Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
File: x02iHagDioIFQrOvr76qqmZreyc.mft (raw, json)
Hash identifier: igX7iFeZ7Z7+C1NfLlqrw8Uf7+1VNJfsh/Pkwcfw+gk=
Subject key identifier: 30:56:83:70:02:E9:CB:44:23:C3:E6:6C:29:C1:98:7B:31:8A:77:FB
Authority key identifier: C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27
Certificate issuer: /CN=c74da21da8038a820542b3afafbeaaaa666b7b27
Certificate serial: 01A172B88747E6CE0CF9C872E5DAE1A0244F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
Manifest number: 1A54
Signing time: Sun 25 Oct 2026 11:00:58 +0000
Manifest this update: Sun 25 Oct 2026 11:00:58 +0000
Manifest next update: Mon 26 Oct 2026 11:00:58 +0000
Files and hashes: 1: Qd96EibuUMUl47bpcNIQg2lzdXM.roa (hash: bfpu3e5a3SbtwnPEBP2TMhw1nW2Ik4salWdsyYywAxI=)
2: x02iHagDioIFQrOvr76qqmZreyc.crl (hash: NnemjXvWqkl4M1T2FzNf7SbANdbn/qlbw8jelsbWxXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:b8:87:47:e6:ce:0c:f9:c8:72:e5:da:e1:a0:24:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74da21da8038a820542b3afafbeaaaa666b7b27
Validity
Not Before: Oct 25 11:00:58 2026 GMT
Not After : Oct 26 11:00:58 2026 GMT
Subject: CN=3056837002e9cb4423c3e66c29c1987b318a77fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:82:31:5d:22:ef:6b:ae:5d:f9:6a:be:ba:8d:
d5:c9:86:d4:9a:31:cf:c4:be:38:11:f4:79:a3:74:
c2:ee:2f:ea:a5:e3:fe:01:ce:00:3a:30:8a:43:3e:
11:c0:89:41:83:2c:3d:9e:ba:ad:0f:bc:5e:7a:33:
51:bf:ac:6a:2a:77:98:d8:a5:9c:a5:3e:24:1a:c2:
07:20:2a:30:3e:27:bd:c5:7a:29:53:05:3d:e3:b0:
88:6b:5d:29:c9:13:8e:12:8c:50:ec:06:28:a3:91:
ea:ac:2b:10:aa:16:18:88:93:ee:05:cd:92:6b:e1:
5a:7c:36:6c:b5:0d:7b:e7:80:d8:e5:a3:8b:51:dc:
88:07:77:da:b1:c8:16:65:78:bd:01:53:b5:4c:12:
1a:a4:39:a4:41:10:1c:7b:51:56:37:65:4f:e8:d8:
3e:52:70:23:a5:cb:0c:36:9b:2a:48:09:0e:f5:1e:
c1:c1:16:f6:12:6c:a6:50:9e:1b:aa:66:18:4b:c3:
79:73:13:91:2a:f7:d9:9c:61:72:ef:56:39:85:42:
c3:f1:ff:46:b1:c0:e8:34:11:1c:95:1d:1a:bf:17:
3d:ab:08:db:bd:d1:cd:6d:ec:ff:7c:b9:3d:7e:62:
99:fc:a2:28:f5:2c:65:44:56:bb:5f:e7:52:0c:69:
26:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:56:83:70:02:E9:CB:44:23:C3:E6:6C:29:C1:98:7B:31:8A:77:FB
X509v3 Authority Key Identifier:
keyid:C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d5:66:8d:6a:eb:7c:af:ea:b8:76:0b:c4:4f:2d:4c:e7:3b:
46:e6:b3:5b:79:78:7e:d7:75:74:91:2c:80:4f:9f:bd:11:1f:
