
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
File: iDg0C7z4K84GXO6zeMuqR7mjLN0.mft (raw, json)
Hash identifier: taxVKMFZDBRzoR28tb5TdTuT1undA7VTMbnuxfoBF6w=
Subject key identifier: 4E:74:06:15:0A:94:E7:02:0F:44:C2:7F:23:1C:D5:55:BA:EA:B7:59
Authority key identifier: 88:38:34:0B:BC:F8:2B:CE:06:5C:EE:B3:78:CB:AA:47:B9:A3:2C:DD
Certificate issuer: /CN=8838340bbcf82bce065ceeb378cbaa47b9a32cdd
Certificate serial: 01A13B24BB88EC856612598F0652CFB92B9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
Manifest number: 02EF
Signing time: Wed 14 Oct 2026 16:00:25 +0000
Manifest this update: Wed 14 Oct 2026 16:00:25 +0000
Manifest next update: Thu 15 Oct 2026 16:00:25 +0000
Files and hashes: 1: 82yqy0aGJzKzR4R_K7jhO-MXZ48.asa (hash: QLpjtYyVJWNod7Hjm1qgZ6D0o3OhLnBCKHSjT6fQXEI=)
2: iDg0C7z4K84GXO6zeMuqR7mjLN0.crl (hash: EGUeAhiwI8RgCBKlyzGfUb9mVNVOv3sR0eDku3KOMuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:24:bb:88:ec:85:66:12:59:8f:06:52:cf:b9:2b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8838340bbcf82bce065ceeb378cbaa47b9a32cdd
Validity
Not Before: Oct 14 16:00:25 2026 GMT
Not After : Oct 15 16:00:25 2026 GMT
Subject: CN=4e7406150a94e7020f44c27f231cd555baeab759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9c:da:c7:0a:cf:60:cb:8b:46:d3:31:fe:c8:
52:1e:4c:c2:8a:49:4f:12:6e:b0:52:a1:4e:4d:c9:
f5:6e:e9:ed:3a:2a:22:6f:90:d9:3f:10:1a:bd:ce:
f2:6d:21:fc:3b:b8:b7:c8:e2:e6:02:b7:12:80:40:
83:74:76:65:c8:ce:d0:56:70:a6:ed:0f:ed:0c:58:
82:9b:d5:07:d4:8e:63:48:b3:f9:c7:83:53:37:65:
c4:4e:ec:8b:9a:17:49:96:ea:26:62:55:cb:16:55:
9d:07:63:33:8b:19:b9:2f:1d:fa:0b:38:d4:15:0b:
b4:f7:f9:8b:09:51:06:4a:42:e8:e4:03:70:3c:3d:
02:88:2b:19:89:46:04:d3:cb:1f:38:11:78:e6:26:
c7:bd:50:a0:df:26:35:31:b2:23:85:42:28:29:37:
56:b5:e5:47:09:df:ab:5a:ac:fc:78:99:58:52:5c:
2d:c5:cb:95:79:19:d9:33:69:73:db:40:e3:53:c3:
ba:fc:99:a7:37:31:64:4b:a2:5e:75:b2:dd:c0:56:
83:94:96:95:0d:a9:1c:9a:70:fa:fb:73:7f:05:a6:
c3:ba:3c:14:da:ce:b6:fa:f5:a4:5b:01:36:d5:f9:
cd:ef:b2:e3:b4:79:d6:e7:ce:8b:1e:d6:26:14:f7:
8a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:74:06:15:0A:94:E7:02:0F:44:C2:7F:23:1C:D5:55:BA:EA:B7:59
X509v3 Authority Key Identifier:
keyid:88:38:34:0B:BC:F8:2B:CE:06:5C:EE:B3:78:CB:AA:47:B9:A3:2C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a1:87:09:bb:f6:d6:39:52:c9:1d:92:4a:ae:3a:20:1f:41:
b8:3b:d9:08:74:14:13:ea:67:a2:19:fc:0b:83:cf:5b:d6:7b:
22:b9:43:c2:0b:9a:cd:80:ea:c5:6a:73:ef:4a:74:d6:8d:f1:
e9:a9:9a:e3:ed:1b:77:51:0a:ae:44:d5:2a:ec:c8:b5:36:81:
e5:93:cc:9f:32:d0:ea:2c:b7:b2:ed:9f:de:dc:e5:14:1e:86:
8a:05:99:8c:3e:d2:66:ea:9d:1f:8f:1e:cc:4c:36:7b:b1:6e:
df:42:17:9a:90:dc:6b:2d:d8:51:de:40:79:2d:cb:c1:e9:fa:
40:a9:d7:ed:07:c5:0b:bf:ca:a7:ad:2e:58:10:fb:93:13:e9:
b7:99:c1:42:30:9a:75:07:10:69:dc:04:f2:6a:1e:9c:d1:8f:
8c:fc:8a:72:bb:5e:91:13:24:5e:c6:38:97:a1:ed:9d:0d:b3:
fa:72:79:2a:b4:3e:6c:2f:30:ac:f6:b8:a5:6e:cd:e9:c6:51:
01:ee:b2:ba:d6:0c:a8:f6:35:dd:7a:2d:30:cd:92:91:d1:fa:
f7:bf:fc:5b:75:6c:e2:3a:00:1a:65:ac:4a:28:5e:d7:78:61:
dd:9c:d5:fb:ca:0e:18:6e:97:86:84:23:c6:59:d4:8d:97:1c:
36:3f:2a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:49:04 2026 by rpki-client