Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
File: cH89q67iT8Q7hlqvo_PJwvNkv8k.mft (raw, json)
Hash identifier: /oGlky1RbIikXzwZz1a43zMMddCLaQU9i8qw1vuAAdc=
Subject key identifier: D8:88:20:C4:25:C9:8E:F1:01:0A:F8:C9:BE:64:56:28:87:9F:36:F2
Authority key identifier: 70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
Certificate issuer: /CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Certificate serial: 01A0C934DFACCEE66A9F0DEC619F770F7D81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
Manifest number: 19FB
Signing time: Tue 22 Sep 2026 13:01:20 +0000
Manifest this update: Tue 22 Sep 2026 13:01:20 +0000
Manifest next update: Wed 23 Sep 2026 13:01:20 +0000
Files and hashes: 1: YFuXlkN-MljNRVYZCMihnQz4RoU.roa (hash: ZnDgTtky6cYn6D0/F0mae8ReoG9f3tqFA2qYPiw3SoE=)
2: cH89q67iT8Q7hlqvo_PJwvNkv8k.crl (hash: XXKWUNEvu0HdHWgZCzMn+/P1N/ZtE0CTxIE67CWXFdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:34:df:ac:ce:e6:6a:9f:0d:ec:61:9f:77:0f:7d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Validity
Not Before: Sep 22 13:01:20 2026 GMT
Not After : Sep 23 13:01:20 2026 GMT
Subject: CN=d88820c425c98ef1010af8c9be645628879f36f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ae:e8:98:70:06:f9:dc:ad:bd:dd:a3:af:68:
c2:1b:7a:56:43:48:21:fd:7c:94:57:dd:ee:c8:33:
9a:b0:27:e5:ae:78:7b:c0:3c:5d:89:22:ae:ed:ed:
16:4f:77:84:e1:7a:2c:aa:0d:67:0f:76:dd:d6:10:
12:08:35:7f:26:44:d6:d6:ec:c3:9c:4c:ab:a2:11:
48:e3:9f:c3:75:e4:2f:16:a2:66:85:11:d7:a8:dc:
b2:93:ea:2c:4a:38:7b:bb:b5:7d:23:9b:16:7a:5a:
42:db:54:9e:d0:08:45:4c:3f:9c:66:c4:33:05:f1:
e4:18:3b:0c:96:17:97:e3:1e:93:a6:04:9e:1c:5e:
d0:35:e9:b2:00:4b:ed:73:33:04:37:d2:f3:69:ff:
0d:04:6e:05:5d:47:45:ca:26:1b:1d:b5:2e:27:b1:
d2:a8:95:22:7e:76:ef:0b:8c:27:25:4b:d5:74:21:
7e:7e:86:c3:18:cd:fd:64:9c:35:e8:1b:3a:98:52:
9a:a4:a4:2c:4c:ea:c7:5b:39:62:21:a0:a8:d2:19:
0b:fe:aa:6a:69:38:77:07:04:c7:43:80:a6:f8:25:
de:d9:14:41:77:63:f2:7f:0e:17:2b:81:c9:ee:0d:
fe:d7:3a:4e:2c:56:e2:df:cb:3c:1a:be:4f:61:30:
95:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:88:20:C4:25:C9:8E:F1:01:0A:F8:C9:BE:64:56:28:87:9F:36:F2
X509v3 Authority Key Identifier:
keyid:70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:66:52:a4:17:6e:23:d8:cd:09:12:c1:54:e6:f5:fe:d2:c3:
37:98:74:a9:89:a4:6f:ae:74:2e:3e:34:e0:c3:8f:ea:c0:97:
c6:59:2c:b3:0d:cd:4a:ef:cc:c2:76:a2:d7:a2:9b:df:bf:62:
ca:96:62:41:c5:d9:8a:b8:dc:88:5e:c9:22:eb:10:06:a0:fe:
aa:cd:7e:ce:5a:f6:a2:7f:c5:8e:d3:53:87:36:96:74:96:42:
f2:6b:0e:92:29:8b:38:aa:ef:23:bd:a7:11:93:e5:ee:4d:68:
c6:c4:62:0d:27:d5:9e:ad:db:ce:91:84:e2:66:cc:65:55:fd:
3c:31:3e:38:10:e7:bf:f5:3b:1e:eb:41:e2:f8:5f:be:a4:c1:
51:ea:b5:92:ed:33:63:76:d5:26:ec:a4:a4:c0:dc:0d:d5:e1:
c4:7a:a3:5e:c4:c8:81:7e:4a:de:68:ed:b6:fa:cd:5e:b5:88:
76:d7:5e:50:f4:28:09:d8:d6:21:41:20:fc:c5:f2:94:0d:90:
6c:93:96:4e:c1:16:60:c7:6e:89:0d:6d:ca:42:d5:26:b4:60:
6d:1e:16:8c:87:45:39:fc:d5:0c:f9:89:b7:cd:13:04:fe:79:
33:66:b1:37:e2:b2:f7:58:19:4d:17:8f:95:79:14:d5:23:01:
ae:9b:53:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:23:53 2026 by rpki-client