Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
File: iNEpp8ePtm0Hc7yZAINX5QfB574.mft (raw, json)
Hash identifier: qGXMp9teGU1XKXo+9EMck22iWpLe7CWi2eTjh1qygA0=
Subject key identifier: B1:A4:AC:6C:73:F0:D4:4E:9B:90:D2:61:26:58:DE:D8:88:78:7A:12
Authority key identifier: 88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
Certificate issuer: /CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Certificate serial: 01A0AF3E7FFFCAA74B101507BB3BE54A1E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
Manifest number: 0B8C
Signing time: Thu 17 Sep 2026 12:01:43 +0000
Manifest this update: Thu 17 Sep 2026 12:01:43 +0000
Manifest next update: Fri 18 Sep 2026 12:01:43 +0000
Files and hashes: 1: WJ4tfO6kiSMSkG1grDmRdHg6U_4.roa (hash: Eb3yXv0Sg6PPztcKbZR4VGFXGGjS4jiVBjwDazfbRcs=)
2: iNEpp8ePtm0Hc7yZAINX5QfB574.crl (hash: eQsWuX/98jcnD2uWs49ER9QPB2FQxdcle/1odfaGDvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:3e:7f:ff:ca:a7:4b:10:15:07:bb:3b:e5:4a:1e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Validity
Not Before: Sep 17 12:01:43 2026 GMT
Not After : Sep 18 12:01:43 2026 GMT
Subject: CN=b1a4ac6c73f0d44e9b90d2612658ded888787a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f1:7a:9b:6b:f1:4c:92:38:c0:61:0c:3a:03:
12:a4:ab:a7:76:16:1a:16:86:66:35:7a:8b:13:40:
53:61:7d:10:0f:22:39:82:97:d9:4c:ef:fd:09:1a:
4c:42:bf:0a:fa:3f:35:5d:66:ff:4a:34:29:e1:a0:
c3:3c:3b:a1:0c:3f:c9:bc:49:b6:18:03:0d:2d:cd:
c9:00:71:cf:e6:78:6e:19:fd:38:57:91:e0:d7:fa:
10:ee:fa:b0:bd:31:dc:a3:a6:14:3c:3f:11:a4:1c:
92:74:85:40:7f:52:35:39:a2:9b:5a:d3:d9:d0:c1:
ec:35:93:58:e0:14:db:cd:49:73:46:b3:ba:9d:a1:
23:44:b8:95:f2:8d:bf:26:45:36:d3:8d:16:5f:7e:
59:1a:9a:f1:67:e6:67:01:b5:9e:27:65:51:53:4d:
0e:f6:a4:53:41:d4:93:9c:f5:99:c6:4f:b9:57:0f:
92:2c:8d:1f:6f:d2:9b:a3:cb:7d:bb:7e:0c:f9:22:
4b:5b:b9:1c:a9:ee:06:5c:4c:b5:c3:c3:4b:06:3e:
de:26:2e:c0:0d:6d:5f:b7:c6:21:70:aa:c7:36:53:
e2:8a:e0:f1:48:a4:54:f3:77:b5:aa:07:6d:f7:74:
a0:62:7e:49:9c:d6:51:c8:02:79:fa:8e:a1:4c:a1:
a0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A4:AC:6C:73:F0:D4:4E:9B:90:D2:61:26:58:DE:D8:88:78:7A:12
X509v3 Authority Key Identifier:
keyid:88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7a:cb:4b:09:3e:fb:69:dd:72:59:e5:0e:55:04:10:9a:fa:
d6:f3:6a:24:6c:50:7e:a9:1a:0a:5d:62:93:3a:86:51:dc:cb:
