Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.mft
File: iBKgqAncPNH72JUaj4D2mSXhGQg.mft (raw, json)
Hash identifier: aOdQH+iVmYFrU53jL21mVntBuUfbXHHo1NwxurDeReM=
Subject key identifier: 4C:37:46:C5:AB:85:E6:7E:42:06:3E:46:24:2E:8E:A2:B1:B5:4C:84
Authority key identifier: 88:12:A0:A8:09:DC:3C:D1:FB:D8:95:1A:8F:80:F6:99:25:E1:19:08
Certificate issuer: /CN=8812a0a809dc3cd1fbd8951a8f80f69925e11908
Certificate serial: 01A0E3D05E4605B8B7C5DC2A533E6339C546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBKgqAncPNH72JUaj4D2mSXhGQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.mft
Manifest number: 155A
Signing time: Sun 27 Sep 2026 17:01:18 +0000
Manifest this update: Sun 27 Sep 2026 17:01:18 +0000
Manifest next update: Mon 28 Sep 2026 17:01:18 +0000
Files and hashes: 1: V4V1l39T5s1HWbLvpZ_dNNrQqrE.roa (hash: 2VhJQ/68VuS0vWM3hQGdKSnDSrR+nJHlsrGkam4iQlg=)
2: iBKgqAncPNH72JUaj4D2mSXhGQg.crl (hash: Ycu30oYFk0a5KkwTvv/sUciYd6tydA2aW7k1Mty+UHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBKgqAncPNH72JUaj4D2mSXhGQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:d0:5e:46:05:b8:b7:c5:dc:2a:53:3e:63:39:c5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8812a0a809dc3cd1fbd8951a8f80f69925e11908
Validity
Not Before: Sep 27 17:01:18 2026 GMT
Not After : Sep 28 17:01:18 2026 GMT
Subject: CN=4c3746c5ab85e67e42063e46242e8ea2b1b54c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:59:41:60:d6:20:9b:17:ca:c7:0f:43:f7:bb:
cc:02:8e:07:77:f8:40:a0:20:43:ae:3a:26:39:9e:
a6:94:eb:02:b6:b8:46:66:90:8c:f7:d9:48:c5:12:
3f:5c:35:dd:67:14:93:96:17:bf:43:76:25:6d:d9:
a1:b0:48:bb:5d:84:f9:e0:be:26:0a:2c:33:11:fb:
16:74:5e:0d:cc:cd:8d:f6:b3:77:6d:96:23:30:cf:
fd:95:83:62:5a:ea:ec:fa:90:fe:9c:fe:3d:ee:15:
9b:75:0a:fd:60:02:3c:42:e7:a1:0a:73:60:61:e4:
a9:20:7a:74:95:94:e6:a2:5f:d0:84:8d:81:d8:1c:
59:dc:81:0f:1f:f3:9a:30:67:2b:83:07:92:8a:9c:
63:e5:82:91:07:47:52:c1:65:be:44:c5:b5:0a:83:
71:d7:26:e0:88:61:d8:ef:72:39:c8:57:da:0c:d9:
5e:c2:9a:ad:6a:45:80:99:96:3e:ae:ae:88:a2:68:
db:d6:62:88:75:70:fa:f1:d6:f7:f8:6b:8e:a9:1a:
ee:1a:c8:7e:20:15:89:5a:e4:a8:5e:c4:5d:bb:d7:
dc:cf:b5:c5:c6:7c:5c:5a:c3:a2:47:ee:0e:ef:06:
db:bd:d4:51:6a:6d:b4:0e:55:e1:8d:7a:8a:d3:55:
fc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:37:46:C5:AB:85:E6:7E:42:06:3E:46:24:2E:8E:A2:B1:B5:4C:84
X509v3 Authority Key Identifier:
keyid:88:12:A0:A8:09:DC:3C:D1:FB:D8:95:1A:8F:80:F6:99:25:E1:19:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBKgqAncPNH72JUaj4D2mSXhGQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:90:1d:66:31:4c:5f:cc:db:2f:55:94:84:b7:4a:12:1a:d9:
c0:74:71:35:c2:d3:78:ef:b5:d0:ef:6d:a0:06:65:23:cb:a0:
2d:cb:80:66:8f:96:53:84:bb:2f:7a:d8:2d:c2:9d:9f:15:56:
b1:a8:da:de:44:0c:59:a8:fc:e5:70:44:08:f1:d7:1b:34:2b:
a1:98:f6:21:11:a4:b5:46:e8:9b:e7:0f:b2:1a:02:a6:f5:2f:
53:b5:c4:fe:e1:21:16:40:3d:47:55:62:c8:de:73:e4:73:9f:
d3:a0:ef:ce:73:2f:15:cc:85:73:a1:6c:6c:da:58:17:cc:b0:
c4:d6:69:22:ac:07:2b:1f:82:81:7b:0f:eb:99:87:52:36:a5:
6b:10:c0:41:c5:e9:3f:b0:ab:f6:2b:e1:49:3d:6b:96:61:08:
79:94:50:fd:6b:28:11:e8:7d:70:02:ce:d3:fa:5c:2e:06:9d:
b5:3c:50:3c:5d:19:3f:35:4e:68:45:bb:be:19:2b:d5:a2:e0:
20:80:c0:1c:d0:ab:01:c7:46:f8:93:cf:cc:b1:5d:13:df:46:
15:8c:16:76:ae:f9:b0:06:00:ee:71:46:c1:29:de:4d:1b:83:
79:a2:77:34:f1:de:ca:90:e7:1f:85:e1:a9:ac:39:49:ee:80:
83:7e:71:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:58:47 2026 by rpki-client