Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
File: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft (raw, json)
Hash identifier: kbGNyqIW4dHpL29CzlO8HTBjBc+Hqc28HEW3dnTdgFA=
Subject key identifier: 0B:F2:F1:62:3E:D2:C4:1A:CF:6C:F7:61:00:78:B2:93:82:A2:AB:67
Authority key identifier: 88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
Certificate issuer: /CN=88e719f426793b1e9063771460abd311a3dff116
Certificate serial: 01A0DA5F87E2CC96236405D2F19DAA0CF164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
Manifest number: 1A6F
Signing time: Fri 25 Sep 2026 21:01:28 +0000
Manifest this update: Fri 25 Sep 2026 21:01:28 +0000
Manifest next update: Sat 26 Sep 2026 21:01:28 +0000
Files and hashes: 1: ImConIEQA2KDtzAT0CUbHUEbH_s.roa (hash: A7/XjtAfBEgLHLQ8oNWxPg8deYNIQ6lOIEhh+waSaZI=)
2: ZxLR_I6eiLsRd1oV4IP5PeLu7DE.roa (hash: kZngczWI+T3GrCv/8Yja3kQMBd7RGIDrozKXhV53UWY=)
3: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl (hash: tDaH0TYnlrlBLib0nfgzlY0yWHjGYAnr1dmou5Xk6dY=)
4: q2aBWG2CuEimsjXb18Ou0fyLb7k.roa (hash: A0AoTuyENlHBNdH6JVEsUQXr8MFCH3cXbTXxCbPc1hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:87:e2:cc:96:23:64:05:d2:f1:9d:aa:0c:f1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e719f426793b1e9063771460abd311a3dff116
Validity
Not Before: Sep 25 21:01:28 2026 GMT
Not After : Sep 26 21:01:28 2026 GMT
Subject: CN=0bf2f1623ed2c41acf6cf7610078b29382a2ab67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:33:d5:04:22:1d:d8:63:88:1c:74:7e:3f:75:
ba:7e:5b:25:22:a0:72:79:ac:e7:d8:27:6e:da:1c:
fe:a4:c5:79:fd:41:7b:69:6e:1f:20:2a:f1:0d:64:
9e:21:63:97:3a:c6:b0:d1:51:94:47:9e:66:85:6c:
f5:9c:a9:73:8c:a9:8b:a8:58:6f:f0:46:16:77:39:
25:a1:4d:52:fb:7b:50:12:54:d1:aa:cb:95:48:e2:
cf:a5:2a:18:b7:7b:47:9d:47:de:41:3a:2f:e1:e0:
27:03:06:b5:7b:e6:21:5d:3f:f4:b0:a6:b9:71:36:
52:eb:24:ec:4b:d7:da:aa:1b:06:42:cc:3a:cb:b4:
c0:22:7c:f8:5c:b5:4d:5f:bf:8e:d6:1d:08:a2:e4:
3b:b7:9d:84:8b:2e:7b:26:c5:85:3b:03:7e:da:ba:
fa:0b:4f:68:4f:f4:ea:28:23:99:16:a7:28:e4:b1:
c3:9e:17:32:52:f1:2d:16:22:0b:fd:c4:c2:bd:c0:
1c:1e:4a:59:21:23:e1:b7:e9:24:63:45:e0:4b:6e:
79:fe:2f:ad:00:86:d9:c2:01:fa:40:16:e4:ae:b8:
a4:b8:71:f3:17:8c:4c:99:03:bd:6b:3c:64:04:75:
f7:a9:48:c4:47:f2:d1:64:90:99:fb:ec:0c:4b:7b:
85:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F2:F1:62:3E:D2:C4:1A:CF:6C:F7:61:00:78:B2:93:82:A2:AB:67
X509v3 Authority Key Identifier:
keyid:88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f2:e2:17:5c:f4:c9:d5:dc:8f:58:62:f6:47:f1:3a:04:7b:
c5:37:9c:96:34:e7:9d:e2:2c:9f:89:c5:69:ef:57:25:ed:28:
6a:25:ce:53:dd:90:5f:31:fc:25:32:40:45:02:77:81:d6:2f:
46:f8:e9:85:b0:e6:26:ad:7c:21:2d:06:3d:23:6b:bb:c8:dc:
77:13:c5:60:d1:d6:16:b4:a3:b3:0e:c3:7e:85:8d:21:46:9a:
6e:a1:29:40:97:85:27:b3:3c:07:d5:d0:5c:d7:5e:2b:4f:fa:
24:4f:9c:44:fd:5d:14:8a:9d:08:a7:2d:f1:d6:c6:46:d6:41:
75:d6:5b:26:fb:d1:68:3a:a7:f5:c5:7f:9b:0a:a1:a5:7b:16:
dc:03:71:c1:92:24:a5:03:bb:d4:cc:85:ad:f8:b9:d5:3f:1b:
db:b2:d2:a7:22:02:7c:d0:9a:eb:60:15:6f:b8:cb:cb:2e:c7:
6c:1a:a0:0f:eb:c2:60:18:4b:a3:1d:57:74:15:50:62:fd:59:
e4:62:ff:22:26:a3:03:c0:66:5b:7a:0a:94:a7:61:84:7b:00:
3d:11:95:b2:29:ff:15:55:66:62:ac:4c:a8:a2:32:bd:f4:85:
e4:e8:1b:6f:af:ce:84:f6:39:80:ea:eb:66:8c:91:78:7a:21:
bc:40:18:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:01:19 2026 by rpki-client