Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
File: iNEpp8ePtm0Hc7yZAINX5QfB574.mft (raw, json)
Hash identifier: exSkglbLtYHy0erWa6fkk8s3TdHJEgCcOcSxwfgwfnE=
Subject key identifier: 7A:90:79:84:B6:41:46:3C:07:B8:EA:40:61:A3:4D:BF:DD:E0:41:4A
Authority key identifier: 88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
Certificate issuer: /CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Certificate serial: 01A1AA4C26849B25146A91A13E76ABE6CEC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
Manifest number: 0C0E
Signing time: Thu 05 Nov 2026 06:01:19 +0000
Manifest this update: Thu 05 Nov 2026 06:01:19 +0000
Manifest next update: Fri 06 Nov 2026 06:01:19 +0000
Files and hashes: 1: WJ4tfO6kiSMSkG1grDmRdHg6U_4.roa (hash: Eb3yXv0Sg6PPztcKbZR4VGFXGGjS4jiVBjwDazfbRcs=)
2: iNEpp8ePtm0Hc7yZAINX5QfB574.crl (hash: dboSKgiZT/9e8MkerusJcbDdsr6uyySouui5GmwBfdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:4c:26:84:9b:25:14:6a:91:a1:3e:76:ab:e6:ce:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Validity
Not Before: Nov 5 06:01:19 2026 GMT
Not After : Nov 6 06:01:19 2026 GMT
Subject: CN=7a907984b641463c07b8ea4061a34dbfdde0414a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:69:5a:3b:1e:74:89:4e:ca:b7:ea:45:1b:66:
91:9f:d5:e0:10:c0:f3:cd:00:2a:0e:35:0e:93:2a:
2c:df:52:4a:36:b2:1f:de:3d:6a:ce:ba:e1:d7:62:
b3:6b:40:54:88:34:b1:b3:7b:5c:d8:69:d6:26:df:
82:fa:1b:21:c4:95:e8:ca:68:7e:7c:79:9e:1a:e5:
16:85:2a:59:da:c0:95:ea:03:59:97:a4:19:c3:3e:
1f:31:ea:08:1b:63:3c:1b:49:c1:4a:e9:63:9e:67:
c1:e0:56:4d:a1:1b:62:f2:09:37:a1:5c:93:db:33:
81:a6:65:4d:7c:45:fc:dc:26:c5:af:d2:47:31:9f:
c8:80:d3:e5:4d:6f:4f:5a:6c:19:5d:0f:9a:8a:33:
e9:1a:fd:c6:51:75:fb:50:68:58:bc:eb:bb:fc:69:
b3:0e:9a:b0:59:fb:a7:64:03:70:5c:a5:7d:11:66:
c0:56:d5:7d:c3:44:56:2e:8b:2d:70:53:02:d2:a3:
d2:a1:56:d5:d3:be:9f:3d:f0:bd:7c:4f:af:6d:15:
8c:40:cd:17:f4:43:48:c6:64:e6:eb:a9:18:ec:5f:
7b:10:72:fc:b5:b2:3a:0b:68:0a:c7:1c:18:3d:ea:
66:58:c0:08:f1:25:b4:92:f3:5a:35:99:9a:fc:6b:
22:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:90:79:84:B6:41:46:3C:07:B8:EA:40:61:A3:4D:BF:DD:E0:41:4A
X509v3 Authority Key Identifier:
keyid:88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:53:6d:94:94:60:05:9b:ad:64:e1:4d:83:da:c5:63:90:e1:
a4:b9:0a:2a:b2:5e:78:c7:b8:51:ab:67:63:cb:6d:73:98:90:
d6:ef:d7:48:c7:6d:3e:43:41:5c:e6:df:e3:71:2b:7b:e0:14:
ca:a5:e5:31:be:df:57:65:ab:34:33:a3:23:89:05:82:9d:df:
bb:21:bd:cc:94:eb:b5:38:40:38:83:21:9f:e2:35:3d:4e:e5:
eb:2f:ef:e9:45:37:27:3f:bc:b2:64:87:5d:25:94:99:bc:5f:
41:c3:b9:77:f9:c8:d3:a0:7a:cd:26:17:a6:92:ef:b1:49:10:
f6:0f:a7:b0:46:52:0f:35:c0:c9:12:fc:54:e7:2f:49:3c:bf:
9c:73:71:98:bb:12:cf:4a:18:e0:2f:70:0a:00:db:2f:ce:ae:
a7:e6:d0:49:c4:5c:66:0c:06:1a:3a:27:19:ab:89:57:84:7a:
80:36:fd:d5:b1:ba:13:64:20:ae:24:82:8f:28:4d:da:86:cf:
e6:c5:bc:7e:23:9f:88:fc:64:c5:ea:2e:ab:56:35:33:1f:5a:
12:fe:1c:29:8f:ed:7a:10:13:f9:d2:1f:38:d9:35:5e:41:f5:
a4:26:ec:29:87:7f:b8:ef:42:41:84:e0:ef:23:35:a8:53:b3:
46:c1:8a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:17:14 2026 by rpki-client