Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.mft
File: 0IaqHaAvZwEYCywDQdYDB_FKLL4.mft (raw, json)
Hash identifier: o4/aIteYozGlO6p4WYy9E9dXx3ZpsRyWeOy66LjvpTI=
Subject key identifier: 68:34:1E:02:CC:92:15:D4:E2:0F:92:08:6D:B8:7F:ED:10:B7:43:18
Authority key identifier: D0:86:AA:1D:A0:2F:67:01:18:0B:2C:03:41:D6:03:07:F1:4A:2C:BE
Certificate issuer: /CN=d086aa1da02f6701180b2c0341d60307f14a2cbe
Certificate serial: 01A0404E7FA59BDBDD648F9ADCCDA61FF977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0IaqHaAvZwEYCywDQdYDB_FKLL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.mft
Manifest number: 01B9
Signing time: Wed 26 Aug 2026 23:01:20 +0000
Manifest this update: Wed 26 Aug 2026 23:01:20 +0000
Manifest next update: Thu 27 Aug 2026 23:01:20 +0000
Files and hashes: 1: 0IaqHaAvZwEYCywDQdYDB_FKLL4.crl (hash: IRGsDOjYggDNR8IjN94RpqN+pfV1TrtQ8MuQLwIeTBU=)
2: 3A95eT0-F8FWn0aRvaXeJYEs4vU.roa (hash: LYh5oBJnNPibPoXaGK/ua+lzHz0SVEi30h9T4GjLlU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0IaqHaAvZwEYCywDQdYDB_FKLL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:7f:a5:9b:db:dd:64:8f:9a:dc:cd:a6:1f:f9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d086aa1da02f6701180b2c0341d60307f14a2cbe
Validity
Not Before: Aug 26 23:01:20 2026 GMT
Not After : Aug 27 23:01:20 2026 GMT
Subject: CN=68341e02cc9215d4e20f92086db87fed10b74318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2d:32:c3:78:2f:8e:88:7e:08:c1:47:e8:0c:
e2:70:3b:f5:30:65:3e:d2:b5:36:6f:21:8f:6c:b9:
5b:80:ee:54:05:eb:1e:aa:71:de:d7:b0:42:8c:1d:
cf:85:89:3d:ec:b5:15:b2:a3:7a:e1:98:13:46:37:
f5:5c:34:3d:75:07:a8:6e:cd:c2:21:a9:8d:6e:10:
86:4a:8c:40:7c:14:9b:5c:7c:d4:7f:dd:07:d6:0c:
a9:d3:6d:74:33:8f:89:b0:4e:54:38:86:b7:60:9c:
1c:0c:4c:51:90:ff:a4:2c:c9:a4:ae:90:b2:ac:cf:
61:c5:07:13:be:8c:e2:13:a6:a9:5b:3e:ee:f2:e5:
c4:28:0f:df:f7:7d:2d:22:c8:6f:e8:22:5b:08:78:
66:89:95:4f:39:c7:e0:15:48:46:61:a5:86:c5:75:
d9:95:ea:f9:ea:d9:39:19:eb:3c:ec:65:ed:c5:d4:
9c:db:2b:9d:c9:f5:53:f1:6b:08:27:97:20:58:b6:
9c:31:f1:90:3f:57:43:0e:35:7c:04:69:eb:c8:20:
e2:03:07:e1:32:14:f1:4e:ef:ff:7c:78:cc:c6:72:
51:03:1d:46:24:af:41:bb:c8:dd:18:94:40:67:3e:
b9:33:ad:63:39:95:3b:e2:9f:4b:ec:5d:ba:f9:b8:
6b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:34:1E:02:CC:92:15:D4:E2:0F:92:08:6D:B8:7F:ED:10:B7:43:18
X509v3 Authority Key Identifier:
keyid:D0:86:AA:1D:A0:2F:67:01:18:0B:2C:03:41:D6:03:07:F1:4A:2C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0IaqHaAvZwEYCywDQdYDB_FKLL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a6:42:3f:9b:28:dd:1d:d7:ef:5c:38:4c:93:07:03:2f:2a:
ef:a3:63:48:9c:45:b8:c1:7d:5e:98:b1:6e:d9:5a:91:b0:d4:
1f:cc:75:21:25:bf:a2:e3:16:88:f2:83:f8:37:79:dd:ea:27:
89:01:f2:14:11:7c:89:a6:87:3f:0a:6d:65:b9:d4:17:e4:07:
f8:75:bb:94:4b:63:bf:d3:9c:af:88:08:ea:42:fe:69:0b:ce:
99:2e:e9:4b:65:e8:6e:07:e8:81:8c:b7:5f:77:a1:eb:21:80:
02:a6:1a:5f:1d:b7:aa:85:14:6d:58:5f:c0:e1:a5:87:0c:22:
4c:5c:75:ac:bf:d7:a0:0f:2c:d3:58:1e:52:59:be:e9:e3:de:
11:3b:14:5d:e8:49:57:15:9a:f2:43:0d:14:18:65:8f:b4:98:
50:dd:82:c1:56:ac:1b:b4:68:e1:ca:1b:12:1d:8b:ba:e0:91:
16:16:fb:a8:84:8d:fd:f5:29:25:c3:6b:ea:79:79:46:2c:a9:
00:e6:6b:3e:2d:a3:c9:ed:f4:53:7e:66:ba:55:51:57:9f:51:
2c:5d:f1:d7:38:86:56:55:fa:03:fb:88:8f:27:71:c4:fa:5e:
3c:8c:60:4b:be:e3:08:50:ad:30:54:54:f5:a3:7c:5b:21:5d:
29:29:49:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:22:26 2026 by rpki-client