Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
File: diI5iTgH6wmEboKXJ9cakuljp8g.mft (raw, json)
Hash identifier: yhX+Oe9jGimO5AMnWR1QfM5Xg10L8L7E/u2eZeBDDsc=
Subject key identifier: C4:B2:5D:13:F6:D6:81:51:42:B8:C7:75:8F:B4:FA:88:2F:31:FE:13
Authority key identifier: 76:22:39:89:38:07:EB:09:84:6E:82:97:27:D7:1A:92:E9:63:A7:C8
Certificate issuer: /CN=762239893807eb09846e829727d71a92e963a7c8
Certificate serial: 01A1084A721EC9D047366D2F1C4CE29AAD0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
Manifest number: 1A88
Signing time: Sun 04 Oct 2026 19:00:58 +0000
Manifest this update: Sun 04 Oct 2026 19:00:58 +0000
Manifest next update: Mon 05 Oct 2026 19:00:58 +0000
Files and hashes: 1: diI5iTgH6wmEboKXJ9cakuljp8g.crl (hash: EjzAfyQGGuutSYecbVnlkE0YB/E6HFV4V7VnJE3jmbA=)
2: xmOzcr6lxPTRPADy6CpR95O7sF8.roa (hash: XkTf2vdpptILRuqJJs0WI2X+ppey6cgWY94/Zljo9tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:4a:72:1e:c9:d0:47:36:6d:2f:1c:4c:e2:9a:ad:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762239893807eb09846e829727d71a92e963a7c8
Validity
Not Before: Oct 4 19:00:58 2026 GMT
Not After : Oct 5 19:00:58 2026 GMT
Subject: CN=c4b25d13f6d6815142b8c7758fb4fa882f31fe13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2d:40:d3:de:f4:ff:77:b8:85:a1:71:fb:40:
13:39:56:03:d9:a3:7d:74:7b:9a:d9:8c:dd:db:5e:
25:dc:e8:0d:fe:f5:6e:b1:55:f1:ed:c7:37:64:9f:
05:ae:d9:6d:3f:01:f6:9c:22:31:ea:51:71:6d:0d:
4a:bf:4a:1d:b8:9f:5d:22:7d:0b:ff:50:9c:95:8a:
33:56:72:3b:2e:11:3f:c8:38:cd:ad:ca:db:71:5a:
37:62:0c:d0:98:33:95:1b:75:f2:b6:f2:46:0b:fe:
bf:7f:e4:fc:2d:5c:76:0b:44:b5:bc:b1:7e:5f:d8:
bf:2f:3e:fb:94:93:ca:0c:6a:ef:97:61:cd:56:ac:
8c:dd:88:e1:ff:63:00:83:b6:dc:91:b8:ce:16:3b:
e6:94:fd:55:82:d3:17:f1:e4:54:e8:98:92:02:f0:
65:7c:60:a0:7f:da:f9:62:63:49:5d:f8:96:59:3f:
9a:39:6c:dd:05:fa:b5:cd:93:9c:de:db:51:c3:16:
b4:31:61:71:c5:dc:3c:01:17:7f:fb:d7:6a:d8:47:
ba:c5:45:72:a7:f3:9f:8a:92:ad:fd:b4:28:af:c0:
52:e0:a5:55:1b:00:b0:f7:88:90:82:ba:a0:bb:ef:
d0:d4:2e:ca:f1:08:b2:1c:50:e3:3d:90:64:8c:22:
8a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B2:5D:13:F6:D6:81:51:42:B8:C7:75:8F:B4:FA:88:2F:31:FE:13
X509v3 Authority Key Identifier:
keyid:76:22:39:89:38:07:EB:09:84:6E:82:97:27:D7:1A:92:E9:63:A7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:fc:87:52:d1:21:56:06:86:23:1d:71:7f:00:c8:70:5a:fe:
4e:2d:e5:30:5e:b7:dc:e3:4f:9d:17:dc:04:0b:37:ad:ea:da:
ad:92:24:7f:d7:7e:1a:6c:88:8b:f9:e6:ac:5d:04:6a:c2:fe:
5c:91:3a:e5:c0:03:f1:44:71:e0:42:13:1f:79:4a:52:5b:41:
b2:be:4c:26:6f:65:68:53:1a:b5:9a:43:b5:bb:ae:f8:9b:b1:
46:b0:87:47:40:da:bc:e7:3f:80:69:f1:c1:b5:4e:98:1b:3b:
8a:20:a9:97:ba:87:b8:4f:95:91:df:df:c8:b2:67:67:00:30:
e9:e6:92:98:1a:37:a1:f4:be:63:35:38:a8:26:fc:a5:7d:b8:
3b:86:a8:f7:ee:40:71:b3:2c:a9:ee:f0:9c:65:6b:9d:1c:66:
c9:f2:db:49:14:be:08:c1:e5:0a:ab:b3:3d:b0:97:0a:ae:97:
f6:08:44:20:a7:6e:97:9c:21:37:1b:71:d8:57:7c:83:36:b9:
81:04:0b:0d:03:a5:78:10:4f:39:e6:a6:ee:33:ce:a4:71:ee:
3b:d3:21:58:e8:a1:4d:24:be:8d:56:fb:81:d6:06:3b:ea:e6:
f8:f7:e5:77:e6:4d:bb:20:c7:79:97:be:f9:4e:f9:5b:f1:70:
f2:37:f6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:40:10 2026 by rpki-client