8A:EA:82:91:A5:1D:53:BF:34:4D:CD:87:62:CD:B6:82:9D:1E:4B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ee:7e:33:5a:28:a5:74:b7:48:1d:98:ad:37:00:e2:9a:a6:
fc:46:99:10:02:4e:44:e5:47:24:d0:21:43:6b:c2:a1:1e:b4:
91:6b:41:b2:36:55:bb:f1:a8:2e:9c:f6:ab:7a:0f:6c:bb:4c:
15:1e:a5:12:9b:18:70:25:10:21:c3:db:b0:c1:56:81:fd:04:
a2:fe:2a:d2:06:92:12:04:2f:0d:06:21:1d:35:09:19:66:38:
15:e4:d4:e5:e2:3b:20:ad:1e:b9:a4:a7:56:2d:d5:c0:7a:ad:
9e:94:88:7e:6d:b4:d2:ae:48:e3:5c:39:96:cf:02:60:c5:20:
68:ca:ca:63:b9:78:cc:bd:18:82:e5:b3:ee:72:8e:61:a8:b1:
47:3c:06:6d:1b:24:06:a5:60:7d:f4:fd:61:2f:ce:11:0f:0f:
07:3e:40:07:95:a1:2a:f0:b9:95:ff:45:c8:2d:f4:8e:4a:2d:
d4:92:41:da:c5:54:d9:5c:79:59:d1:9b:35:de:11:88:da:98:
35:b0:0c:82:77:e0:68:1b:6c:3b:1d:30:a0:05:96:53:0d:8c:
66:11:71:18:73:ee:59:de:6f:72:9a:56:26:2b:73:76:ae:7f:
77:40:78:b9:ee:4e:03:38:40:8e:a1:48:8f:1f:ff:01:45:12:
0d:8a:54:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:50:39 2026 by rpki-client