Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
File: IcOUybOja2n57l-JNqL1G5XqzrQ.mft (raw, json)
Hash identifier: 3YVwULi8dcaJFmp9CMGc8ILmXGx8UFzQ0OL4nU4LsQc=
Subject key identifier: A3:D8:66:73:F2:8A:09:F8:09:07:9C:11:48:DA:44:AA:26:91:8D:2A
Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Certificate serial: 01A06E70FF5D693EC87BA855ACE55B84A6E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
Manifest number: 1A3E
Signing time: Fri 04 Sep 2026 22:01:34 +0000
Manifest this update: Fri 04 Sep 2026 22:01:34 +0000
Manifest next update: Sat 05 Sep 2026 22:01:34 +0000
Files and hashes: 1: 2vB0H2qYyz6SI0m9_Uc6vD9cNDE.roa (hash: nA5TN8D8VR57ajti92sbOf79Vloshs+N1jBn946xsJk=)
2: IcOUybOja2n57l-JNqL1G5XqzrQ.crl (hash: X349T6Qksd2v9kljNyq9zbt9Ju0eLYdFdi3PcRuTUwg=)
3: O_6FFbhc4JZemzwdUopF30jTO70.roa (hash: YpXPwTYN0lUePsEcimr/XTryk56n06KBrcCoSPFO4DM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:ff:5d:69:3e:c8:7b:a8:55:ac:e5:5b:84:a6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Validity
Not Before: Sep 4 22:01:34 2026 GMT
Not After : Sep 5 22:01:34 2026 GMT
Subject: CN=a3d86673f28a09f809079c1148da44aa26918d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:df:c1:a9:60:c4:5f:ab:5c:8a:70:9c:dd:49:
29:33:2a:19:cd:ce:7f:71:90:c1:37:4b:90:0b:54:
f9:df:95:31:a4:d9:6a:c6:d3:f6:d2:93:b9:e2:0b:
e2:bf:33:4d:dd:2d:62:fc:b2:27:4e:36:ed:d2:03:
81:2d:e4:04:b1:47:bf:68:56:7f:5a:82:c1:78:49:
4d:f2:0f:a8:ad:a9:3b:1a:59:36:8b:f7:f1:ff:45:
19:38:c9:01:be:27:3e:4a:c7:a9:e1:95:4c:f3:70:
12:cc:7f:16:df:57:c9:41:03:b4:91:be:cd:52:24:
46:8c:90:33:55:1b:e4:af:71:95:4d:43:4d:4d:b1:
c1:47:c0:00:45:96:05:ca:cd:b4:b3:2f:e6:0e:81:
4c:93:3e:72:8d:2d:0f:96:33:9f:7d:ff:c1:06:69:
65:c7:68:32:e6:a0:0d:53:a6:e7:0a:43:33:19:c9:
21:04:f5:f0:41:79:6f:ae:7f:69:1d:e6:5c:fa:87:
15:63:79:04:fb:45:aa:26:b9:19:be:7e:42:20:58:
dd:1d:7d:bf:48:8c:a8:56:e2:60:ea:cb:98:c4:82:
40:92:b9:84:fb:65:d7:55:d9:9e:a3:a6:5b:09:aa:
b3:9d:d8:f3:00:73:08:63:cf:93:f0:b2:48:f6:c3:
0e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D8:66:73:F2:8A:09:F8:09:07:9C:11:48:DA:44:AA:26:91:8D:2A
X509v3 Authority Key Identifier:
keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:51:41:38:aa:5b:e8:26:38:66:1e:dc:11:22:86:ff:ae:98:
59:c8:40:61:66:60:b9:41:bc:7e:5f:86:41:34:02:14:63:26:
74:20:38:3e:11:a7:db:45:29:75:78:07:33:2c:c2:34:33:bf:
4f:a6:60:d9:71:f1:9d:37:b3:89:c2:36:76:14:ce:9f:95:8d:
b5:e5:24:d2:2c:42:56:b6:9d:34:67:2d:55:1d:86:b5:78:96:
fb:f9:01:80:68:66:38:28:e6:56:67:cf:11:95:b1:c3:41:29:
11:6a:94:d6:d2:32:1e:95:54:81:33:3b:13:ab:e7:14:9b:7d:
8b:d9:2e:fd:fc:fd:b6:9e:d0:a2:eb:f0:70:b5:86:7b:5f:77:
8d:c9:a1:7b:f6:2f:bb:d2:f4:74:f1:5e:d7:57:9f:86:e8:b1:
b3:db:98:9e:d9:45:5b:88:aa:41:b4:cf:b4:fa:b0:89:5a:a2:
ea:24:be:54:46:cd:95:be:1a:4a:75:37:b3:13:3a:29:37:ec:
a1:2a:07:d3:ab:67:4e:e4:88:78:00:c4:11:2f:d8:75:53:cc:
50:3e:fa:ab:22:e8:e4:6a:77:fd:cd:e0:b7:e4:92:2b:37:c0:
cb:00:c1:5d:b5:35:fa:b3:92:2b:92:2f:bc:02:0d:58:2f:32:
80:2b:6b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:45:56 2026 by rpki-client