Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.mft
File: 20IFnOKR1Jpmkgcxx2faVj7yESQ.mft (raw, json)
Hash identifier: gZ4w9FfV2n2SmtkctDBgB2YyzarDA7LanQMPed0uYbg=
Subject key identifier: 83:A2:F4:61:31:70:C4:94:B3:9D:4C:9F:4D:84:70:7A:34:1C:78:77
Authority key identifier: DB:42:05:9C:E2:91:D4:9A:66:92:07:31:C7:67:DA:56:3E:F2:11:24
Certificate issuer: /CN=db42059ce291d49a66920731c767da563ef21124
Certificate serial: 01A0D011E979CF4E1210787FD7F841B6F6A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20IFnOKR1Jpmkgcxx2faVj7yESQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.mft
Manifest number: 0D68
Signing time: Wed 23 Sep 2026 21:00:29 +0000
Manifest this update: Wed 23 Sep 2026 21:00:29 +0000
Manifest next update: Thu 24 Sep 2026 21:00:29 +0000
Files and hashes: 1: 20IFnOKR1Jpmkgcxx2faVj7yESQ.crl (hash: JzPkFxv5fIyZzIqwVbyhJX2q20br8IKJ6DFEQsWrS0A=)
2: K_G3q1oHoFkLaOnMyEVLIcn7Qmw.roa (hash: /NaxyStNTlcpIpTarZjjR+9kQ6m4FlTTRFr5N6+rcrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/20IFnOKR1Jpmkgcxx2faVj7yESQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:e9:79:cf:4e:12:10:78:7f:d7:f8:41:b6:f6:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db42059ce291d49a66920731c767da563ef21124
Validity
Not Before: Sep 23 21:00:29 2026 GMT
Not After : Sep 24 21:00:29 2026 GMT
Subject: CN=83a2f4613170c494b39d4c9f4d84707a341c7877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a2:93:0e:23:cc:49:24:7f:b1:34:6a:f7:e9:
ca:2d:58:7b:ef:e8:78:55:50:84:ac:77:d2:01:d2:
4f:4e:38:7d:91:1e:c3:2c:f8:06:68:99:05:f0:28:
33:50:97:cc:93:a3:68:a5:a1:3c:11:91:b7:b6:14:
df:34:7b:1f:00:82:51:46:0a:98:c2:b2:df:89:6f:
10:c0:1a:33:da:68:86:bd:22:df:55:a8:83:85:b7:
13:b1:f7:e4:99:74:6e:b2:48:5f:e1:de:0e:57:09:
ae:ab:e6:31:38:a3:92:c3:f4:cf:24:70:fe:0e:c4:
ac:78:26:a3:6c:0e:07:39:aa:82:70:e2:c3:85:70:
28:3b:a7:1e:f2:53:c2:df:5b:4b:07:3a:a8:51:f9:
d4:de:1d:63:5e:f9:9c:6b:cc:54:6c:25:18:83:61:
c3:51:c1:a6:4d:2b:b3:96:ec:91:e7:32:46:b4:41:
a9:10:9c:bf:50:c5:d5:9f:76:4f:ff:15:a1:1c:c9:
f0:97:e0:21:14:e9:81:ee:e9:97:92:65:84:e8:79:
40:0c:99:24:1e:ad:e0:4e:97:66:87:77:0f:05:8f:
cf:a7:ab:06:a5:97:06:ce:1e:f6:f7:8d:8f:19:6c:
49:7b:f9:27:00:fc:3a:d2:e0:e9:d5:b0:35:cf:18:
13:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A2:F4:61:31:70:C4:94:B3:9D:4C:9F:4D:84:70:7A:34:1C:78:77
X509v3 Authority Key Identifier:
keyid:DB:42:05:9C:E2:91:D4:9A:66:92:07:31:C7:67:DA:56:3E:F2:11:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20IFnOKR1Jpmkgcxx2faVj7yESQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:64:c2:2e:0f:1d:a5:c8:5f:a4:ee:d2:e2:f6:f0:0f:e0:11:
15:8d:52:8b:73:f0:28:5a:a3:2e:f4:5d:5b:8b:35:78:45:cc:
06:a9:f2:37:81:fa:48:f1:c6:ee:e9:31:f5:40:d6:a0:e0:e7:
0f:aa:5e:d8:db:83:cd:a5:d3:ca:61:b3:41:75:a3:aa:44:14:
f4:cb:08:15:58:51:9d:9b:a8:16:d2:ad:fb:69:11:89:91:10:
3a:3c:af:b5:6e:56:ff:a1:4b:4f:f5:42:fd:47:d4:35:ba:a8:
d2:3a:19:db:fe:89:75:64:80:6c:db:44:85:45:9f:96:41:f6:
42:3a:4e:47:cd:b2:04:5d:ef:5c:9a:16:77:14:58:0a:7c:65:
f8:2c:a3:38:cb:0b:48:df:27:b4:56:ba:34:89:43:d3:b0:46:
67:04:bb:32:e6:1f:f6:68:2f:4e:28:5f:ae:b8:b3:c0:02:0d:
39:2e:f9:5c:71:23:f2:39:68:03:31:47:93:9f:b9:43:29:05:
b5:92:b5:5f:d3:bd:3e:d4:d1:43:eb:c8:06:dd:70:c5:6c:2f:
65:63:fe:c5:c3:5a:e4:1f:bf:26:2a:b2:f3:ba:6e:68:4c:19:
77:35:4d:70:00:56:42:0d:32:88:27:30:37:2d:ad:ed:bc:10:
7e:8b:d0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:37:16 2026 by rpki-client