Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.mft
File: ICg7FImXzFYQEgtMRga6cuXa758.mft (raw, json)
Hash identifier: DvIySRQ1LxskzlqT5tCBYsw0c6Gfk2VOinGjrZDDBHg=
Subject key identifier: 49:22:D6:8C:B1:2F:AB:BA:E5:AF:AC:9C:95:4F:AB:73:01:95:FC:37
Authority key identifier: 20:28:3B:14:89:97:CC:56:10:12:0B:4C:46:06:BA:72:E5:DA:EF:9F
Certificate issuer: /CN=20283b148997cc5610120b4c4606ba72e5daef9f
Certificate serial: 01A108148CA58F8825B1E123F2EB4792DBF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICg7FImXzFYQEgtMRga6cuXa758.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.mft
Manifest number: 0102
Signing time: Sun 04 Oct 2026 18:02:06 +0000
Manifest this update: Sun 04 Oct 2026 18:02:06 +0000
Manifest next update: Mon 05 Oct 2026 18:02:06 +0000
Files and hashes: 1: ICg7FImXzFYQEgtMRga6cuXa758.crl (hash: pZLoEFf5Db43p13EeeOOLafSNJlnRkigh8ggYaUHsDs=)
2: VdpeYWicryHpzAB4DZOE2_eE8mU.roa (hash: CNoqpW1D+k3FAIJqkeURjeLA7MboxVUVd4vLoWTzRRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.mft
rsync://rpki.ripe.net/repository/DEFAULT/ICg7FImXzFYQEgtMRga6cuXa758.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:14:8c:a5:8f:88:25:b1:e1:23:f2:eb:47:92:db:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20283b148997cc5610120b4c4606ba72e5daef9f
Validity
Not Before: Oct 4 18:02:06 2026 GMT
Not After : Oct 5 18:02:06 2026 GMT
Subject: CN=4922d68cb12fabbae5afac9c954fab730195fc37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5c:e6:1e:9a:2b:36:47:e7:55:0e:58:f1:7e:
67:75:d9:c2:1a:97:9b:b8:44:df:bd:38:83:42:d4:
08:d5:83:84:da:fc:b7:b1:e6:d8:22:5d:d4:46:f3:
c6:af:71:66:fd:f3:22:09:71:5a:9a:5b:e1:6e:27:
d6:35:52:54:29:52:4d:cd:9e:ad:b7:48:00:7a:b4:
4d:d1:c2:6d:c3:d7:d9:f4:1a:8f:49:46:ef:4c:e2:
10:7b:ec:9b:60:e0:fb:c3:56:52:e2:73:f2:64:ee:
b1:96:fa:46:90:e2:93:98:2c:aa:44:69:3c:61:ce:
84:78:db:c7:37:4b:dc:64:7a:34:8a:4a:4c:bb:83:
5d:09:4d:2d:9d:4b:51:6b:2e:ee:91:b4:51:fa:ce:
c0:7c:18:ac:bc:38:fa:c1:4a:d7:26:25:62:40:bc:
71:76:68:87:d9:75:1f:aa:2d:af:f9:01:24:90:01:
d3:af:bc:f4:60:0d:41:12:ef:de:f0:02:bd:8e:b1:
a0:8b:de:a6:10:5e:85:a6:6a:71:31:14:ff:14:7c:
13:ce:9e:a4:81:17:92:5f:75:33:e6:3f:b3:70:46:
ff:f4:db:f8:48:6c:46:90:36:b6:15:89:99:0a:4f:
f3:b0:c1:e8:4f:c1:13:9b:3d:cf:63:3f:be:f2:69:
1a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:22:D6:8C:B1:2F:AB:BA:E5:AF:AC:9C:95:4F:AB:73:01:95:FC:37
X509v3 Authority Key Identifier:
keyid:20:28:3B:14:89:97:CC:56:10:12:0B:4C:46:06:BA:72:E5:DA:EF:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICg7FImXzFYQEgtMRga6cuXa758.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b1:74:67:79:a3:29:97:cd:a2:e6:a2:bd:9d:ff:46:f1:b5:
19:e5:65:eb:0b:3d:61:24:8e:b2:2c:46:d9:15:b1:8a:10:2a:
b2:0d:05:4a:68:03:ae:49:01:eb:75:65:ea:eb:27:2e:7d:a0:
c9:ac:f2:b8:97:3d:9d:3e:80:aa:53:3f:75:b2:98:57:6a:0e:
53:93:4b:a3:77:44:8e:94:81:5f:46:06:95:f7:c4:b6:6d:2a:
d5:40:04:97:46:77:f7:2e:53:ed:eb:9a:b4:cc:df:fa:a3:e8:
80:2d:03:d3:2e:dd:b5:e6:49:70:7b:14:f8:df:84:fb:27:83:
2e:6c:1c:eb:df:17:2e:22:17:de:17:41:ca:1a:be:c7:9a:dd:
d1:f0:a6:40:92:cd:de:e2:92:dc:2d:14:c5:85:a8:3c:74:b8:
d2:e6:8b:39:d9:0f:42:96:7f:46:41:45:ec:d4:ac:53:3a:be:
0e:05:51:78:20:53:06:53:4d:d7:7a:6f:76:79:b7:f4:b2:46:
6a:e2:cc:bb:af:9a:56:8a:07:00:0e:08:49:93:57:82:7f:20:
46:ee:3e:a3:f7:97:f7:75:b5:ed:43:d8:58:22:f0:c7:67:f0:
7f:e3:d8:26:64:39:93:f2:c3:7b:9b:be:9d:3b:ea:45:5e:85:
49:6f:14:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:02:38 2026 by rpki-client