Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
File: INaBg9YBj1BMXm-uIo4bNQxvD-8.mft (raw, json)
Hash identifier: mNlTZiCURqlhbwD2SNAnhtQAlvkJBy2q0h1lopZPIeU=
Subject key identifier: 4F:F8:24:F8:28:1B:12:E0:2C:97:EB:1B:B2:30:A8:96:FF:90:20:69
Authority key identifier: 20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF
Certificate issuer: /CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
Certificate serial: 01A0D984285AB966BE39776FD8BAF62E5B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
Manifest number: 0865
Signing time: Fri 25 Sep 2026 17:01:51 +0000
Manifest this update: Fri 25 Sep 2026 17:01:51 +0000
Manifest next update: Sat 26 Sep 2026 17:01:51 +0000
Files and hashes: 1: INaBg9YBj1BMXm-uIo4bNQxvD-8.crl (hash: ikgTHRuhbVkS8Z+L4St+u5avAvjsPRBHQ98SJABOgl4=)
2: Iqa6GV4LdxiGIroWsllGP7YjyE4.roa (hash: Q0wZliLvPv9FNmdy4NB+Qu2Fy5dB0KdoE1fdtaOiLGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:84:28:5a:b9:66:be:39:77:6f:d8:ba:f6:2e:5b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
Validity
Not Before: Sep 25 17:01:51 2026 GMT
Not After : Sep 26 17:01:51 2026 GMT
Subject: CN=4ff824f8281b12e02c97eb1bb230a896ff902069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8e:65:6b:b1:2a:d7:d1:5a:f4:38:fd:9f:5c:
1c:83:db:da:c2:32:67:32:31:7b:44:39:a4:2a:e8:
70:47:1c:3d:2f:cc:41:ca:1e:4a:04:19:75:5e:12:
fc:ec:38:ba:10:27:7a:a3:cd:02:c3:86:62:94:87:
14:40:51:77:bc:78:06:96:61:3d:5c:bc:01:3f:61:
7f:96:81:ac:bc:be:17:dc:ca:18:dc:2d:52:ca:ec:
4c:58:21:54:7d:b8:33:6f:4c:d1:d8:ef:f3:ff:cd:
68:61:7a:10:10:10:bb:d3:2d:06:2c:8d:9a:26:36:
2c:31:f4:91:d0:6c:58:dc:f0:65:4e:60:db:75:35:
37:71:eb:fd:0e:74:61:47:f3:f7:2a:13:6a:30:a4:
6f:75:09:cd:67:6a:bb:05:05:50:08:47:32:be:57:
80:cf:57:0b:9b:29:82:72:13:76:3f:d8:d1:85:7d:
e1:c1:7b:d5:ac:6c:5c:19:db:d9:32:7a:05:b8:82:
6c:9e:ec:8d:32:f1:af:dd:d5:a4:86:ea:d5:95:82:
f5:d1:a0:a1:4e:25:3d:20:37:4f:9c:f6:12:df:49:
51:81:e8:af:62:d1:0f:45:72:2d:32:53:eb:c4:a5:
61:ca:68:98:c7:6f:b8:06:9a:a7:d1:2a:0a:bc:9a:
0f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F8:24:F8:28:1B:12:E0:2C:97:EB:1B:B2:30:A8:96:FF:90:20:69
X509v3 Authority Key Identifier:
keyid:20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:01:bd:a5:a9:8f:6e:5d:74:07:e5:43:7d:7c:90:98:87:78:
f5:b1:3e:ce:d5:7e:11:5b:b5:c9:7a:df:b8:e6:62:60:b8:15:
bb:13:bc:0b:a2:48:28:23:2c:37:0b:9f:5d:56:fc:d5:06:68:
d7:ce:cd:69:3f:da:29:e0:df:45:e8:5c:32:dc:33:b7:a2:f8:
3f:ef:b9:64:d7:4f:61:cb:79:e9:f4:24:7f:de:b2:3a:62:76:
1d:50:4c:82:23:58:82:60:b9:7b:31:1d:39:ef:bf:54:c3:c0:
73:f8:d0:63:c1:e4:58:75:57:49:d6:d2:a6:f6:60:8a:1e:14:
42:7c:f8:fb:17:b3:a9:e7:a3:67:b2:04:6d:12:a7:d8:e5:93:
c8:70:ae:f4:06:9e:42:69:05:cd:8d:4b:b4:39:4f:99:27:42:
f9:ac:ee:bd:12:e8:15:ee:1e:16:0d:44:25:66:80:10:c0:b2:
ee:e0:ca:de:04:ea:04:9b:5a:9b:be:d3:6f:33:fc:9e:1a:80:
b8:e7:8d:87:cd:67:79:bc:8d:fc:23:c4:5d:84:22:a3:1f:0b:
f0:44:3d:cf:5e:45:32:17:b7:a6:ea:d0:37:d1:94:89:15:ac:
9f:8e:85:ac:36:8f:be:df:1d:9e:19:a7:f7:4a:7c:b9:a4:e4:
04:ce:51:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:48:59 2026 by rpki-client