Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
File: iH0wEZNRUA8lmlfi_2hQeX0bTho.mft (raw, json)
Hash identifier: VkkiFRVs73bwjp8rJZE90bBaP75GWYCe6qWtdOW5jWk=
Subject key identifier: 0F:A1:B8:28:B5:26:D3:EE:0F:1C:83:EF:55:01:99:51:AC:21:41:81
Authority key identifier: 88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
Certificate issuer: /CN=887d30119351500f259a57e2ff6850797d1b4e1a
Certificate serial: 01A131B4787867D968DF2954754B4FD23C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
Manifest number: 1AA0
Signing time: Mon 12 Oct 2026 20:01:13 +0000
Manifest this update: Mon 12 Oct 2026 20:01:13 +0000
Manifest next update: Tue 13 Oct 2026 20:01:13 +0000
Files and hashes: 1: cFtA2whI-5eSAd_xz6FflVfrfcA.roa (hash: rjwPdM8tVlnPByunwjAWM9HihlVqQjzJw824S3HbwPc=)
2: iH0wEZNRUA8lmlfi_2hQeX0bTho.crl (hash: Ec+rCJeuqxk3vxjSjJlq3+SvD1G7n+LKHsk2at49y8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 20:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:b4:78:78:67:d9:68:df:29:54:75:4b:4f:d2:3c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887d30119351500f259a57e2ff6850797d1b4e1a
Validity
Not Before: Oct 12 20:01:13 2026 GMT
Not After : Oct 13 20:01:13 2026 GMT
Subject: CN=0fa1b828b526d3ee0f1c83ef55019951ac214181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d3:bd:32:c6:4b:f6:13:72:51:3e:bf:b7:48:
ca:08:01:5a:e4:4d:c2:92:69:42:12:84:e5:e2:f2:
e5:db:51:2e:4c:ec:8c:36:0b:67:e8:08:fe:34:9f:
09:f0:97:67:d6:a1:9f:38:f8:4c:70:01:db:c9:ac:
ac:d2:aa:48:98:67:c4:e5:91:82:71:d5:a6:9c:db:
52:d2:d7:49:57:58:25:0b:33:3d:e5:5b:83:8a:b9:
39:c6:d5:88:13:9c:5d:3e:86:b1:69:cb:e0:44:bb:
90:30:f5:51:e7:e5:55:b9:44:64:ee:6c:3d:20:ef:
2b:34:45:bf:a3:f1:8a:7b:47:4c:a7:e4:15:00:d1:
72:49:35:72:b5:7d:a4:1f:21:7a:57:42:e7:7e:fa:
91:e1:1c:87:db:fc:c6:4f:12:0f:7c:da:c4:65:a2:
21:d5:ba:50:f0:11:2e:c2:b9:42:9c:ff:11:a6:eb:
cc:42:7e:d5:60:f6:f3:d3:e1:21:a8:7c:7f:cc:10:
d4:60:5c:a4:ed:0a:92:cb:6f:12:fd:d5:2a:3c:21:
3a:b0:01:fe:24:c6:c0:0c:a3:67:1d:8a:0a:ac:2f:
1c:e4:75:7b:4e:76:3d:03:f6:bb:b6:0e:6a:23:cb:
3e:9d:32:78:59:eb:32:b7:d8:de:bb:5f:21:a9:8e:
7b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A1:B8:28:B5:26:D3:EE:0F:1C:83:EF:55:01:99:51:AC:21:41:81
X509v3 Authority Key Identifier:
keyid:88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:82:4f:6c:ea:77:45:75:91:29:02:ae:83:99:a4:13:5d:7d:
35:bd:e1:4d:86:c2:27:2b:95:1e:2d:7a:9d:2f:b4:61:4c:cd:
2f:47:9e:b0:0b:cb:17:7f:35:40:6b:a9:0f:40:06:de:67:b6:
b3:df:35:0b:bd:17:d7:79:4f:2b:48:42:18:24:f6:24:a2:85:
2c:4e:49:69:2a:6d:a0:b1:3b:4d:83:48:07:ec:71:9f:25:f5:
56:62:41:d3:52:be:6f:22:6b:58:17:80:5c:9d:3e:89:68:5b:
85:27:ea:1c:4d:e2:61:b0:a3:7f:4e:d1:5f:72:1d:a1:34:16:
fc:83:4c:76:0b:ef:cb:a0:1e:0b:a6:fb:e9:a5:36:08:a1:f6:
50:80:2d:93:57:5d:f3:52:79:ff:1d:26:95:6e:b2:04:7c:d5:
ab:68:49:83:70:5a:46:ab:70:b7:48:3a:f6:8e:c1:6a:b5:85:
2d:3e:f4:01:08:5d:74:e5:bb:e4:3c:f4:91:8a:72:57:11:f8:
e0:ff:3b:fd:b0:cc:17:d8:bd:c9:c6:d4:02:c7:0f:31:14:2c:
92:61:1b:50:94:9e:aa:e9:ba:20:7c:ac:81:df:17:96:65:89:
e2:62:f3:24:9a:5b:3b:fe:5a:9f:6a:0a:00:13:3a:41:e3:46:
cd:d9:6f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:16:01 2026 by rpki-client