Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
File: Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft (raw, json)
Hash identifier: OesarUXnMSIFH+fIBlKtgzRsgAr1we/QOXdDJ5TWeKg=
Subject key identifier: 01:24:D2:BC:5A:AB:09:F8:38:FF:C1:D7:B5:8D:CE:EA:41:30:0D:2B
Authority key identifier: 23:0D:31:1F:C1:94:63:FD:D3:0A:DE:CC:91:7B:5F:02:98:74:1B:44
Certificate issuer: /CN=230d311fc19463fdd30adecc917b5f0298741b44
Certificate serial: 01A16A90FC48D5D74931F6F28AA053146352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
Manifest number: 14D8
Signing time: Fri 23 Oct 2026 21:00:48 +0000
Manifest this update: Fri 23 Oct 2026 21:00:48 +0000
Manifest next update: Sat 24 Oct 2026 21:00:48 +0000
Files and hashes: 1: 3kj2IZUmhg4c3fn_vDNshjS1bYM.roa (hash: F1j+Rw7AK0w/RfaxR+vC5zwL/WwgyQ05RgO+QAvekpY=)
2: Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl (hash: ZLng4ZJ6VAvj/XNQML5oaaCciWUT6qDJAsmbETvYdb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:90:fc:48:d5:d7:49:31:f6:f2:8a:a0:53:14:63:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230d311fc19463fdd30adecc917b5f0298741b44
Validity
Not Before: Oct 23 21:00:48 2026 GMT
Not After : Oct 24 21:00:48 2026 GMT
Subject: CN=0124d2bc5aab09f838ffc1d7b58dceea41300d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:02:56:7f:3d:b1:3f:19:45:4e:65:c8:47:47:
6e:78:7f:1f:5e:67:80:2a:df:8a:e5:16:73:12:01:
06:77:74:aa:60:53:18:ec:87:c3:c1:a0:09:32:b4:
e5:32:97:fd:15:bc:f9:df:41:95:04:26:a0:c7:1e:
46:e1:fe:7c:5d:14:e3:67:8f:0e:2d:8f:db:56:70:
54:e7:45:de:5a:8f:cb:42:df:30:b3:f4:56:9d:bd:
52:75:cb:6a:9b:a1:b2:46:0a:52:e4:42:85:4c:32:
7c:5a:6e:a0:9f:00:20:08:23:40:66:c5:03:02:d9:
ea:e9:de:a8:a7:04:12:95:5d:f6:32:3d:60:ef:00:
a5:31:4b:52:14:47:d7:a8:d6:af:05:a2:d0:f3:c6:
82:83:fa:c4:df:52:e8:2a:e1:12:4b:c0:2f:81:52:
a2:a4:cf:4b:af:96:07:d7:82:af:ce:bc:ab:4c:ff:
44:ab:84:de:d2:ec:c0:25:da:46:e4:d1:39:49:8f:
e8:55:84:3a:34:bd:2f:ed:94:33:fb:d0:51:82:f1:
c7:fb:e1:9c:c7:8a:c1:1a:0a:ba:0f:28:d3:ef:52:
8c:ae:47:5d:be:35:ca:3e:e4:36:5c:99:5a:9a:9f:
f8:15:d7:13:42:f1:02:b6:1d:22:86:89:6d:df:e5:
03:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:24:D2:BC:5A:AB:09:F8:38:FF:C1:D7:B5:8D:CE:EA:41:30:0D:2B
X509v3 Authority Key Identifier:
keyid:23:0D:31:1F:C1:94:63:FD:D3:0A:DE:CC:91:7B:5F:02:98:74:1B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:25:a3:d9:95:01:1c:45:3e:71:f5:4b:f2:61:7b:a2:b5:f3:
6f:b1:4f:73:f4:2e:c2:44:77:f7:cb:85:ff:75:63:85:6f:ba:
85:3b:4f:ca:16:bd:b9:fc:d5:2f:6c:aa:7c:54:1c:06:32:94:
73:63:bf:83:f8:07:5b:a0:33:1a:4f:bd:84:a6:09:85:89:f0:
4c:26:7c:1e:2c:17:c7:fe:1f:58:e7:13:a8:a2:6b:fe:7a:1c:
75:ae:a4:be:b3:10:c8:9f:55:22:9f:8c:82:29:e8:a6:b6:d9:
a2:a0:af:a1:e8:de:4d:27:77:fe:90:64:88:4a:ab:ef:02:c9:
ba:ad:f8:1f:c9:40:62:22:08:04:6e:41:cf:20:12:80:64:f8:
aa:d0:43:58:9e:88:0e:aa:19:15:99:8d:2f:aa:16:58:07:b2:
2f:32:a6:3f:01:92:ad:a4:3c:bc:b7:bd:e1:7a:9b:b1:f6:34:
19:1a:fb:df:c3:d1:56:da:88:a7:f9:a3:a1:4e:d1:8b:e6:a5:
08:14:08:65:50:e4:69:ec:f4:3e:48:3b:ce:d2:ac:3c:14:8f:
01:a8:db:4c:c4:0c:c7:2a:17:c9:2a:41:d3:82:0e:46:de:65:
5e:eb:40:fb:7e:b2:65:fa:11:2c:b6:a3:69:40:ee:b4:d9:01:
b0:eb:13:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 01:11:03 2026 by rpki-client