9c:f5:3d:1f:94:ce:cf:71:d3:97:f4:40:fd:cf:24:c8:c6:8a:
19:91:0f:7a:a6:15:57:82:ef:58:99:7c:95:f5:f8:04:6a:0f:
30:83:4b:ac:d2:1c:a2:c2:72:2b:78:4d:35:c7:78:8d:4f:76:
16:b1:32:1b:a1:91:fc:68:71:a5:3e:5f:2c:90:2e:41:d2:b4:
fa:d1:89:09:b5:a5:e4:25:f7:a2:5d:08:70:f7:4f:a5:92:81:
fe:75:66:a2:ca:44:d6:ff:19:ca:54:73:be:64:41:99:db:25:
ea:8c:b7:db:41:6a:44:6b:aa:2b:e5:a6:c9:f5:4a:ec:9c:83:
ba:0b:0b:26:4c:4f:d5:6e:af:9a:52:fd:79:47:c1:b6:c6:d7:
80:f2:e4:d2:ee:24:10:ac:c2:64:8d:a7:e7:05:66:df:de:3a:
a3:6a:6c:b2:52:8c:cf:a0:8d:9b:6f:8e:4d:44:c7:9d:16:59:
64:d5:96:ef:7e:67:ad:8d:1e:b4:ab:05:ba:e7:ea:d1:d9:f4:
4f:ba:2d:20:3a:e7:e4:51:75:90:47:17:30:4d:f3:a3:16:45:
f1:9c:4f:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFyuIdH5s4M+chy5drhoCRPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NGRhMjFkYTgwMzhhODIwNTQyYjNhZmFmYmVhYWFhNjY2
YjdiMjcwHhcNMjYxMDI1MTEwMDU4WhcNMjYxMDI2MTEwMDU4WjAzMTEwLwYDVQQD
EygzMDU2ODM3MDAyZTljYjQ0MjNjM2U2NmMyOWMxOTg3YjMxOGE3N2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIIxXSLva65d+Wq+uo3VyYbUmjHP
xL44EfR5o3TC7i/qpeP+Ac4AOjCKQz4RwIlBgyw9nrqtD7xeejNRv6xqKneY2KWc
pT4kGsIHICowPie9xXopUwU947CIa10pyROOEoxQ7AYoo5HqrCsQqhYYiJPuBc2S
a+FafDZstQ1754DY5aOLUdyIB3fascgWZXi9AVO1TBIapDmkQRAce1FWN2VP6Ng+
UnAjpcsMNpsqSAkO9R7BwRb2EmymUJ4bqmYYS8N5cxORKvfZnGFy71Y5hULD8f9G
scDoNBEclR0avxc9qwjbvdHNbez/fLk9fmKZ/KIo9SxlRFa7X+dSDGkmywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBWg3AC6ctEI8PmbCnBmHsxinf7MB8GA1UdIwQY
MBaAFMdNoh2oA4qCBUKzr6++qqpma3snMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDAyaUhhZ0Rpb0lGUXJPdnI3NnFxbVpyZXljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Zjg0NDQtMmMzZC00NTkyLTk0NTgt
ODAxZDg5ZDczNjZkLzEveDAyaUhhZ0Rpb0lGUXJPdnI3NnFxbVpyZXljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC80Zjg0NDQtMmMzZC00NTkyLTk0NTgtODAxZDg5ZDczNjZk
LzEveDAyaUhhZ0Rpb0lGUXJPdnI3NnFxbVpyZXljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkNVmjWrr
fK/quHYLxE8tTOc7RuazW3l4ftd1dJEsgE+fvREfnPU9H5TOz3HTl/RA/c8kyMaK
GZEPeqYVV4LvWJl8lfX4BGoPMINLrNIcosJyK3hNNcd4jU92FrEyG6GR/GhxpT5f
LJAuQdK0+tGJCbWl5CX3ol0IcPdPpZKB/nVmospE1v8ZylRzvmRBmdsl6oy320Fq
RGuqK+WmyfVK7JyDugsLJkxP1W6vmlL9eUfBtsbXgPLk0u4kEKzCZI2n5wVm3946
o2psslKMz6CNm2+OTUTHnRZZZNWW735nrY0etKsFuufq0dn0T7otIDrn5FF1kEcX
ME3zoxZF8ZxPhA==
-----END CERTIFICATE-----
Generated at Sun Oct 25 18:03:47 2026 by rpki-client