Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
File: I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft (raw, json)
Hash identifier: DMVwzTaWk0LWTgjKO070brjoKUCj+pEgxTL38RP/K/k=
Subject key identifier: 23:E1:0A:46:F5:2A:EA:00:02:60:D8:D3:D8:09:EB:C5:0B:0E:B4:6D
Authority key identifier: 23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
Certificate issuer: /CN=2347aaab2206c08128f543730064a145a3effa14
Certificate serial: 01A0ED0AC0CFC7139D5EBC1C1E0A3BD5B1A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
Manifest number: 1A98
Signing time: Tue 29 Sep 2026 12:01:39 +0000
Manifest this update: Tue 29 Sep 2026 12:01:39 +0000
Manifest next update: Wed 30 Sep 2026 12:01:39 +0000
Files and hashes: 1: 249_vWOJGgvFFmLv_5dYY1MQIWI.roa (hash: XCFj+iRH39Cj0T/bNpjf+R2spCw9+pyFathw15z8sLI=)
2: 9TBMQolrynkT7tDiDQfMSK2fy8k.roa (hash: DNBUcS0X2dXGEBDpiiVERi+TH/oYhB/Rs+ebfGfKbXM=)
3: I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl (hash: GssbdzRgs69WMAV00YqyYP6GqfncOlFG8mCZUPC1I5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 12:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:0a:c0:cf:c7:13:9d:5e:bc:1c:1e:0a:3b:d5:b1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2347aaab2206c08128f543730064a145a3effa14
Validity
Not Before: Sep 29 12:01:39 2026 GMT
Not After : Sep 30 12:01:39 2026 GMT
Subject: CN=23e10a46f52aea000260d8d3d809ebc50b0eb46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:31:91:1d:cc:b3:c6:c9:6c:77:6e:97:e7:42:
73:6f:a2:44:44:c8:bc:06:21:6d:9f:5a:13:02:a7:
2a:a5:94:45:31:8c:d2:f8:c3:62:01:ec:93:24:d1:
0d:10:1f:90:89:fa:ab:8b:8f:cd:6b:f6:ad:88:d8:
c5:ed:b4:30:d3:95:94:41:f9:b7:0d:f3:64:3e:03:
44:a2:be:10:b9:41:0a:36:66:4e:b8:44:85:d0:6c:
8d:56:5c:c7:35:fa:63:bb:04:19:a2:25:87:ea:0f:
12:3a:1a:fd:75:45:e6:65:47:02:61:fb:42:b8:c5:
ee:9f:c4:51:df:70:6c:40:b9:52:34:01:af:6a:0c:
ba:d7:06:80:3f:40:0a:17:9e:12:d4:70:e9:94:7e:
55:50:80:35:65:7b:68:8a:69:76:3c:48:3f:94:8e:
90:f6:fa:52:5c:8d:e4:1e:15:ec:f7:b5:9b:c4:4a:
69:41:2a:8e:70:7e:b4:d3:a2:6a:64:f1:9d:d4:6a:
a3:86:03:bc:45:7f:40:5a:23:df:34:1c:e7:6f:cc:
c4:f7:5e:60:ed:79:da:fb:b1:f7:a6:63:58:f2:b4:
83:22:1e:67:a1:57:f9:bd:a9:30:7b:15:1e:a6:e0:
25:2f:ba:9d:a8:21:ef:be:fd:20:d9:3f:7c:a5:c2:
8d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E1:0A:46:F5:2A:EA:00:02:60:D8:D3:D8:09:EB:C5:0B:0E:B4:6D
X509v3 Authority Key Identifier:
keyid:23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:95:01:2f:93:a2:13:a6:51:f1:a1:43:5a:14:b9:5d:84:25:
f5:b1:65:94:b0:6a:3d:c0:07:39:45:00:a6:ec:5b:2a:95:f2:
8e:cc:b5:2b:40:98:f7:26:2e:a1:6f:60:7a:94:6f:25:80:30:
14:92:43:65:b3:b8:1a:cc:17:c9:82:ca:c1:72:4a:9c:85:50:
15:ad:87:46:4e:2c:c5:b3:b7:46:1c:16:98:60:eb:b6:1b:b6:
32:0b:41:e2:e1:85:68:f3:f4:7d:83:3e:bb:e2:ad:9c:e5:6b:
2f:1f:3a:ce:9d:29:ce:19:45:0f:97:8f:74:48:f6:de:89:77:
71:03:29:47:d1:5b:1c:91:ea:0d:1a:61:9b:eb:51:1e:62:bf:
c4:7b:01:d7:b3:ce:4e:60:37:b9:35:d9:cb:99:d5:50:0b:03:
39:bd:f3:f7:4d:68:89:0c:87:07:6e:ee:83:54:25:35:a7:3d:
bd:ec:3d:6a:1e:e7:a6:79:12:93:9d:10:7e:c9:7f:76:44:0f:
cd:47:c9:9e:8b:dc:39:86:85:af:cb:bb:05:8a:c8:f1:92:25:
36:63:7d:d1:e3:f5:19:a3:87:aa:c1:bd:68:ac:ec:04:fe:da:
ea:52:e2:a6:55:63:63:ce:ca:cf:55:86:34:3a:66:fc:96:dd:
4e:82:a9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 20:06:49 2026 by rpki-client