Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.mft
File: ICg7FImXzFYQEgtMRga6cuXa758.mft (raw, json)
Hash identifier: Hx7SL4XhcAZbfsHwj+OPdFhCFFQ8ahop7uopIr8vao4=
Subject key identifier: 0F:3E:B3:7F:46:D8:69:31:33:03:A7:52:4E:57:7B:69:9D:0F:C1:E2
Authority key identifier: 20:28:3B:14:89:97:CC:56:10:12:0B:4C:46:06:BA:72:E5:DA:EF:9F
Certificate issuer: /CN=20283b148997cc5610120b4c4606ba72e5daef9f
Certificate serial: 01A03F3B2D1C32E9AF529B9A8EE045569C6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICg7FImXzFYQEgtMRga6cuXa758.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 18:00:37 +0000
Manifest this update: Wed 26 Aug 2026 18:00:37 +0000
Manifest next update: Thu 27 Aug 2026 18:00:37 +0000
Files and hashes: 1: ICg7FImXzFYQEgtMRga6cuXa758.crl (hash: dzIKw9vZl37wiHXMLfAg19XJjC55yO1uzW3GFPaQGRs=)
2: VdpeYWicryHpzAB4DZOE2_eE8mU.roa (hash: CNoqpW1D+k3FAIJqkeURjeLA7MboxVUVd4vLoWTzRRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.mft
rsync://rpki.ripe.net/repository/DEFAULT/ICg7FImXzFYQEgtMRga6cuXa758.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3b:2d:1c:32:e9:af:52:9b:9a:8e:e0:45:56:9c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20283b148997cc5610120b4c4606ba72e5daef9f
Validity
Not Before: Aug 26 18:00:37 2026 GMT
Not After : Aug 27 18:00:37 2026 GMT
Subject: CN=0f3eb37f46d869313303a7524e577b699d0fc1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:83:86:5e:64:75:2e:f4:26:38:ce:60:18:85:
b5:60:4e:0a:c1:17:49:c0:ff:c2:47:72:3d:5c:b6:
92:4e:ab:a9:e7:5d:49:cc:b4:64:1c:7c:c4:7e:49:
82:88:87:43:2c:61:05:e7:be:d1:df:33:29:01:58:
8d:83:49:0d:83:26:bb:1c:e9:8b:42:36:08:d8:bc:
63:51:ba:83:81:43:1b:63:ce:dc:48:df:1e:98:b2:
92:97:72:29:a2:c6:ad:bc:f9:8e:66:2b:ba:55:b0:
51:7f:bc:56:a0:71:97:a4:d8:d9:cb:48:af:01:c9:
6c:2e:9d:7f:f3:6e:10:08:db:98:8b:cd:d4:6f:15:
af:67:b6:95:c6:14:2a:67:61:20:ae:d5:e5:8b:68:
5e:ab:d3:ec:fc:64:85:9f:4a:b8:72:a0:75:98:0e:
a0:76:09:dd:cc:61:c6:c5:28:1a:2a:ee:58:11:f8:
9f:bd:ce:57:e8:60:ec:26:cb:b3:db:1c:a8:4b:3f:
17:26:6c:f4:27:58:dc:c2:e6:c6:fb:99:e9:89:25:
a2:df:90:9c:c3:62:41:f0:4b:11:bd:c3:66:25:5f:
f3:ab:b9:7a:3a:8d:4b:25:9b:dd:ad:dd:da:18:f6:
34:83:83:88:9a:c9:33:4a:64:25:fe:37:3c:72:50:
58:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3E:B3:7F:46:D8:69:31:33:03:A7:52:4E:57:7B:69:9D:0F:C1:E2
X509v3 Authority Key Identifier:
keyid:20:28:3B:14:89:97:CC:56:10:12:0B:4C:46:06:BA:72:E5:DA:EF:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICg7FImXzFYQEgtMRga6cuXa758.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:58:55:e6:2d:87:98:c4:8c:77:a8:27:82:0c:87:4f:88:e7:
3c:dd:37:b8:41:ea:2e:cf:19:2c:e5:e7:e0:48:f8:8a:4c:ae:
c7:f6:26:70:5b:79:68:5b:47:6d:9d:a3:2f:3c:5c:6a:d9:bb:
46:1c:2f:7e:ed:d3:c1:4a:8f:cc:b4:a8:ff:36:aa:df:ce:24:
4c:40:8d:26:21:e3:42:4a:bb:50:53:9c:f8:ba:b9:b2:36:b3:
71:b6:3a:7f:db:d8:ae:b9:ba:e1:1e:6f:c8:6f:47:4b:15:d9:
b2:46:e4:67:e4:fa:82:93:3c:57:04:ff:73:2c:51:1b:fd:e4:
f3:5f:9a:3c:6f:33:bf:64:04:1a:ef:67:bb:8a:f5:83:5c:60:
0a:b4:6b:a9:0f:0b:c7:37:9d:ef:fc:41:74:bc:63:4e:c8:9f:
c1:f8:a3:dc:41:fc:7a:7f:e5:a2:85:c1:fd:3b:57:34:56:21:
a3:cd:1a:34:0e:88:67:51:2c:2a:f0:18:d9:b6:23:aa:5e:eb:
fb:fe:e9:c2:18:17:82:e4:23:6d:13:28:98:af:54:23:c9:02:
0c:e2:04:be:72:d2:ba:03:7e:46:e8:3f:d6:1f:80:39:81:3d:
c2:9a:3f:fa:1a:dd:b9:4b:a9:c3:26:62:c4:20:2c:b0:4c:c2:
45:4c:a5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 00:02:10 2026 by rpki-client