Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
File: IJPjg7LMUtXsow_rEml1k8nHiKA.mft (raw, json)
Hash identifier: O0gR8Wq2fLvK0+z1FtiSa3os06iWeyWSGsy37mu8Te8=
Subject key identifier: 42:35:8D:52:EC:D7:A4:F8:4E:95:D7:A3:36:B6:3B:05:AF:35:EA:26
Authority key identifier: 20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0
Certificate issuer: /CN=2093e383b2cc52d5eca30feb12697593c9c788a0
Certificate serial: 01A0FF7EACA80286924FF24310C756DCE8E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
Manifest number: 1A84
Signing time: Sat 03 Oct 2026 02:01:26 +0000
Manifest this update: Sat 03 Oct 2026 02:01:26 +0000
Manifest next update: Sun 04 Oct 2026 02:01:26 +0000
Files and hashes: 1: IJPjg7LMUtXsow_rEml1k8nHiKA.crl (hash: G1h2XFva51DuhsqK1OI5f/cBfYphB3tSQViZ5s1VAY8=)
2: UhcVOrWI94PD7J8NZ396e7oTXmQ.roa (hash: le2/ey5cYL9OHx+rHl459Ml2HcRFUdgLBFJPfGYggHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:7e:ac:a8:02:86:92:4f:f2:43:10:c7:56:dc:e8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2093e383b2cc52d5eca30feb12697593c9c788a0
Validity
Not Before: Oct 3 02:01:26 2026 GMT
Not After : Oct 4 02:01:26 2026 GMT
Subject: CN=42358d52ecd7a4f84e95d7a336b63b05af35ea26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:29:57:6b:09:ff:26:c3:31:53:43:db:f2:6c:
3b:b2:27:34:0e:bb:85:b0:7b:a8:2f:b5:2f:ee:4b:
87:67:ff:c0:21:1c:05:d3:49:a2:2f:3e:41:1b:df:
1f:2b:b8:41:b5:bb:39:35:57:d2:b9:a5:cd:ea:ae:
25:13:6f:c7:da:42:d6:9f:95:3e:3f:61:40:42:48:
88:60:dc:36:1d:42:d2:04:96:dd:a2:4b:a4:9f:e4:
a7:8c:0e:c4:af:bc:e2:a2:bb:1e:56:4c:fe:b5:55:
d2:9a:d3:ee:f0:3a:f9:07:b0:7c:be:7b:cb:10:6e:
fe:d3:2d:ec:d5:c8:0b:c4:b7:7b:03:0b:37:29:04:
c4:54:fc:78:71:32:41:3e:9d:bc:67:42:7e:8f:05:
e9:8f:e6:ff:fa:8d:01:b3:cd:38:d0:b3:df:47:c3:
20:6a:2b:3f:29:f9:2d:5b:c8:65:04:e6:b2:8f:12:
83:f8:a0:dc:6b:72:21:48:a4:de:d6:df:bf:5f:4d:
8c:f4:8d:04:4a:73:bb:a0:14:b4:b5:a7:1c:f2:0f:
20:36:34:df:fe:cd:53:b7:2d:42:09:da:5f:a8:81:
91:c7:e8:a1:ce:d8:f4:39:fb:21:a1:43:73:0c:4f:
26:65:15:6a:0f:7e:5f:41:4d:84:77:07:cc:a2:69:
31:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:35:8D:52:EC:D7:A4:F8:4E:95:D7:A3:36:B6:3B:05:AF:35:EA:26
X509v3 Authority Key Identifier:
keyid:20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:26:31:46:b9:5a:f1:ff:a1:79:0a:98:b1:05:53:3c:f1:1f:
a2:23:c6:45:a6:e6:32:dd:4d:28:bc:2c:f5:03:58:5d:f5:6e:
0c:d1:ca:e8:58:4d:da:54:df:64:92:39:b2:33:dd:47:c2:53:
8d:e5:d2:bc:f4:0e:ce:75:fd:21:2c:94:d9:3e:d1:15:94:67:
35:f4:7c:fa:ab:ca:8d:c3:a8:d4:e6:41:d0:3e:77:0b:0e:99:
b3:9c:e1:ab:7c:c6:3b:87:26:b9:bd:47:51:f3:28:02:2e:ae:
77:58:6a:ee:21:c7:c9:a4:30:93:85:0e:09:e9:93:98:80:01:
21:80:98:ee:e8:e4:e7:9d:17:76:80:40:88:df:61:33:45:94:
03:3e:62:96:1c:87:57:62:e4:47:1e:52:de:fd:e7:98:cf:79:
c7:fa:50:ca:22:6b:d1:51:f1:0e:93:22:97:35:91:d1:ec:58:
95:2d:7a:0f:34:e9:d7:52:4e:b2:d0:e1:a4:7c:a0:1f:7e:8e:
a0:37:66:32:82:ce:1d:20:00:92:d8:47:65:39:b0:50:87:c9:
c0:42:8d:c5:fe:ea:de:e7:77:99:ac:62:84:eb:b0:f3:fe:95:
1a:03:00:6e:d5:fe:b6:fb:cb:a0:23:99:9c:72:c6:63:65:04:
50:7b:41:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 12:41:46 2026 by rpki-client