Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.mft
File: 20IFnOKR1Jpmkgcxx2faVj7yESQ.mft (raw, json)
Hash identifier: /qldfG4QJy/IAlQ1iPYQXzoslTawkA1mc/58ylQg97Y=
Subject key identifier: F8:DB:AB:C1:82:C2:CF:20:5B:14:DD:14:5C:B4:B9:15:BF:53:84:DF
Authority key identifier: DB:42:05:9C:E2:91:D4:9A:66:92:07:31:C7:67:DA:56:3E:F2:11:24
Certificate issuer: /CN=db42059ce291d49a66920731c767da563ef21124
Certificate serial: 01A0016F1A911CD6D45633A3EB37FCF164D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20IFnOKR1Jpmkgcxx2faVj7yESQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.mft
Manifest number: 0CFD
Signing time: Fri 14 Aug 2026 18:00:53 +0000
Manifest this update: Fri 14 Aug 2026 18:00:53 +0000
Manifest next update: Sat 15 Aug 2026 18:00:53 +0000
Files and hashes: 1: 20IFnOKR1Jpmkgcxx2faVj7yESQ.crl (hash: g38tBuvo36k2ZsfQ9WaCzVkUhmxKKbMIKylrZknqwFA=)
2: K_G3q1oHoFkLaOnMyEVLIcn7Qmw.roa (hash: /NaxyStNTlcpIpTarZjjR+9kQ6m4FlTTRFr5N6+rcrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/20IFnOKR1Jpmkgcxx2faVj7yESQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:1a:91:1c:d6:d4:56:33:a3:eb:37:fc:f1:64:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db42059ce291d49a66920731c767da563ef21124
Validity
Not Before: Aug 14 18:00:53 2026 GMT
Not After : Aug 15 18:00:53 2026 GMT
Subject: CN=f8dbabc182c2cf205b14dd145cb4b915bf5384df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1e:e2:f3:3b:f0:42:1c:c4:b1:01:3d:fd:f5:
4e:ab:4c:c9:72:42:17:3b:5b:19:36:22:69:9c:de:
30:7a:fb:40:f2:ae:2e:da:e8:ea:ea:46:d4:7a:a2:
c2:69:3d:0a:77:d0:c4:e6:b7:18:59:53:53:cb:58:
ba:55:2c:cb:bf:74:d7:0d:38:6d:35:11:3c:69:5a:
90:4b:83:46:45:74:01:a7:18:e7:70:83:67:44:e2:
a9:82:82:c8:ce:7f:b0:b2:35:27:dd:78:a0:c6:a6:
42:eb:d1:d6:68:e3:91:40:7e:22:9c:77:28:13:af:
4c:aa:bf:f0:22:3f:4b:d0:ca:64:8a:6e:03:e3:1a:
e7:96:53:17:0f:61:59:e9:21:41:20:5b:a2:7b:f6:
04:ca:6e:77:44:84:2b:fa:bb:6a:14:67:36:9c:0e:
ec:c4:55:39:96:c6:3c:75:d7:c3:f1:76:83:71:f4:
9c:aa:58:ab:20:c9:3a:7b:34:de:e3:00:19:22:b4:
cc:f2:21:ab:93:dd:7a:ce:e7:41:bc:84:31:ce:ed:
a9:8f:1d:39:16:3f:ed:dc:32:66:df:4f:95:cd:ac:
a4:1a:9a:96:35:9e:e1:5f:17:5a:31:a2:66:48:ea:
06:20:94:5d:ed:d8:dc:73:e8:52:c2:9c:04:d2:4c:
80:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DB:AB:C1:82:C2:CF:20:5B:14:DD:14:5C:B4:B9:15:BF:53:84:DF
X509v3 Authority Key Identifier:
keyid:DB:42:05:9C:E2:91:D4:9A:66:92:07:31:C7:67:DA:56:3E:F2:11:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20IFnOKR1Jpmkgcxx2faVj7yESQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:3e:c4:cd:7b:4a:17:28:0d:1b:13:84:3f:7c:84:dc:72:89:
dc:1e:7c:a2:4e:49:e2:13:3f:df:da:97:fb:94:a0:fb:58:d7:
05:65:ea:f1:57:d0:c8:d0:a1:42:a9:72:0a:f3:28:06:ca:1b:
d0:ef:66:d7:f5:41:7b:fd:17:03:02:67:cf:86:03:39:36:b4:
1d:69:81:12:40:97:da:4b:37:08:17:fa:bc:5c:78:3b:5f:6c:
34:06:b8:86:ea:3d:bc:cf:ec:55:02:d9:bd:92:17:59:87:06:
e1:04:32:8e:9a:3a:36:f0:2d:db:24:d8:d3:16:00:f0:52:45:
3a:3c:05:fb:bc:f5:82:c6:e1:d7:d6:f6:0d:ff:d7:14:04:18:
fb:1c:00:42:f7:18:df:78:0f:b3:1f:a1:98:ec:96:43:11:2c:
2d:7a:0e:e4:14:02:1f:2d:f9:42:94:2c:6c:15:3f:82:89:23:
22:16:b2:6c:52:e3:ab:3c:c1:11:d1:d4:d1:9d:7c:54:21:cf:
f1:25:cf:52:52:e6:fa:17:16:53:a4:7f:de:af:c3:b6:28:00:
d4:89:e3:5a:aa:f5:75:bc:c9:0d:69:ba:98:d1:c0:a7:eb:9c:
ec:7c:a0:37:3f:f9:65:7a:42:bd:9f:d5:a4:53:1a:a6:73:9d:
8f:5f:89:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:30:05 2026 by rpki-client