Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
File: ijSno_66-8hACr4dwS8ixsHopb4.mft (raw, json)
Hash identifier: 6LoVSS9iptQCwl7wAHAxEsUaMrk9hA2HwX+O7RqZuf8=
Subject key identifier: 34:A1:6E:20:71:5C:A8:CA:BF:4D:43:2A:35:95:10:31:CE:A5:5F:28
Authority key identifier: 8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE
Certificate issuer: /CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be
Certificate serial: 01A102B61F687DF0C107BBAB115DE696668E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
Manifest number: 0AF8
Signing time: Sat 03 Oct 2026 17:00:52 +0000
Manifest this update: Sat 03 Oct 2026 17:00:52 +0000
Manifest next update: Sun 04 Oct 2026 17:00:52 +0000
Files and hashes: 1: DrNj16KdHBydg-pgyLTL6B45LSk.roa (hash: aO4vG1Y0PWHmNb5jF8du/ccBdv9Na2OGncKoGutGl4g=)
2: ijSno_66-8hACr4dwS8ixsHopb4.crl (hash: cG+f2tUSVNnT7+He4hgfgxgThLbGz1kcd3Hps6QMaKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:b6:1f:68:7d:f0:c1:07:bb:ab:11:5d:e6:96:66:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be
Validity
Not Before: Oct 3 17:00:52 2026 GMT
Not After : Oct 4 17:00:52 2026 GMT
Subject: CN=34a16e20715ca8cabf4d432a35951031cea55f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:b1:29:cf:84:94:e3:b4:ff:5a:c8:29:4b:
25:04:f9:12:2d:78:1e:bd:ac:65:90:1b:65:d8:4b:
07:0a:1e:2a:40:03:ff:e1:f5:d9:bd:de:94:43:a0:
fe:a7:7e:cc:e2:72:96:cc:29:40:4d:73:b5:50:02:
49:0c:24:cf:0b:dc:9c:ce:10:78:a7:e8:1a:b9:b8:
18:c9:3e:0f:53:8a:b7:c4:95:de:35:58:fa:9f:d9:
79:78:cc:d0:bd:5d:db:77:0b:b8:4c:fb:a1:cc:09:
0e:87:b3:b1:da:ec:cf:c7:60:f0:74:1c:bb:ff:44:
ea:5d:93:6d:0a:f4:9e:13:95:43:2b:05:fb:78:a0:
01:12:10:bc:80:b0:39:6f:c1:38:78:e9:a7:80:28:
61:11:ea:3e:8a:d1:8d:b6:40:3b:b1:76:ef:cf:4f:
78:5b:fb:74:a9:72:d7:72:76:5a:d3:4b:f4:79:df:
c3:df:d0:63:5e:a2:52:01:56:b4:87:87:66:5d:8e:
ed:57:4b:83:34:0c:f9:78:58:3a:db:b7:2f:08:b0:
30:05:21:13:d5:0e:3f:ac:63:47:34:57:59:99:ca:
4a:67:0d:5a:1d:fc:fe:97:d4:e7:75:15:09:3d:08:
a1:3b:67:58:31:83:76:f3:67:8e:9a:59:f7:61:51:
0a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A1:6E:20:71:5C:A8:CA:BF:4D:43:2A:35:95:10:31:CE:A5:5F:28
X509v3 Authority Key Identifier:
keyid:8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:91:d2:0d:3a:0f:0b:bc:6d:e6:43:0b:d4:5e:be:08:91:8f:
6e:25:6c:4f:a5:0f:dd:05:6e:52:54:79:c0:30:99:4b:09:09:
51:ed:38:c8:ab:73:9f:3a:8b:5a:2c:3f:cc:a9:cd:41:44:92:
16:f5:62:f7:4f:17:e3:06:28:96:ba:fc:fd:28:56:0a:f2:3b:
3b:71:df:54:6e:57:6b:0e:07:23:c9:65:5d:8b:38:77:80:65:
99:4f:b3:f3:8b:3e:1c:8b:76:50:6e:5f:73:44:10:44:ff:63:
06:54:83:1e:40:72:eb:64:e8:66:70:91:bc:51:f7:16:db:e6:
51:26:43:c3:0f:3d:01:b5:c1:c0:a2:48:14:a8:11:ec:72:48:
4e:0c:e2:23:8b:09:19:b2:37:18:92:27:01:49:29:9f:8e:54:
b9:db:e6:f7:e5:78:b0:1c:41:60:0d:cd:38:fc:12:1a:10:29:
6e:6b:6d:18:fe:9b:6e:6d:ef:ed:1d:08:8a:5f:72:c1:f0:0c:
1c:70:2b:96:32:b0:d5:1d:48:d3:07:f3:dd:81:a7:1a:74:fe:
49:b9:21:91:59:6c:15:69:0d:86:04:5a:6e:ea:b6:85:b1:87:
bb:0d:44:ec:ff:a7:3d:e6:e9:de:ca:c4:de:4f:db:01:46:93:
24:57:51:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:45:08 2026 by rpki-client