Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
File: iBD8MZigq5lkeHfb5XJeBc7gE_A.mft (raw, json)
Hash identifier: 7UO6xzOF5KMHZQFDmL4K0Y90hT+0sDXLVibOqzVFz6U=
Subject key identifier: BB:87:26:0A:0D:13:91:FD:8C:2C:E7:3C:0E:50:00:89:E2:A0:DD:19
Authority key identifier: 88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
Certificate issuer: /CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Certificate serial: 01A0EB5318C799F9822C08B9F42EB93B3E26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
Manifest number: 12EC
Signing time: Tue 29 Sep 2026 04:01:26 +0000
Manifest this update: Tue 29 Sep 2026 04:01:26 +0000
Manifest next update: Wed 30 Sep 2026 04:01:26 +0000
Files and hashes: 1: iBD8MZigq5lkeHfb5XJeBc7gE_A.crl (hash: 0GnycON+M4u4ZT1eGCSz+WEp0ruLzm7Ww+dDPmkENMg=)
2: xtriZj0E7B6zsRP9XIkIcFpnrqU.roa (hash: sr6Ahzw03XTlsg1PwbjbJZ0ftk/dptqXUly+PXrigJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:53:18:c7:99:f9:82:2c:08:b9:f4:2e:b9:3b:3e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Validity
Not Before: Sep 29 04:01:26 2026 GMT
Not After : Sep 30 04:01:26 2026 GMT
Subject: CN=bb87260a0d1391fd8c2ce73c0e500089e2a0dd19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4c:18:f6:14:51:11:50:fd:f0:e1:93:da:66:
54:ec:f7:fd:6d:a4:29:9d:87:7a:a2:b5:ed:fd:3c:
14:69:c4:64:48:b5:3b:1c:3e:cd:1d:c1:44:a0:c8:
f7:f2:8a:14:52:18:f7:8a:5b:49:f8:03:ab:be:0e:
8d:99:ae:41:a2:ca:f1:70:df:84:84:11:f6:05:ec:
ee:53:02:cc:2b:44:65:9d:c7:00:d0:08:33:2a:97:
cc:e4:af:aa:9b:2e:f7:eb:22:91:ce:10:f9:c5:74:
29:50:01:91:10:44:54:48:eb:11:7c:c6:0c:2f:59:
d0:7b:2f:0c:0a:a9:e2:ec:6a:03:95:b4:4e:81:08:
a5:ae:01:88:ed:75:2b:40:20:77:81:37:25:9a:6d:
23:54:9a:d5:39:ce:cf:a2:8b:1d:da:3e:22:de:66:
b5:d1:de:7d:63:83:ff:12:57:0f:11:06:32:83:7d:
61:26:9e:2e:8d:db:bc:a5:33:f7:8f:f1:de:6f:07:
30:39:f6:43:4f:df:4e:2d:1b:12:34:dc:21:85:a7:
5d:26:6a:cf:9a:37:10:ed:30:06:2e:b3:74:e0:0e:
74:cc:64:c4:71:ae:69:64:5c:11:cd:9f:13:fa:0e:
16:39:df:cc:72:f5:9c:6d:2b:d2:16:9e:46:f0:c3:
76:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:87:26:0A:0D:13:91:FD:8C:2C:E7:3C:0E:50:00:89:E2:A0:DD:19
X509v3 Authority Key Identifier:
keyid:88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:af:3c:c2:39:57:ac:d6:bd:de:bd:6f:bd:76:15:63:b2:ca:
0b:d6:e9:99:8b:ab:6b:12:b8:39:ea:cb:cf:6b:41:57:db:71:
f8:cf:86:28:62:25:4e:fc:d9:cb:34:ad:d6:07:1a:8a:ca:2b:
fd:98:66:09:02:6f:7e:1c:0c:40:d6:fa:a2:17:ef:4e:6a:48:
6f:99:33:77:57:6c:35:87:59:4c:3d:e4:72:a6:9e:a3:ab:70:
c1:b8:53:8b:a4:b2:ff:b3:5b:14:e0:e7:af:64:ab:89:68:0c:
cd:2f:7e:13:82:4a:34:3d:db:15:eb:9a:f0:09:60:ea:e2:d2:
8b:d1:1f:ca:bf:57:9e:4d:b7:1a:af:c2:d1:95:c0:c7:26:4b:
c8:a1:38:86:d2:3b:59:f7:1b:9d:a1:72:6d:cf:f7:bb:04:a3:
02:26:ae:b3:2c:eb:70:25:36:6a:66:cc:1d:bb:d6:51:1a:fe:
a4:f5:7b:dd:53:5b:e4:00:fc:80:1e:04:b9:50:31:01:08:2e:
8c:08:a8:bd:05:49:c4:d2:af:01:6f:d5:2a:5c:2e:44:18:3d:
eb:fc:40:23:3c:45:29:9e:0e:19:04:14:14:8c:97:97:d7:e7:
f6:cf:5c:e6:24:a6:a8:ac:a8:61:db:fe:fc:8c:51:37:59:11:
f2:9d:88:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:54:44 2026 by rpki-client