Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
File: iuqCkaUdU780Tc2HYs22gp0eS8A.mft (raw, json)
Hash identifier: Gt0ghOKlwZqfIYVzzJlL6Tu3+lHZx2JfP3p8N/P+H7o=
Subject key identifier: DE:9F:BB:93:E2:32:48:24:FE:D9:0B:D5:FB:BA:92:C9:B1:D3:03:8B
Authority key identifier: 8A:EA:82:91:A5:1D:53:BF:34:4D:CD:87:62:CD:B6:82:9D:1E:4B:C0
Certificate issuer: /CN=8aea8291a51d53bf344dcd8762cdb6829d1e4bc0
Certificate serial: 01A0D07FBF3A28E52C4F635BC814A66ADB5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
Manifest number: 0191
Signing time: Wed 23 Sep 2026 23:00:27 +0000
Manifest this update: Wed 23 Sep 2026 23:00:27 +0000
Manifest next update: Thu 24 Sep 2026 23:00:27 +0000
Files and hashes: 1: 1-HnWZOSfYzfMpkdHQKgKNZ13rPI.roa (hash: PKBAPXzgnWazEIllaNoOetp38i7rE9un2IC2xSXTZlQ=)
2: FvTUXze2cP2KDGx2hRq_w_Z-9N0.roa (hash: Gp1g8k1CPQjLn91bFZfvO5ChcN4hmVKIBnTLXnXZ2/M=)
3: iuqCkaUdU780Tc2HYs22gp0eS8A.crl (hash: N6Ok3dtXn1b9YXP3Qpi2hW/zJIzh4/dS+Q3Vu6EZfq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:bf:3a:28:e5:2c:4f:63:5b:c8:14:a6:6a:db:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aea8291a51d53bf344dcd8762cdb6829d1e4bc0
Validity
Not Before: Sep 23 23:00:27 2026 GMT
Not After : Sep 24 23:00:27 2026 GMT
Subject: CN=de9fbb93e2324824fed90bd5fbba92c9b1d3038b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:da:3d:5d:5f:37:96:e8:6a:12:67:2d:51:b7:
a6:1f:a7:3e:65:55:59:0f:1b:33:49:d6:1f:a3:ff:
64:de:68:6b:d2:74:56:db:24:50:3f:76:d3:6f:65:
13:ab:3b:54:5f:6e:51:a7:31:f0:6e:15:e5:aa:a6:
9e:34:58:48:c8:d6:cc:86:4c:4d:2a:09:a8:4b:8c:
28:4d:fc:85:a9:25:44:9f:e9:80:db:55:90:7e:ca:
f6:2a:30:98:95:92:ee:bb:96:8e:44:9e:2e:61:08:
45:c8:b9:5f:8d:09:0c:75:42:84:23:58:31:e4:fb:
f0:02:c7:c7:59:9b:f3:8b:ab:1c:66:3a:08:c3:58:
83:5f:e5:f1:3a:3c:f9:d3:38:42:43:6a:c0:c2:d5:
9b:00:e8:03:d0:1a:4a:96:c4:98:04:55:6b:95:07:
1a:92:66:49:e4:28:a3:c8:47:9c:14:a8:5c:dd:3d:
59:27:a4:fc:0e:56:10:ec:f7:cb:c8:67:2d:50:46:
9b:9a:7e:ca:3a:bb:48:c1:3f:b6:a7:53:10:62:5a:
74:71:5e:81:cf:e3:51:c7:7c:e3:c7:65:47:de:dc:
bb:53:4f:76:93:f4:21:42:a4:b8:af:ee:38:59:33:
c2:3f:54:66:21:3f:ca:81:2d:69:0e:bc:51:7b:6a:
9c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9F:BB:93:E2:32:48:24:FE:D9:0B:D5:FB:BA:92:C9:B1:D3:03:8B
X509v3 Authority Key Identifier:
keyid:8A:EA:82:91:A5:1D:53:BF:34:4D:CD:87:62:CD:B6:82:9D:1E:4B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:30:fc:a9:26:7f:0e:60:47:fd:66:98:7e:a7:91:e6:3c:fa:
bb:4f:bf:9e:61:31:b8:8d:0c:43:85:38:d9:25:7b:bf:49:7a:
d7:7c:3d:85:af:fb:c6:13:fe:fe:ae:af:52:17:35:64:bb:03:
a3:4a:cb:4c:90:88:27:6a:42:57:1f:d4:5e:af:1e:25:24:bb:
39:eb:42:ee:9c:4d:e9:14:58:f4:41:ec:9f:5a:2b:4f:fd:e0:
79:f8:39:9d:a7:81:cb:39:1d:de:29:d6:56:f2:4f:86:fb:35:
05:01:0a:ff:59:b8:06:bd:28:45:8e:8d:f8:fe:b9:5e:1e:97:
ba:71:7f:1e:12:09:f4:5a:5b:f2:05:e8:a5:89:99:d0:13:01:
c6:f1:d8:98:3e:47:70:f9:27:fb:0c:2c:59:3d:5c:12:4e:3e:
52:17:41:dc:69:31:ab:8e:88:45:99:49:bd:39:db:8c:cb:3f:
31:d6:b4:a8:19:d9:36:0d:d2:2e:94:6c:e0:88:26:a8:a3:ab:
15:51:2c:35:21:00:f3:0c:d1:d1:56:18:b9:9e:91:5b:9a:22:
0e:d2:d4:c5:95:c3:94:2d:cb:f6:e4:8f:4c:85:5d:10:99:f5:
fb:3d:7e:89:97:23:db:95:45:15:f2:b4:37:a7:f3:ec:31:0c:
44:25:83:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:28:01 2026 by rpki-client