Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.mft
File: I1OA88jQvU73nc_B8qNk738QDTE.mft (raw, json)
Hash identifier: jbrOrd3zn4zo/wsmSmxheed2CjtwQNushTKah+pnA4Y=
Subject key identifier: 10:0E:D1:53:72:1F:1A:AB:A9:CE:8F:46:53:90:FB:0E:37:10:A0:19
Authority key identifier: 23:53:80:F3:C8:D0:BD:4E:F7:9D:CF:C1:F2:A3:64:EF:7F:10:0D:31
Certificate issuer: /CN=235380f3c8d0bd4ef79dcfc1f2a364ef7f100d31
Certificate serial: 01A0205606E82E4E5A873D511F02E48F4B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1OA88jQvU73nc_B8qNk738QDTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.mft
Manifest number: 8A
Signing time: Thu 20 Aug 2026 18:01:43 +0000
Manifest this update: Thu 20 Aug 2026 18:01:43 +0000
Manifest next update: Fri 21 Aug 2026 18:01:43 +0000
Files and hashes: 1: 2nvjaO-9QgHUIDo_0O1ylwBW6vQ.roa (hash: oiGKpPGm6qpApMCxU6UFVXeU7Do4Gkz7nDJJxifitKA=)
2: I1OA88jQvU73nc_B8qNk738QDTE.crl (hash: dvjxTOpTyGKsztIJmJsqkGu6jzav74ghCL2EaHiNOoc=)
3: L3EC22kCSbgO1zCyaBa1frjR2pE.roa (hash: w8QsFoIi60jEHJ7Xofqwu1zr9PxRQqzEho5zefrGjYg=)
4: pxlXr9sUSjIqFgXbd9sR-GcE580.roa (hash: QivBnRPkhkpLbexDZpsfTuH4eBEzkCeooTxQJXFlmDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I1OA88jQvU73nc_B8qNk738QDTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:56:06:e8:2e:4e:5a:87:3d:51:1f:02:e4:8f:4b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=235380f3c8d0bd4ef79dcfc1f2a364ef7f100d31
Validity
Not Before: Aug 20 18:01:43 2026 GMT
Not After : Aug 21 18:01:43 2026 GMT
Subject: CN=100ed153721f1aaba9ce8f465390fb0e3710a019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:8d:c4:91:f6:c7:b1:7a:ce:37:38:38:09:
68:c3:3d:3d:f2:4a:6c:35:aa:01:37:f6:8e:6f:c4:
cf:56:a7:ff:b7:a7:ca:bd:fb:54:d1:6b:75:f0:47:
b9:93:d1:7f:05:75:68:99:18:b6:bc:e9:26:fb:dc:
bc:c4:2a:41:d6:22:5d:51:7f:ce:cb:99:e0:6e:fb:
2e:f0:ff:01:f7:57:76:0b:23:6f:97:ba:70:d3:cf:
e0:54:9d:ca:18:0c:b5:ad:37:14:8b:b8:c7:1a:a5:
1f:cb:cc:72:41:88:7d:01:2e:8e:ae:23:92:47:a5:
37:d5:cb:5b:f7:c3:1c:b3:9f:96:06:0d:4c:d0:25:
08:43:23:92:83:1f:33:a1:75:3b:f3:e4:87:29:26:
c6:ef:79:d5:13:b8:cb:9c:5e:1a:b2:c5:45:30:68:
ea:96:77:ea:c2:83:f1:0a:10:c9:b2:5b:4d:36:db:
ff:2e:a4:5f:c2:c8:bf:6d:75:c7:bf:1a:5a:c8:e7:
0d:d8:3f:d2:ef:af:fe:85:7c:27:79:8f:09:70:32:
01:c7:78:c5:a5:80:df:b6:b9:6e:c3:82:89:b2:2d:
09:5d:38:5d:6a:92:86:ff:82:64:af:e3:eb:06:28:
d5:ea:34:7c:7f:8d:1e:36:4f:c8:3c:7f:93:b0:6c:
69:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0E:D1:53:72:1F:1A:AB:A9:CE:8F:46:53:90:FB:0E:37:10:A0:19
X509v3 Authority Key Identifier:
keyid:23:53:80:F3:C8:D0:BD:4E:F7:9D:CF:C1:F2:A3:64:EF:7F:10:0D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1OA88jQvU73nc_B8qNk738QDTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:20:7c:04:71:7c:1c:ef:fc:45:91:79:ec:a5:1c:3c:60:29:
be:3c:2b:72:31:5e:7e:cb:87:b1:22:2e:e9:be:94:e7:65:7e:
ec:f2:73:f1:99:b0:05:ae:b8:c7:c4:e6:53:c2:6b:a0:c4:2c:
23:03:15:f6:83:6b:53:df:65:0f:6d:95:d3:44:f9:ba:0d:25:
eb:dd:d8:13:b0:e0:cd:5d:24:14:c1:f2:64:14:6a:34:f1:84:
56:ac:c7:39:e0:45:3a:b4:88:fd:56:41:b3:64:cf:fd:71:df:
0d:c1:32:96:1c:be:57:ad:7a:c7:2b:c5:c7:ee:40:14:a6:2e:
75:8f:70:09:95:6c:c7:f9:41:04:aa:17:2d:0b:de:60:1c:3c:
9e:bd:84:3b:66:ac:1a:5e:f8:d2:c3:46:2f:f9:b7:57:a9:ec:
35:37:8b:a0:df:97:66:e5:5a:fc:32:09:8c:61:75:b6:f5:0e:
16:67:22:c2:f6:5e:d1:c6:a9:c8:3e:51:3a:d5:f1:52:d3:9c:
e5:68:8e:06:c6:36:21:d7:3f:71:17:49:e3:d7:79:4c:eb:59:
e0:ff:70:07:fc:8b:ef:b4:c3:1d:2b:f4:5d:07:b4:1d:0d:8e:
1d:ef:a8:97:23:58:83:b8:84:4b:24:b7:3e:b4:24:2f:db:ae:
46:48:49:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:56:36 2026 by rpki-client