Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
File: x02iHagDioIFQrOvr76qqmZreyc.mft (raw, json)
Hash identifier: Bj6cQpkLJ4amTj3FzTkK9bMzb3ciuo7LqkMKC3Aa/iE=
Subject key identifier: CE:62:79:75:CC:E7:FB:6A:90:C6:F7:94:8C:24:37:53:B5:F9:C9:34
Authority key identifier: C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27
Certificate issuer: /CN=c74da21da8038a820542b3afafbeaaaa666b7b27
Certificate serial: 01A11229949BB81974590A4151EFAF23B812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
Manifest number: 1A22
Signing time: Tue 06 Oct 2026 17:01:17 +0000
Manifest this update: Tue 06 Oct 2026 17:01:17 +0000
Manifest next update: Wed 07 Oct 2026 17:01:17 +0000
Files and hashes: 1: Qd96EibuUMUl47bpcNIQg2lzdXM.roa (hash: bfpu3e5a3SbtwnPEBP2TMhw1nW2Ik4salWdsyYywAxI=)
2: x02iHagDioIFQrOvr76qqmZreyc.crl (hash: saVNPUTgptXrypTRHz5aMzu4fx21ybOkKVIKDU+MP2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:29:94:9b:b8:19:74:59:0a:41:51:ef:af:23:b8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74da21da8038a820542b3afafbeaaaa666b7b27
Validity
Not Before: Oct 6 17:01:17 2026 GMT
Not After : Oct 7 17:01:17 2026 GMT
Subject: CN=ce627975cce7fb6a90c6f7948c243753b5f9c934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:14:33:89:5e:48:c4:ff:73:50:99:89:16:3c:
93:b5:30:e8:38:32:57:3f:33:f6:fa:f8:43:22:b9:
1b:f7:06:4f:9d:e9:a7:e4:65:02:40:a0:18:cf:65:
a7:27:39:ae:a8:af:0a:1c:72:7a:e2:dc:6b:8f:fa:
c4:a9:00:89:c8:e7:36:c3:25:c2:88:c8:e2:01:12:
9d:e9:0d:88:f4:54:07:d9:dc:c6:25:4f:a6:3e:46:
4c:a9:3f:df:f4:8e:69:36:ac:ae:b2:20:f9:24:db:
e6:01:a1:a2:62:42:a7:1c:e6:ca:6c:8c:ae:95:c8:
74:8f:78:8d:94:5d:a4:e2:de:ff:fd:4c:f5:2b:b5:
ed:9c:ad:2b:fa:e8:c1:76:68:46:cf:20:24:37:49:
0c:e4:6c:7b:7f:16:51:be:e9:de:6e:fd:38:bd:df:
5b:80:02:bb:b0:69:07:be:cb:d9:6e:39:61:69:a9:
58:1d:55:bd:e2:aa:8a:fb:b1:3d:02:cb:35:21:db:
d9:e5:1d:36:62:ef:4f:ff:86:67:36:3f:8c:d0:af:
83:2a:e4:26:7e:f5:e3:66:32:06:13:78:3d:36:dc:
0a:22:a1:d4:a1:92:ce:e6:b8:ed:77:ec:b2:16:42:
0b:d5:d5:e6:2b:3a:61:63:b3:0f:ac:fa:cf:4c:15:
d3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:62:79:75:CC:E7:FB:6A:90:C6:F7:94:8C:24:37:53:B5:F9:C9:34
X509v3 Authority Key Identifier:
keyid:C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b1:db:38:9f:2a:f4:42:e0:71:6b:a4:0c:52:33:f6:fe:87:
01:c0:93:b0:43:b7:66:d5:ab:29:b5:4e:bd:d0:4c:c2:fc:70:
6d:80:7f:5a:b3:bb:59:f0:dc:52:4d:68:8e:86:96:4a:21:1e:
54:db:08:69:72:66:38:e5:4f:a5:5d:88:36:43:3b:08:86:92:
d5:71:40:1e:92:90:17:5b:67:6f:84:12:98:ac:9d:48:49:de:
24:0b:6b:75:ce:a4:c6:03:3c:ca:0f:cb:fd:b3:17:c5:66:d1:
78:cb:d8:7d:b2:c5:14:ff:f8:70:d2:4e:93:33:8c:ac:3f:b9:
b7:78:dc:0f:ae:11:70:dd:96:8a:08:fa:e8:5c:18:8b:e5:92:
4f:99:b6:97:2e:e3:29:a0:2a:03:89:e0:c2:d0:0e:1b:3d:5c:
96:01:3c:27:60:48:1b:3f:17:0e:85:98:a4:9b:b6:1c:83:a4:
33:3f:cd:70:82:e6:f9:55:7d:a5:3e:13:4f:6b:96:3d:c2:fd:
40:71:3c:5c:ad:3e:e1:dd:47:9c:1a:83:58:a9:48:e4:b1:32:
41:49:1f:78:5d:1b:97:8f:f9:59:28:3e:4a:03:bc:97:42:3a:
ef:b4:48:be:3f:b4:4f:26:35:dd:ee:ea:f1:31:90:9c:35:83:
27:55:98:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:04:47 2026 by rpki-client