Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
File: iq94tpd0pVUH3qv4xMlpQunvDSA.mft (raw, json)
Hash identifier: JAJ88hkkRDjxo3KXeJTIAgEbgRINseC2doYHI5VYmAo=
Subject key identifier: 9F:0C:97:32:D4:39:1A:44:BD:D5:E8:F1:23:F4:59:CD:22:F4:72:FB
Authority key identifier: 8A:AF:78:B6:97:74:A5:55:07:DE:AB:F8:C4:C9:69:42:E9:EF:0D:20
Certificate issuer: /CN=8aaf78b69774a55507deabf8c4c96942e9ef0d20
Certificate serial: 019E1FEC4626FFB63FA26A8DBF5D29C3DB53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
Manifest number: 1003
Signing time: Wed 13 May 2026 06:00:38 +0000
Manifest this update: Wed 13 May 2026 06:00:38 +0000
Manifest next update: Thu 14 May 2026 06:00:38 +0000
Files and hashes: 1: AOuKaEFuAus3hz3w0WC3j7I2mqc.roa (hash: YMOsepey7pZcM4gw70d5HgYaXkzZjfvaKQx2Aill38c=)
2: iq94tpd0pVUH3qv4xMlpQunvDSA.crl (hash: fq6pasu2IVEk4LYQDU0L+Za2HmMhCXLuPjL1nz/Wd5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:46:26:ff:b6:3f:a2:6a:8d:bf:5d:29:c3:db:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aaf78b69774a55507deabf8c4c96942e9ef0d20
Validity
Not Before: May 13 06:00:38 2026 GMT
Not After : May 14 06:00:38 2026 GMT
Subject: CN=9f0c9732d4391a44bdd5e8f123f459cd22f472fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ce:3d:f0:61:7e:d4:5f:a9:8d:af:66:1d:f7:
90:4e:be:a5:64:1b:28:39:99:91:ae:4d:7b:5a:09:
7d:2c:4a:c3:ff:0d:86:b5:f8:54:12:ad:71:36:36:
c2:63:e7:ec:fd:8f:a0:61:38:d2:91:de:7d:79:65:
a5:4e:83:7d:25:44:4f:8a:03:54:54:f2:57:83:6d:
0f:58:2e:e7:3e:83:71:3b:89:23:86:e6:c4:19:9a:
32:62:28:2a:a7:b9:49:51:d1:c9:b0:02:a1:b4:67:
19:bd:f4:5c:98:76:a2:a9:92:95:b3:f2:72:ad:b3:
ba:b2:03:0c:c4:36:1d:a2:37:f6:90:5c:2c:c3:11:
73:d3:92:a3:cb:97:df:49:e5:48:c1:00:f2:c3:0e:
45:9f:e2:6f:d5:97:a5:bf:70:25:a0:7b:b8:5e:ed:
7f:9a:23:e5:41:83:ee:18:55:3a:6d:7a:c1:d4:3c:
c6:0d:cb:2e:6e:27:ab:b5:16:77:f1:a6:b7:65:30:
db:af:d5:81:31:2e:53:6d:19:23:00:7b:ee:53:52:
13:06:17:13:90:ad:b7:8e:ad:fb:5b:9b:0a:b5:68:
51:98:47:76:96:fa:9b:a3:f0:24:c3:fb:d4:0d:3f:
1c:6e:95:a0:c2:a0:09:9e:50:01:90:1b:68:f2:1f:
c7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0C:97:32:D4:39:1A:44:BD:D5:E8:F1:23:F4:59:CD:22:F4:72:FB
X509v3 Authority Key Identifier:
keyid:8A:AF:78:B6:97:74:A5:55:07:DE:AB:F8:C4:C9:69:42:E9:EF:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a9:6a:c8:48:79:9b:c1:0e:6c:0f:1b:c2:4f:68:bb:45:2a:
cc:62:89:03:23:32:56:19:16:9f:af:df:19:96:9c:78:7c:d3:
d8:e5:dc:cc:e5:84:62:61:74:fb:4e:6f:32:53:cf:e4:cc:3f:
3e:86:03:c2:29:58:f1:9a:2b:26:1c:21:56:97:f2:7e:f3:95:
2c:ee:5f:3a:73:2c:ac:b2:eb:6d:15:28:f0:e8:89:1a:7b:a1:
70:41:38:f7:9f:e5:97:a5:0a:1b:eb:a6:21:f6:81:35:24:80:
1a:57:c6:2b:57:77:86:c0:99:43:c6:e1:1f:ee:02:3e:0c:84:
c7:78:ac:9f:20:64:a8:4e:87:e9:25:6c:11:ae:c1:93:0b:47:
ef:8e:47:ee:83:c9:ca:e5:54:eb:23:fd:2b:4f:2d:3c:87:51:
1f:bb:3f:4a:45:b7:b3:70:4a:5a:83:be:fc:8f:7c:52:49:2c:
f0:6e:26:18:d0:56:7c:b9:9e:5e:4c:c1:c3:41:e1:35:3b:18:
3e:90:f7:60:79:42:d8:70:81:95:89:3e:04:0d:08:f3:12:7f:
bc:1c:c8:1e:43:9e:17:30:81:79:aa:f0:d3:92:87:40:44:b0:
e4:f5:6f:f8:7e:a9:33:71:2c:58:f4:b6:61:ec:9b:37:25:e6:
f3:96:b3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:51:56 2026 by rpki-client