Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
File: iNEpp8ePtm0Hc7yZAINX5QfB574.mft (raw, json)
Hash identifier: BKSEf8SIghSwMmLaiHlBJschhJGaE4U+eCFJDbJvQZo=
Subject key identifier: 02:E2:C6:04:7E:57:32:67:9B:32:28:06:CC:C1:FF:10:DA:BB:30:19
Authority key identifier: 88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
Certificate issuer: /CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Certificate serial: 01A0DBA8BFC7AAD3375F0EAB1854EBF835E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
Manifest number: 0BA3
Signing time: Sat 26 Sep 2026 03:01:04 +0000
Manifest this update: Sat 26 Sep 2026 03:01:04 +0000
Manifest next update: Sun 27 Sep 2026 03:01:04 +0000
Files and hashes: 1: WJ4tfO6kiSMSkG1grDmRdHg6U_4.roa (hash: Eb3yXv0Sg6PPztcKbZR4VGFXGGjS4jiVBjwDazfbRcs=)
2: iNEpp8ePtm0Hc7yZAINX5QfB574.crl (hash: 7UI616nlNT+Umug+tVo+/doBGVEbtP3+q8uYuYJL9vY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a8:bf:c7:aa:d3:37:5f:0e:ab:18:54:eb:f8:35:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Validity
Not Before: Sep 26 03:01:04 2026 GMT
Not After : Sep 27 03:01:04 2026 GMT
Subject: CN=02e2c6047e5732679b322806ccc1ff10dabb3019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:30:94:05:f5:b2:5c:e2:3b:2d:4f:ae:1f:a0:
a5:cb:94:bd:65:12:ea:11:a1:ee:8e:7e:59:6c:cd:
32:61:01:11:4d:8f:10:f9:49:b7:68:b4:fc:f4:9d:
9f:25:d7:b1:d6:d4:d4:11:ef:75:90:4e:c6:d4:02:
a9:53:7e:41:22:93:7d:25:26:67:61:ea:7a:39:f0:
b6:44:2d:94:29:50:4b:78:3b:44:60:7c:33:eb:85:
f8:26:cd:cb:6b:06:4a:37:70:90:5d:a3:6a:ac:e2:
bb:89:b3:3f:57:66:d1:38:7f:92:a9:75:0c:bb:68:
a5:01:94:17:47:76:08:5b:c3:df:23:7b:49:9c:60:
b9:0f:db:15:1e:94:d8:a5:2e:7e:15:35:17:24:a7:
3e:97:07:7c:e3:97:c7:23:6f:88:ee:78:70:31:c2:
b7:2b:45:bb:8b:a6:58:28:fc:83:36:fe:3c:2c:3d:
05:98:a1:9a:ae:1c:c1:51:a4:77:b5:96:1e:68:87:
51:cd:51:56:39:07:f6:90:0d:69:b9:17:4f:3b:fb:
5e:fd:fe:3b:ea:81:cb:8f:34:30:70:8c:de:f6:c4:
2f:c1:87:51:af:a4:ee:b9:12:3f:ae:e9:4c:f1:33:
76:a0:7f:af:47:3f:f3:64:30:e1:d1:47:74:c7:cf:
fc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E2:C6:04:7E:57:32:67:9B:32:28:06:CC:C1:FF:10:DA:BB:30:19
X509v3 Authority Key Identifier:
keyid:88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:40:be:ae:6a:72:3c:38:5e:0e:f8:02:78:18:cb:75:b6:7e:
8c:d1:b7:c6:1f:36:5a:61:ab:2c:a4:5e:90:d5:ed:9c:90:c2:
18:8e:7b:d9:22:a8:be:69:9b:7b:60:f9:dd:28:e9:e9:c2:69:
d8:0f:b1:cb:1e:ad:a0:ca:d9:90:c5:52:0d:0d:49:fe:95:47:
01:8e:72:c4:16:5f:c5:04:c9:b7:56:4e:55:01:5f:c4:de:12:
f4:e6:aa:2b:14:15:bc:14:95:71:56:aa:ae:5b:59:45:e6:0b:
83:ee:ca:9a:44:50:da:53:d5:71:b7:d2:62:84:96:f1:8f:bf:
f5:85:0c:e4:43:71:83:c0:57:14:a2:70:89:8d:0c:69:71:07:
2a:a1:30:37:c2:f6:da:df:6e:fe:81:84:be:82:8f:b2:c8:7d:
50:4c:e0:38:43:be:22:78:7b:61:b8:8a:07:3f:eb:9b:5a:d2:
d2:4e:6b:6e:e2:be:b8:7a:f8:00:17:6e:55:74:a9:7b:66:eb:
2a:66:7e:b7:3e:7a:28:50:80:ac:1c:ae:d9:f1:24:c3:06:b8:
79:4a:c4:93:9b:2c:a4:e3:8c:12:ec:b1:5a:02:aa:81:fd:01:
68:47:3a:f9:66:da:42:16:8e:7e:c3:52:64:24:42:90:89:64:
1d:4c:16:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:45:23 2026 by rpki-client