Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
File: iq94tpd0pVUH3qv4xMlpQunvDSA.mft (raw, json)
Hash identifier: CPXj8jzei1uoPYV7V68huQc1X+mNYjWwVLZ6Ak/6JdQ=
Subject key identifier: F6:E5:6A:03:4E:22:15:72:23:E3:DD:3B:2B:62:10:93:1B:DE:45:5C
Authority key identifier: 8A:AF:78:B6:97:74:A5:55:07:DE:AB:F8:C4:C9:69:42:E9:EF:0D:20
Certificate issuer: /CN=8aaf78b69774a55507deabf8c4c96942e9ef0d20
Certificate serial: 019D26CD773135F42BA9853FD57AEA458A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
Manifest number: 0F82
Signing time: Wed 25 Mar 2026 21:01:32 +0000
Manifest this update: Wed 25 Mar 2026 21:01:32 +0000
Manifest next update: Thu 26 Mar 2026 21:01:32 +0000
Files and hashes: 1: AOuKaEFuAus3hz3w0WC3j7I2mqc.roa (hash: YMOsepey7pZcM4gw70d5HgYaXkzZjfvaKQx2Aill38c=)
2: iq94tpd0pVUH3qv4xMlpQunvDSA.crl (hash: LUiVCiAnMVdfjR7ovC7WWDpzyJX6xTgimZjEHA1Dk/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:77:31:35:f4:2b:a9:85:3f:d5:7a:ea:45:8a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aaf78b69774a55507deabf8c4c96942e9ef0d20
Validity
Not Before: Mar 25 21:01:32 2026 GMT
Not After : Mar 26 21:01:32 2026 GMT
Subject: CN=f6e56a034e22157223e3dd3b2b6210931bde455c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:d1:96:ce:a3:4a:c8:aa:46:73:e7:fe:01:
80:3e:36:6f:33:9b:28:53:06:92:3d:01:5b:3b:cd:
73:a1:f5:d8:7c:9f:c4:c1:fb:c2:57:56:4a:71:fb:
b2:e2:ec:1a:d0:7e:40:da:eb:20:3b:3c:84:fe:8b:
9c:44:db:8b:5f:87:30:3a:ee:4a:55:23:12:d5:21:
e1:a9:73:f5:89:a3:d7:74:9b:4e:1d:b5:f6:18:1a:
69:77:c0:0b:6a:e3:1d:cd:d0:38:da:be:92:63:44:
22:d2:3f:59:98:3b:62:64:c3:98:b5:bf:be:7e:a2:
fa:08:e4:a1:72:09:75:1e:fa:92:bb:ab:66:66:b5:
64:27:71:64:7c:cd:1e:2b:6b:3c:91:d6:aa:c8:f4:
19:93:32:5a:40:fd:90:3e:04:5d:f7:f2:8f:06:ca:
23:5d:25:47:4c:e0:0c:7f:23:0b:2f:f9:cb:c8:11:
95:67:8a:c7:5f:b3:23:f5:ff:0e:85:8f:3b:c0:87:
12:03:b9:c3:70:e5:69:f4:40:ea:b0:65:34:b0:74:
9e:3e:f0:6a:02:60:dd:fb:eb:e7:20:31:d6:c7:9b:
40:37:ef:07:ce:6d:06:2f:73:a0:33:4a:21:22:f8:
ba:d9:0e:95:4d:38:2c:be:33:34:0f:13:39:16:16:
37:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E5:6A:03:4E:22:15:72:23:E3:DD:3B:2B:62:10:93:1B:DE:45:5C
X509v3 Authority Key Identifier:
keyid:8A:AF:78:B6:97:74:A5:55:07:DE:AB:F8:C4:C9:69:42:E9:EF:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:97:84:4a:e2:86:d4:3f:19:ad:de:7b:6a:68:d6:d6:f6:a3:
09:d1:66:a2:fd:89:2a:f4:af:f7:94:17:47:93:f9:63:e6:3b:
87:70:0d:0e:3c:2a:26:50:78:fd:28:ad:0b:6e:26:0e:a2:44:
8a:1d:f0:aa:69:f8:79:a5:4d:8b:b2:9b:8a:ea:f2:1e:da:08:
bc:e1:fd:fe:b7:c9:6d:23:71:6a:39:91:32:ea:d1:8e:cf:a5:
50:8a:f9:4d:ba:47:40:91:52:e7:55:62:7d:fa:e1:72:5d:48:
e5:ba:d1:d0:ab:d4:e5:f0:09:52:d5:7b:d0:d3:dd:3d:dd:f9:
bb:58:c8:39:b9:e7:ce:8f:a3:55:4b:c6:33:7a:93:5c:99:88:
3e:a9:23:8d:ce:82:06:b7:29:5f:3b:6d:92:e4:0e:33:7d:36:
d0:15:a5:6d:de:8b:be:df:db:d0:61:10:08:1a:cf:86:da:f1:
91:bc:b0:85:19:2c:1c:96:dc:59:c6:9d:d6:14:80:f1:2b:fb:
fc:da:48:d9:c7:6e:7f:ba:88:93:da:75:69:4b:14:78:d5:2f:
be:3c:7c:f8:be:7a:b3:94:f2:b1:57:60:6f:3d:24:9f:ab:3e:
b6:d2:dd:50:62:23:7a:a9:7b:5d:79:d2:49:c5:69:6a:b6:f0:
ee:60:d6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:48:21 2026 by rpki-client