Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
File: IKf8vlkxTDcraPIyIjgoseM6A-w.mft (raw, json)
Hash identifier: l3xleeP5+B9qhp5zBOVABNvfdRu/GhTt9bV9oLiO6E8=
Subject key identifier: 55:23:A9:21:C1:0E:C7:F1:97:07:91:AE:6A:EA:18:86:16:75:7C:C0
Authority key identifier: 20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC
Certificate issuer: /CN=20a7fcbe59314c372b68f232223828b1e33a03ec
Certificate serial: 01A1174F73BE5C9E1FE012079A2C3AF9B431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
Manifest number: 16F0
Signing time: Wed 07 Oct 2026 17:00:45 +0000
Manifest this update: Wed 07 Oct 2026 17:00:45 +0000
Manifest next update: Thu 08 Oct 2026 17:00:45 +0000
Files and hashes: 1: 4ad3Sx3tHCKPvoySsJwPEN1dqk0.roa (hash: 9KW5traDiZ8b8YIka+3LA3dxjZd+hGHcIvyVnNUiXKg=)
2: IKf8vlkxTDcraPIyIjgoseM6A-w.crl (hash: qlAIhHCH9wU7RcOCxMYtfIrVgs5kAqfl+Fb/UAmji2k=)
3: k82VZQjPTfp29HOrsd4ebLlbLLQ.roa (hash: mCVrb2F3QQSAvERyzJs5ziCWnKSLVC3ur8XxDFUzHh0=)
4: w6ZIXPDpAeu5P7_mH6HZiqnkV9o.roa (hash: Yf1g7ljDU7te6N4XEGH4NkhfBi9rKgbfTnWehMLxzL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:4f:73:be:5c:9e:1f:e0:12:07:9a:2c:3a:f9:b4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20a7fcbe59314c372b68f232223828b1e33a03ec
Validity
Not Before: Oct 7 17:00:45 2026 GMT
Not After : Oct 8 17:00:45 2026 GMT
Subject: CN=5523a921c10ec7f1970791ae6aea188616757cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d5:3a:4f:8b:0b:46:c4:bd:40:e3:88:99:eb:
b5:b7:3a:2f:f3:2a:66:2e:bd:5b:6b:1e:4a:aa:80:
46:b3:db:14:1d:5f:93:c7:88:02:62:91:16:c0:fa:
1d:70:ec:c0:f8:e1:84:46:26:35:a1:c7:da:a1:9d:
34:7a:1b:0a:4b:5d:b6:8e:07:92:16:34:a0:27:4f:
21:33:22:c6:5b:17:7d:ae:ce:b8:36:9e:f9:57:65:
6d:9e:af:fc:91:13:7d:13:2e:fa:ac:42:ce:37:f1:
45:8b:95:f3:56:35:ca:a4:33:69:00:cc:84:89:b5:
55:2b:f0:c4:36:85:9e:02:d4:b4:1f:6b:23:ab:75:
98:c1:93:85:69:b4:a3:e2:db:94:2c:54:d1:8d:4e:
d3:1a:12:10:6c:ab:c3:a6:bf:e3:d3:6c:ff:ac:6e:
2d:97:e7:a5:bc:2e:c6:e4:9a:6f:95:fc:29:e2:7e:
82:f7:cb:8b:73:7e:f9:89:46:61:54:23:51:54:32:
bb:3a:ce:3f:8e:bc:54:8a:c3:14:cd:09:e4:7b:1c:
3f:8c:60:27:5f:67:03:47:8a:56:61:70:cc:15:8d:
81:c8:f6:bd:84:10:be:45:21:c7:74:58:0a:c6:76:
db:c3:b3:91:31:4f:9c:2a:cc:d6:de:04:a9:38:37:
f7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:23:A9:21:C1:0E:C7:F1:97:07:91:AE:6A:EA:18:86:16:75:7C:C0
X509v3 Authority Key Identifier:
keyid:20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ef:0e:5b:40:95:32:e7:41:d5:8b:e0:b1:29:70:2b:fe:eb:
d1:af:f3:73:c1:2d:53:ec:32:dc:1f:65:ac:80:91:fa:9a:3d:
95:fc:80:85:8a:d3:4e:b4:74:b6:5e:3e:22:c3:ab:ae:bd:38:
24:51:1b:87:3b:22:8b:34:83:fd:48:fc:88:20:1b:f6:64:78:
bb:8a:fd:53:8a:ae:c5:3c:3e:f7:0d:6f:ed:01:af:bc:30:1b:
5e:7a:14:85:f6:3e:a8:21:e7:5b:26:85:e6:71:ae:2d:a7:14:
37:8a:f4:da:de:6e:29:7c:85:a1:73:5e:25:41:5d:46:f4:6a:
9e:a8:cc:ab:07:8d:07:f3:8d:8a:64:d0:2d:05:fa:c4:48:fd:
c8:3f:ad:4d:69:72:78:ba:41:49:7a:cb:a4:c0:25:d3:50:a1:
e1:6d:7f:a8:71:9c:bf:3d:bf:91:f4:f2:cd:f8:f6:db:32:f4:
7e:12:3f:b9:7d:c1:e5:8a:49:a2:0f:10:ef:71:b0:46:6e:3a:
a2:32:ec:93:5c:40:f6:8a:04:71:fd:fc:88:3d:c7:b3:d8:4f:
15:a6:19:50:ba:8d:e5:ab:2c:ef:fa:8f:e2:f2:76:2e:60:1f:
7d:c4:a6:6a:3b:78:60:37:88:05:1c:76:52:8f:84:c6:0d:a3:
79:04:24:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 02:13:53 2026 by rpki-client