Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
File: iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft (raw, json)
Hash identifier: 0OHFpJukel9OwTpKH915dTlKKLChykH/Bl9+2l+G/7E=
Subject key identifier: BA:2F:B0:2B:C1:9A:A5:F5:BE:71:39:2C:08:5A:57:26:61:A5:A7:63
Authority key identifier: 88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE
Certificate issuer: /CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
Certificate serial: 01A1242FBBC4A90DDBAC2836CFC08EF8B3E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
Manifest number: 0A05
Signing time: Sat 10 Oct 2026 05:01:10 +0000
Manifest this update: Sat 10 Oct 2026 05:01:10 +0000
Manifest next update: Sun 11 Oct 2026 05:01:10 +0000
Files and hashes: 1: iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl (hash: Nf2U8P7ef2k9x7iKWnKqo0aD20UD19KKeZd8pW5FzS8=)
2: yAy7dhfnf5ztz8zG2y2BYT0K2Nc.roa (hash: Yhi2sxhWb+ZdylE1qzvoU8mFvZlrRwD3FR8dKXylg+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:2f:bb:c4:a9:0d:db:ac:28:36:cf:c0:8e:f8:b3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
Validity
Not Before: Oct 10 05:01:10 2026 GMT
Not After : Oct 11 05:01:10 2026 GMT
Subject: CN=ba2fb02bc19aa5f5be71392c085a572661a5a763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a9:79:c4:83:91:4f:80:90:04:75:8d:1a:36:
3f:8b:bf:f0:e0:b8:be:f5:b6:f3:d2:63:7c:a2:5c:
13:6b:08:b7:d0:c4:f4:65:50:8c:41:6d:f2:1a:0c:
64:54:28:51:16:62:97:63:9d:53:49:10:21:82:0c:
7f:d0:6f:9c:36:55:58:f1:fc:44:fe:71:29:13:af:
6f:84:27:0e:ff:2b:37:91:15:d8:3f:c0:a2:f2:86:
43:e2:0a:0c:9f:55:13:53:b1:05:f3:ad:c9:ec:9d:
dc:c0:37:69:c3:e3:d5:6e:a9:e0:31:39:3f:5b:b0:
4d:43:fa:08:d7:7d:a0:f6:cd:b6:31:87:29:80:33:
48:5e:4e:3a:14:ca:d1:5a:75:80:bb:aa:b9:dd:f6:
48:88:51:9f:64:e5:e7:3e:0d:40:09:35:3d:57:92:
85:d5:29:14:ee:d7:68:75:81:56:a6:bc:d1:aa:17:
68:21:b5:91:24:2a:5e:a9:2d:50:6f:bc:0b:8c:70:
8b:51:c0:80:83:a3:6e:9b:03:54:99:fb:25:07:a6:
a9:9f:a3:95:6e:93:fd:9f:55:c9:99:d0:78:dc:42:
c3:77:c8:bd:42:a7:9d:37:a9:c1:2e:63:fc:a9:38:
1b:c4:a1:fa:82:20:d8:0d:89:97:54:5e:3e:58:3c:
42:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2F:B0:2B:C1:9A:A5:F5:BE:71:39:2C:08:5A:57:26:61:A5:A7:63
X509v3 Authority Key Identifier:
keyid:88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:75:73:89:26:cd:98:78:0b:48:3f:7b:8f:7c:7c:4e:28:63:
c8:77:9f:c3:fa:6b:f4:a3:79:ef:4e:c4:74:d0:3f:27:e0:d7:
58:b1:82:97:13:b1:7b:c2:ff:c0:f0:e7:ee:81:74:53:4c:f4:
bf:18:ab:fd:6f:58:11:85:83:eb:15:5b:f4:a7:f4:bf:2a:1a:
60:de:9d:32:ae:6d:71:cd:e8:4b:df:11:5f:0c:a8:c7:5f:c5:
e7:99:a7:90:02:33:74:41:49:1b:b1:b1:6e:65:4f:b7:54:ff:
9d:ba:39:b0:85:6d:4c:ec:81:b8:a3:ec:2a:25:09:6c:71:33:
56:02:b1:2e:f5:06:dc:b1:cc:68:dc:ac:56:1f:36:3c:ee:42:
4e:8a:f7:a6:7d:a9:7d:de:aa:a1:53:a3:ef:f6:4c:7b:5f:24:
34:5a:8c:22:6a:ce:33:41:51:4c:1e:ff:fb:86:37:55:9d:86:
1e:11:86:95:ac:23:cb:1a:cd:46:5d:81:e8:0c:5e:17:51:64:
5c:92:b1:4d:45:03:11:09:e6:3a:2a:61:da:08:3c:23:72:f7:
2c:9f:71:b6:0e:d3:c5:dd:62:18:fd:3b:b4:dc:81:45:f4:ba:
fb:3e:05:60:01:cf:4e:09:60:a4:21:9c:9a:49:b0:25:1c:a7:
93:5b:d2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 09:03:20 2026 by rpki-client