fa:b1:05:3f:cc:6b:9c:d5:8c:b8:a3:b1:ed:77:5e:d9:32:85:
70:61:47:9e:5c:d8:86:54:84:7a:a2:63:18:15:c9:b3:4c:2f:
90:d1:1b:f4:27:22:78:a6:7d:6f:39:17:65:87:ac:71:19:f4:
c6:8c:bf:8c:5e:29:70:1d:08:58:aa:8d:08:0c:f7:eb:1d:e7:
f5:cf:d9:48:a6:09:e3:10:14:eb:30:f8:a8:1c:d8:ec:c1:12:
39:ea:9c:a0:6c:d0:c4:04:3e:1e:a7:e2:90:d6:c4:32:69:0f:
fd:9f:d8:db:5c:65:eb:38:c6:d3:76:bd:95:6f:6c:03:6c:9f:
4d:8d:38:85:7a:64:99:fd:8c:05:f2:56:cc:20:17:12:fd:82:
d1:2b:f0:54:d1:67:93:d2:e6:7c:28:24:43:57:03:dd:27:b6:
8f:a1:92:00:f0:b5:9b:87:f4:44:d0:8f:93:a0:19:2e:66:93:
66:eb:26:84:f5:49:b7:f9:81:0f:66:b0:e7:54:06:e4:83:09:
bd:3e:62:b2:21:10:0d:68:28:1e:11:6e:bf:80:99:0b:83:3c:
08:65:dc:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCvPn//yqdLEBUHuzvlSh4xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZDEyOWE3Yzc4ZmI2NmQwNzczYmM5OTAwODM1N2U1MDdj
MWU3YmUwHhcNMjYwOTE3MTIwMTQzWhcNMjYwOTE4MTIwMTQzWjAzMTEwLwYDVQQD
EyhiMWE0YWM2YzczZjBkNDRlOWI5MGQyNjEyNjU4ZGVkODg4Nzg3YTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfF6m2vxTJI4wGEMOgMSpKundhYa
FoZmNXqLE0BTYX0QDyI5gpfZTO/9CRpMQr8K+j81XWb/SjQp4aDDPDuhDD/JvEm2
GAMNLc3JAHHP5nhuGf04V5Hg1/oQ7vqwvTHco6YUPD8RpBySdIVAf1I1OaKbWtPZ
0MHsNZNY4BTbzUlzRrO6naEjRLiV8o2/JkU2040WX35ZGprxZ+ZnAbWeJ2VRU00O
9qRTQdSTnPWZxk+5Vw+SLI0fb9Kbo8t9u34M+SJLW7kcqe4GXEy1w8NLBj7eJi7A
DW1ft8YhcKrHNlPiiuDxSKRU83e1qgdt93SgYn5JnNZRyAJ5+o6hTKGgzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGkrGxz8NROm5DSYSZY3tiIeHoSMB8GA1UdIwQY
MBaAFIjRKafHj7ZtB3O8mQCDV+UHwee+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU5FcHA4ZVB0bTBIYzd5WkFJTlg1UWZCNTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kODZmYzQtMTc1Zi00MjNkLTk4NGUt
ODU5ZjdmYWNlNjk1LzEvaU5FcHA4ZVB0bTBIYzd5WkFJTlg1UWZCNTc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9kODZmYzQtMTc1Zi00MjNkLTk4NGUtODU5ZjdmYWNlNjk1
LzEvaU5FcHA4ZVB0bTBIYzd5WkFJTlg1UWZCNTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFXrLSwk+
+2ndclnlDlUEEJr61vNqJGxQfqkaCl1ikzqGUdzL+rEFP8xrnNWMuKOx7Xde2TKF
cGFHnlzYhlSEeqJjGBXJs0wvkNEb9CcieKZ9bzkXZYescRn0xoy/jF4pcB0IWKqN
CAz36x3n9c/ZSKYJ4xAU6zD4qBzY7MESOeqcoGzQxAQ+HqfikNbEMmkP/Z/Y21xl
6zjG03a9lW9sA2yfTY04hXpkmf2MBfJWzCAXEv2C0SvwVNFnk9LmfCgkQ1cD3Se2
j6GSAPC1m4f0RNCPk6AZLmaTZusmhPVJt/mBD2aw51QG5IMJvT5isiEQDWgoHhFu
v4CZC4M8CGXcjQ==
-----END CERTIFICATE-----
Generated at Thu Sep 17 13:56:12 2026 by rpki-client