Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.mft
File: ICg7FImXzFYQEgtMRga6cuXa758.mft (raw, json)
Hash identifier: JPyVgd3nY4NNSLR/TkGaRWTugOdP0UfNvo6bjyJuasU=
Subject key identifier: 31:4E:D5:B3:B5:C1:D2:06:3C:E7:1D:B1:AE:7F:DE:ED:94:CB:C4:C4
Authority key identifier: 20:28:3B:14:89:97:CC:56:10:12:0B:4C:46:06:BA:72:E5:DA:EF:9F
Certificate issuer: /CN=20283b148997cc5610120b4c4606ba72e5daef9f
Certificate serial: 01A17438DB6DAA9A8E546DAF128C67FAD600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICg7FImXzFYQEgtMRga6cuXa758.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.mft
Manifest number: 013A
Signing time: Sun 25 Oct 2026 18:00:45 +0000
Manifest this update: Sun 25 Oct 2026 18:00:45 +0000
Manifest next update: Mon 26 Oct 2026 18:00:45 +0000
Files and hashes: 1: ICg7FImXzFYQEgtMRga6cuXa758.crl (hash: i7m4tm8Cn4fHG3WDOZB+31XN0nKTqoMC5WE/UxYayno=)
2: VdpeYWicryHpzAB4DZOE2_eE8mU.roa (hash: CNoqpW1D+k3FAIJqkeURjeLA7MboxVUVd4vLoWTzRRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.mft
rsync://rpki.ripe.net/repository/DEFAULT/ICg7FImXzFYQEgtMRga6cuXa758.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:38:db:6d:aa:9a:8e:54:6d:af:12:8c:67:fa:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20283b148997cc5610120b4c4606ba72e5daef9f
Validity
Not Before: Oct 25 18:00:45 2026 GMT
Not After : Oct 26 18:00:45 2026 GMT
Subject: CN=314ed5b3b5c1d2063ce71db1ae7fdeed94cbc4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:05:4f:1c:a5:6a:52:f8:af:5f:4e:03:92:67:
72:37:ef:56:6c:b5:14:8d:f1:48:71:5f:bf:84:82:
5d:86:42:af:c6:03:f6:5a:94:6b:eb:26:7c:68:fd:
d1:14:d5:f7:ae:cb:6d:50:d3:33:de:2e:b1:a1:00:
04:45:83:12:d9:f5:61:6a:7c:fd:c8:79:6f:03:60:
9d:24:3c:f6:5b:a5:d5:24:1b:42:c0:43:75:7c:0d:
d1:91:1d:7c:fd:5c:16:de:f4:de:09:d0:e2:d5:5a:
92:21:50:1b:46:e5:bb:ac:40:a9:59:ba:b7:72:ed:
8c:57:ca:c9:47:bd:9f:49:e9:6d:99:de:49:92:cb:
c5:6e:60:a2:be:ff:af:ce:5d:fc:aa:8e:da:5f:25:
c2:9f:57:e4:87:45:1d:e1:63:e5:16:90:c0:e4:6c:
87:f0:4a:73:9f:3d:65:c9:b0:53:17:85:d3:cf:60:
27:fb:6d:bb:51:89:a7:3c:7a:e4:b7:95:c4:ac:00:
7a:c1:e0:58:69:85:46:fd:b7:35:50:d2:c1:d9:f3:
4c:11:fc:8b:37:95:af:a0:ad:e4:21:fe:f5:21:6d:
4b:4d:54:6d:b4:f3:1f:fa:18:87:8d:fb:7d:cc:52:
6a:fe:d1:27:9b:e3:0a:e9:bd:5f:bf:33:2c:c4:84:
18:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4E:D5:B3:B5:C1:D2:06:3C:E7:1D:B1:AE:7F:DE:ED:94:CB:C4:C4
X509v3 Authority Key Identifier:
