Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/iMzUohaNl27yVSiXv8cZINYzvFU.mft
File: iMzUohaNl27yVSiXv8cZINYzvFU.mft (raw, json)
Hash identifier: SOy392id8cH/QftHP7rx7BT6jva1FA1ggMPN6Uj+wTM=
Subject key identifier: 69:8C:13:72:66:13:9B:CD:8C:42:DA:EF:D9:50:34:53:A8:E0:02:AD
Authority key identifier: 88:CC:D4:A2:16:8D:97:6E:F2:55:28:97:BF:C7:19:20:D6:33:BC:55
Certificate issuer: /CN=88ccd4a2168d976ef2552897bfc71920d633bc55
Certificate serial: 01A0ECD38375823A64B93D073701DDA88B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMzUohaNl27yVSiXv8cZINYzvFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/iMzUohaNl27yVSiXv8cZINYzvFU.mft
Manifest number: 82
Signing time: Tue 29 Sep 2026 11:01:19 +0000
Manifest this update: Tue 29 Sep 2026 11:01:19 +0000
Manifest next update: Wed 30 Sep 2026 11:01:19 +0000
Files and hashes: 1: Sebdq3Z-zI97Q_QmObG2yD2EvOo.roa (hash: 6XBHsle9CbbB6Dp19ZfuZYsFS8Vr9CEB/OKP2y66uY8=)
2: iMzUohaNl27yVSiXv8cZINYzvFU.crl (hash: yKTYBS6TNo6pIj/R6KvC7BmCwYH/9Sah9zq9UFmAq6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/iMzUohaNl27yVSiXv8cZINYzvFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/iMzUohaNl27yVSiXv8cZINYzvFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMzUohaNl27yVSiXv8cZINYzvFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:d3:83:75:82:3a:64:b9:3d:07:37:01:dd:a8:8b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ccd4a2168d976ef2552897bfc71920d633bc55
Validity
Not Before: Sep 29 11:01:19 2026 GMT
Not After : Sep 30 11:01:19 2026 GMT
Subject: CN=698c137266139bcd8c42daefd9503453a8e002ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:be:ab:2d:14:24:f8:4e:12:81:e8:cd:16:5c:
0a:89:c0:2b:43:1d:eb:e0:b4:2e:f0:81:a5:76:56:
45:6c:d9:fa:c8:95:72:e3:8d:90:bc:0f:13:db:da:
56:20:c1:f8:19:a0:52:b0:18:87:bf:25:ab:1f:56:
4c:ef:5c:f8:01:ff:30:f7:5e:87:60:20:87:c6:75:
5f:37:4e:f9:63:61:0a:ac:74:5a:0d:ae:4b:a1:8a:
a4:bb:22:d7:91:e6:9b:d5:18:29:91:89:fc:f9:8d:
6b:0e:70:82:38:79:4a:1b:ac:fb:1c:45:b6:d1:2d:
5e:ca:8e:27:9c:34:06:8b:a9:85:65:21:59:e6:64:
15:b3:6f:6d:ce:d5:cf:45:1e:4e:c0:b7:95:88:37:
bc:5d:b6:74:6b:36:c2:da:4f:2e:11:ae:40:ff:11:
b6:af:91:93:c2:74:8b:b5:c0:0b:58:61:7b:14:64:
ec:70:6f:9d:8a:0b:e4:14:8d:cb:84:94:7a:4c:41:
67:34:53:4e:2c:ba:21:29:95:67:a4:ff:6f:59:8a:
15:72:47:1d:3d:37:e7:41:a9:c3:ef:ff:ee:59:15:
20:e8:2d:17:f1:6f:dc:44:5c:8c:1c:ed:2a:fe:0f:
5d:32:27:a1:1e:b1:12:c8:2b:56:ef:47:c1:62:00:
a0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8C:13:72:66:13:9B:CD:8C:42:DA:EF:D9:50:34:53:A8:E0:02:AD
X509v3 Authority Key Identifier:
keyid:88:CC:D4:A2:16:8D:97:6E:F2:55:28:97:BF:C7:19:20:D6:33:BC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMzUohaNl27yVSiXv8cZINYzvFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/iMzUohaNl27yVSiXv8cZINYzvFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/iMzUohaNl27yVSiXv8cZINYzvFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b8:04:71:92:2d:be:fd:e8:ca:5b:82:d4:96:08:a7:ee:7e:
b0:4d:8a:85:bf:cb:d0:07:b3:42:d0:b1:a6:1e:13:a0:10:3e:
cb:1f:58:b4:de:56:dc:72:fc:40:86:91:e9:6c:0a:06:48:71:
13:c3:51:95:d9:64:34:22:7f:dd:2c:a0:9c:99:36:80:47:49:
01:d1:fa:f4:de:46:e4:56:df:c4:7e:51:c7:70:45:95:59:c6:
78:3b:20:12:7c:05:53:f2:3c:85:5c:eb:9a:c4:f3:06:36:ee:
26:e8:11:e0:b6:45:9e:02:eb:6b:65:c9:11:23:59:c9:d8:49:
47:7f:f7:8f:42:15:9c:eb:64:92:4d:7f:40:f0:e6:f8:7b:8c:
6a:ea:f4:1d:80:bd:64:d5:db:b5:32:37:f0:61:1d:64:5d:b1:
2a:f0:4c:b5:16:70:74:bc:2a:e3:ff:86:9e:86:b9:af:36:5c:
0c:d7:ea:30:26:e0:c8:ea:87:f5:5e:f9:cc:16:b4:9d:53:6a:
42:02:b7:c8:ed:61:16:aa:67:8e:1e:21:62:dc:84:cb:a0:4e:
ac:91:cf:39:64:4a:40:db:e1:9a:03:17:b1:35:af:8f:4a:c0:
6c:47:fb:f6:1a:1f:ff:68:28:56:4e:f9:ca:08:b3:4c:2d:4f:
f7:4f:35:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:42:36 2026 by rpki-client