Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
File: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft (raw, json)
Hash identifier: aOr0Ai4ulsWr3vIu7sMoeC3bvCNO0yx9fF69j6IYhe0=
Subject key identifier: 46:70:A2:56:C0:AB:5D:13:69:F1:CD:41:6A:7A:51:25:80:B3:D4:C0
Authority key identifier: 88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
Certificate issuer: /CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Certificate serial: 01A0D45DA268C1E31E52178128C0FBAA478C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
Manifest number: 0E08
Signing time: Thu 24 Sep 2026 17:01:41 +0000
Manifest this update: Thu 24 Sep 2026 17:01:41 +0000
Manifest next update: Fri 25 Sep 2026 17:01:41 +0000
Files and hashes: 1: WDCEfBOgZu0IS0tXVscqDchFouE.roa (hash: M77yLF1D375mORfB1s9NJJsYDZZdRI/2B/Q2R1Rr0oU=)
2: eHFFve7oB3P4jI8nEd4tmbXombs.roa (hash: 2jkRmBwjqx2G1TPqQBkiFukmoNh6yKO3uMYlkbOFlyk=)
3: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl (hash: 0YLTPxf0P9/jXOhmhM+zxzEYT+pnfta/mv/8zg2VGo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 17:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:a2:68:c1:e3:1e:52:17:81:28:c0:fb:aa:47:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Validity
Not Before: Sep 24 17:01:41 2026 GMT
Not After : Sep 25 17:01:41 2026 GMT
Subject: CN=4670a256c0ab5d1369f1cd416a7a512580b3d4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c6:2a:f2:02:43:25:ec:e5:39:d1:0b:f0:70:
96:02:7a:13:ff:c0:a0:db:42:59:51:ca:6b:5e:49:
f8:e8:84:8f:d3:01:bc:bb:9d:1c:67:bc:c3:26:bf:
68:85:97:bf:83:7d:6a:91:15:31:99:f3:08:b6:a3:
1f:d3:4e:ba:84:ac:38:c4:e2:3a:89:2b:be:ae:85:
40:76:b1:9e:02:19:d1:2c:7b:72:b0:bf:21:7b:22:
15:65:50:a8:d5:5d:c9:9d:b8:1f:93:51:68:ac:ab:
f9:62:f1:db:93:24:25:77:b9:a1:3e:10:e3:39:be:
c3:9e:53:28:0f:33:e2:15:63:08:15:63:dc:60:f3:
2c:c6:fa:a8:d3:b4:03:7d:2b:be:6f:39:7a:e5:96:
a4:d8:d6:96:c8:6f:60:da:0a:8d:2c:10:6a:d5:6f:
70:85:c1:63:45:a9:90:06:3f:a6:05:b9:d0:9a:d2:
48:a7:23:df:dd:68:cd:60:f7:cb:6d:05:ae:2c:ed:
9b:85:7d:30:3d:c2:b8:b8:8c:3e:ce:33:7b:dd:16:
84:f7:a1:45:58:fc:dd:e8:9e:49:1d:22:a5:47:c7:
13:75:3d:df:69:3e:1c:43:6a:84:3c:dc:df:05:86:
bd:f7:1f:2c:63:4d:27:bc:80:e5:be:d3:86:02:e3:
5d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:70:A2:56:C0:AB:5D:13:69:F1:CD:41:6A:7A:51:25:80:B3:D4:C0
X509v3 Authority Key Identifier:
keyid:88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:1e:5d:e5:08:90:71:22:1d:d4:41:fd:e6:31:16:c5:bf:72:
4a:b5:26:45:3a:13:50:a7:e4:95:50:19:f7:7c:9b:e0:e5:0e:
32:5e:83:36:a6:49:74:a5:92:cb:2b:24:5f:dd:d3:6d:a1:53:
e5:77:b5:c4:20:e0:ea:4d:2b:2d:f0:2c:30:8f:02:76:7c:89:
91:f4:17:f8:39:03:34:40:e4:ff:73:c6:dc:f3:41:9c:46:60:
0b:87:f6:39:14:6d:dd:8a:4d:ca:d7:dc:b4:c7:2d:80:c3:e9:
83:55:5b:3d:53:b5:ba:01:2f:5d:85:a7:20:47:6f:55:ef:de:
d3:ab:6a:79:8c:ed:10:48:9c:82:7a:b9:17:7f:80:ca:45:39:
e2:6b:c4:ac:2c:c6:15:c2:dd:39:36:58:06:b5:57:3c:29:3a:
c3:32:84:e6:53:0a:19:73:54:03:0d:64:7e:ff:e0:88:b8:9d:
d5:34:80:93:7e:85:38:3e:19:e1:0a:49:71:4d:68:67:08:19:
4e:9c:6d:c3:72:a7:46:3d:b1:89:3d:12:48:0b:67:e6:e9:fc:
ed:37:15:2e:f6:6d:73:4f:46:17:41:b3:df:dc:d8:bd:aa:63:
34:a1:18:d1:d3:fe:db:7d:55:91:ba:73:c0:fb:8e:d2:8d:56:
53:83:a8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:45:41 2026 by rpki-client