keyid:20:28:3B:14:89:97:CC:56:10:12:0B:4C:46:06:BA:72:E5:DA:EF:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICg7FImXzFYQEgtMRga6cuXa758.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:71:40:56:de:ef:6c:8e:b7:b5:37:4e:67:e9:6f:e2:57:65:
01:65:e2:c6:6b:16:c3:c7:4e:7b:cd:9e:c9:d7:fb:78:8b:70:
6b:c5:f3:91:fc:f3:cf:9d:07:e2:64:ea:25:67:78:72:1a:f0:
27:a4:49:f5:ea:a6:62:7f:23:52:8f:a1:8d:22:4e:ec:5d:5c:
54:1d:89:f8:18:5b:b7:cd:7c:65:a8:38:60:f9:cc:86:e0:a3:
1e:71:5e:95:9c:93:60:97:99:99:a4:59:6a:45:31:8d:0a:11:
b8:9f:c2:26:1a:3a:7c:96:8d:b6:9e:bb:78:7a:51:af:a1:99:
65:c4:23:98:7f:e2:1b:bc:08:b4:3e:9c:fa:25:f6:9f:11:f6:
98:1e:b1:1c:30:25:a6:0a:4e:a5:7d:4c:81:cb:d8:0a:72:3d:
45:8f:08:fa:cb:1c:39:26:87:74:45:f7:21:5c:82:d7:ee:3f:
73:f5:6d:c6:33:9b:d6:ec:f7:e0:66:a9:92:31:c8:77:1a:a0:
c0:76:d5:bd:78:27:34:19:66:e7:b4:a8:88:37:36:82:cb:3c:
ad:ea:25:0c:a1:7d:c8:8c:6f:c7:b1:77:dd:5f:a8:20:28:1f:
f6:2c:ef:6c:2d:a5:b0:b2:94:bb:d5:c2:61:fb:3e:1c:d6:2d:
a9:63:6c:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF0ONttqpqOVG2vEoxn+tYAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMjgzYjE0ODk5N2NjNTYxMDEyMGI0YzQ2MDZiYTcyZTVk
YWVmOWYwHhcNMjYxMDI1MTgwMDQ1WhcNMjYxMDI2MTgwMDQ1WjAzMTEwLwYDVQQD
EygzMTRlZDViM2I1YzFkMjA2M2NlNzFkYjFhZTdmZGVlZDk0Y2JjNGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAVPHKVqUvivX04DkmdyN+9WbLUU
jfFIcV+/hIJdhkKvxgP2WpRr6yZ8aP3RFNX3rsttUNMz3i6xoQAERYMS2fVhanz9
yHlvA2CdJDz2W6XVJBtCwEN1fA3RkR18/VwW3vTeCdDi1VqSIVAbRuW7rECpWbq3
cu2MV8rJR72fSeltmd5JksvFbmCivv+vzl38qo7aXyXCn1fkh0Ud4WPlFpDA5GyH
8Epznz1lybBTF4XTz2An+227UYmnPHrkt5XErAB6weBYaYVG/bc1UNLB2fNMEfyL
N5WvoK3kIf71IW1LTVRttPMf+hiHjft9zFJq/tEnm+MK6b1fvzMsxIQYDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFO1bO1wdIGPOcdsa5/3u2Uy8TEMB8GA1UdIwQY
MBaAFCAoOxSJl8xWEBILTEYGunLl2u+fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUNnN0ZJbVh6RllRRWd0TVJnYTZjdVhhNzU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9hYTI3MGEtYzA4OS00Nzc4LTkzNDMt
YjczNjJlZGJkOGFjLzEvSUNnN0ZJbVh6RllRRWd0TVJnYTZjdVhhNzU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9hYTI3MGEtYzA4OS00Nzc4LTkzNDMtYjczNjJlZGJkOGFj
LzEvSUNnN0ZJbVh6RllRRWd0TVJnYTZjdVhhNzU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXFAVt7v
bI63tTdOZ+lv4ldlAWXixmsWw8dOe82eydf7eItwa8Xzkfzzz50H4mTqJWd4chrw
J6RJ9eqmYn8jUo+hjSJO7F1cVB2J+Bhbt818Zag4YPnMhuCjHnFelZyTYJeZmaRZ
akUxjQoRuJ/CJho6fJaNtp67eHpRr6GZZcQjmH/iG7wItD6c+iX2nxH2mB6xHDAl
pgpOpX1MgcvYCnI9RY8I+sscOSaHdEX3IVyC1+4/c/VtxjOb1uz34GapkjHIdxqg
wHbVvXgnNBlm57SoiDc2gss8reolDKF9yIxvx7F33V+oICgf9izvbC2lsLKUu9XC
Yfs+HNYtqWNswQ==
-----END CERTIFICATE-----
Generated at Sun Oct 25 20:07:43 2026 by rpki-client