Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
File: iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft (raw, json)
Hash identifier: mzvkZ6kssqQXuqyWB0RgAIkDisPpha5aONVdWWG61UA=
Subject key identifier: A3:E5:79:92:60:EF:A4:DD:D3:0F:40:B9:57:59:12:E3:DE:3E:3F:9B
Authority key identifier: 8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00
Certificate issuer: /CN=8aad9c0ce5ba3905b41970a04e51976076c67e00
Certificate serial: 01A0D236F16DEBD457CF6103CA7880182DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
Manifest number: 0DCC
Signing time: Thu 24 Sep 2026 07:00:11 +0000
Manifest this update: Thu 24 Sep 2026 07:00:11 +0000
Manifest next update: Fri 25 Sep 2026 07:00:11 +0000
Files and hashes: 1: Lte4Gj7HvnpBCaOGUd7AOzRaBV0.roa (hash: yVkM1zt/EykUfazBUe+F76pn3O1M/hLY9A7dh99ee7E=)
2: OG4lz2aT-P_T1pbKQmVuBGnxAM0.roa (hash: OAZhJcMAQC48Syy5KrA0aFBAMfYodkPWCtect72qfTI=)
3: XEYiiN3BOEIRPz4xSOYL_41xhiw.roa (hash: 0ywms5lLpzQH6FFtmE9+FqNLyVuKgqHknSLCPnwXsEI=)
4: iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl (hash: lE9VbCDO/QUqsCBHJ36gw+GIITztfPNKXMkz2nSBN9I=)
5: lEbUtLtNkfAyY2Y1bQXjNgffS1A.roa (hash: b/0/ySYWBBPjZPbNT3Q9pWagQbtfduFB4wZTve0Q5AE=)
6: mi7KJXHo-_cgynjrOEYKa7kVD8I.roa (hash: YGaCcIrn+IZQb5Rq3PZQYSYoXxlLsMVa6xxEh3lbzgI=)
7: tEbhK49lj9A2t1UjujH2qFk6A88.roa (hash: 7LJLF76QvPCjlTh8Y9wGeCk9+DPapbJzwhv04lpZotk=)
8: vi3DjTDiHudyYK8w8VItrX_abyg.roa (hash: nMbONn7wYaL+5u0tqJSULFh7G6Nyiekz0kaTGUhg9nU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:36:f1:6d:eb:d4:57:cf:61:03:ca:78:80:18:2d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aad9c0ce5ba3905b41970a04e51976076c67e00
Validity
Not Before: Sep 24 07:00:11 2026 GMT
Not After : Sep 25 07:00:11 2026 GMT
Subject: CN=a3e5799260efa4ddd30f40b9575912e3de3e3f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:32:06:22:ee:65:24:57:a6:08:2e:51:d3:a5:
87:99:4d:e4:6a:71:66:ff:e2:ca:fc:ae:52:3a:5a:
41:82:c4:cc:7a:b5:f0:9e:f3:c8:f4:0e:59:8d:35:
3c:cb:a4:c3:44:93:a5:b2:c8:76:e4:60:d7:0a:53:
2f:4e:67:16:12:3f:25:48:e6:b9:5c:aa:06:7a:b8:
55:2b:93:b5:b6:25:33:01:a6:ab:42:c6:9b:68:a7:
ff:56:be:ca:c6:6d:12:07:e7:eb:dd:e3:3b:11:f6:
9a:1d:f0:d2:56:e2:6f:9a:3a:10:a3:ea:be:11:47:
42:55:f2:24:90:36:c6:f5:89:df:de:9e:98:12:f5:
90:5d:de:7f:47:93:69:37:3d:ac:84:bf:8a:d2:d6:
8a:a8:13:c3:1b:e7:0a:74:59:4d:bd:0f:a5:57:ea:
30:ef:59:11:b9:00:70:e4:b7:4f:ea:64:97:a8:ef:
78:fd:24:3b:3a:06:97:ea:a3:fc:b8:6a:ff:82:04:
a8:c4:e7:39:37:ac:fa:71:c2:b2:ae:9a:79:11:76:
a4:93:c3:09:77:5d:d8:06:f8:ed:4c:29:9b:a6:d7:
bf:e1:4b:53:46:2a:6a:e8:94:10:3b:13:c5:14:ee:
a2:10:37:5f:16:33:36:21:fc:28:b5:37:9c:83:66:
74:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E5:79:92:60:EF:A4:DD:D3:0F:40:B9:57:59:12:E3:DE:3E:3F:9B
X509v3 Authority Key Identifier:
keyid:8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:fd:9f:57:af:64:9a:54:68:56:23:14:de:b2:90:fa:56:fd:
87:1f:9f:92:e3:53:53:97:76:a4:6e:b9:42:0b:09:30:87:9a:
15:69:6d:5d:05:d7:5b:b6:20:7a:8c:c4:80:c1:13:b2:24:c4:
02:1a:98:8f:36:61:a1:7d:bd:7a:b1:cf:9b:11:ee:e2:af:7c:
a3:07:14:d7:f8:47:e2:bd:2b:f0:87:9b:3f:cf:72:25:70:2a:
a4:80:57:65:33:ed:c8:7f:1d:50:9c:cd:28:27:21:8e:f0:65:
4f:13:8f:13:0d:f2:9a:2d:a1:8d:d2:a0:75:dc:0b:b0:c4:aa:
2e:b0:4f:66:19:3a:d4:20:dc:cc:44:6c:42:93:bf:d1:0c:81:
25:78:15:1d:a8:e5:a0:73:5d:9d:05:c8:75:db:89:a9:80:f4:
3f:93:6d:21:4b:88:79:31:d6:56:cd:6e:f6:94:86:ad:85:e9:
af:40:c2:61:9b:8a:08:d5:ac:95:5d:2c:82:9d:1b:2e:17:1d:
19:f1:06:c5:c3:4d:75:50:19:3a:ab:55:23:d3:a3:f7:f7:63:
5f:32:0f:29:04:eb:c7:08:3b:9f:2a:e5:f4:92:b9:bd:5d:04:
c9:a7:5a:14:53:ad:f7:d0:90:94:78:85:38:5e:d1:26:cf:3a:
c5:bf:3a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:08:30 2026 by rpki-client