Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.mft
File: Ig8nZzFYdewO_C4lWFb1hqTd-Zw.mft (raw, json)
Hash identifier: KHefEn8QVb0y5qfXRfnmLaD7IwKV0qbu7v5a7O9LRXU=
Subject key identifier: 83:BC:58:A9:09:1D:5D:D7:74:D2:D1:F2:C7:53:4C:5D:4B:42:2E:2B
Authority key identifier: 22:0F:27:67:31:58:75:EC:0E:FC:2E:25:58:56:F5:86:A4:DD:F9:9C
Certificate issuer: /CN=220f2767315875ec0efc2e255856f586a4ddf99c
Certificate serial: 01A0E098BB6E7E7BB4984942B343AD05A79C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.mft
Manifest number: 028D
Signing time: Sun 27 Sep 2026 02:01:40 +0000
Manifest this update: Sun 27 Sep 2026 02:01:40 +0000
Manifest next update: Mon 28 Sep 2026 02:01:40 +0000
Files and hashes: 1: Ig8nZzFYdewO_C4lWFb1hqTd-Zw.crl (hash: zCgwiqln1h6larJqG/gp1EkNZi4fY7kIkY8V9xh9ZMw=)
2: jnoYXUWkNRBwE55gU3cUjhKnM9w.roa (hash: GkOFMkSHJrr+Ph9/Sr5URt6WqLmo1u32CGBeLjwbWR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:bb:6e:7e:7b:b4:98:49:42:b3:43:ad:05:a7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220f2767315875ec0efc2e255856f586a4ddf99c
Validity
Not Before: Sep 27 02:01:40 2026 GMT
Not After : Sep 28 02:01:40 2026 GMT
Subject: CN=83bc58a9091d5dd774d2d1f2c7534c5d4b422e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e9:51:db:5a:c0:dc:2e:f0:17:6a:19:39:7c:
12:1f:59:5c:9c:8f:1c:5f:22:0c:36:79:f5:b7:57:
a1:58:a3:36:8f:79:f3:dc:ca:34:1f:7d:bf:e7:4c:
97:a9:54:40:a2:5d:ce:64:f0:36:a9:9b:f7:82:ce:
7b:47:94:50:02:4d:dd:5c:4a:d3:33:ec:27:73:60:
36:b3:3a:16:d5:4a:95:10:5e:16:95:f6:fb:18:49:
e6:63:3f:01:8d:69:80:ff:06:9d:65:84:32:b2:42:
cb:cb:6a:be:e6:ee:40:c9:a1:2f:ce:0d:18:aa:f1:
cc:5d:80:a8:51:69:9d:39:dc:dd:13:56:36:da:06:
98:37:21:e7:35:d8:43:2f:0e:71:a9:06:eb:1c:86:
21:92:fb:a6:43:07:66:8c:51:22:de:94:13:ed:68:
24:b8:a8:d5:4b:13:4e:5f:84:9c:ad:b5:e3:26:7b:
54:4c:a9:50:a2:9c:bb:c2:38:f6:35:d3:64:02:0f:
0e:88:f1:d8:4d:6d:2f:fe:fe:54:33:43:4d:52:1f:
2c:5d:09:45:d3:9b:02:73:06:dd:29:f4:a6:a7:85:
9d:54:e0:db:e0:f9:da:54:81:49:c4:1c:b2:08:d7:
54:d7:68:12:b1:3f:26:0c:5c:7d:5a:2d:5e:3e:43:
d7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BC:58:A9:09:1D:5D:D7:74:D2:D1:F2:C7:53:4C:5D:4B:42:2E:2B
X509v3 Authority Key Identifier:
keyid:22:0F:27:67:31:58:75:EC:0E:FC:2E:25:58:56:F5:86:A4:DD:F9:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e8:e1:34:6b:3e:7f:78:64:77:01:84:12:02:39:e8:72:8b:
72:38:ee:11:1e:6e:12:ae:fc:df:08:a9:8e:e2:76:9e:4a:7d:
88:25:1c:f9:d0:61:8a:05:64:e7:60:36:08:22:f5:6d:cd:6a:
2b:dc:52:dc:b6:e0:bc:8e:c8:3c:84:77:6e:07:38:47:4b:9f:
8a:ba:a4:2e:5b:90:5d:ed:ce:6b:7a:ff:a3:bf:ed:c4:f6:b2:
95:d6:1c:1d:52:21:a9:92:77:3f:b5:f7:d5:3f:78:8b:a9:ef:
a4:8f:dd:55:cf:cf:79:35:a5:36:9d:11:96:00:03:c2:23:4d:
14:79:5c:eb:cb:a2:59:d6:c5:6e:fd:a8:fa:53:8f:37:df:7b:
d1:10:17:c7:6f:06:5c:a1:f8:88:0c:e4:6e:4e:56:7d:0a:3a:
ab:c2:ef:4e:88:31:ed:72:43:50:72:fa:45:44:87:06:f3:d2:
c9:80:d4:ea:29:6b:7a:a0:84:38:43:4b:6a:9f:c0:ff:ee:13:
76:27:94:69:78:68:fa:84:00:8f:24:a0:78:d9:c6:67:80:64:
3e:d1:41:69:f9:ed:9a:3c:a6:b0:bd:77:85:2e:16:b6:8a:2b:
57:3d:4d:29:52:6b:3b:a2:16:af:32:13:4e:82:5d:4d:8c:73:
b4:7f:d6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:09:51 2026 by rpki-client