Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
File: IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft (raw, json)
Hash identifier: P6FVg4os8dyrdOZQ9TA+xuPHZmnEa+2MigF0r84WaLg=
Subject key identifier: 63:50:FF:BE:DA:A3:FD:12:8D:E1:A0:07:7E:85:D9:DB:18:C4:23:8C
Authority key identifier: 20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B
Certificate issuer: /CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b
Certificate serial: 01A17ADF86D924B0B2CDC1635D1B19A4477C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
Manifest number: 1AC3
Signing time: Tue 27 Oct 2026 01:00:31 +0000
Manifest this update: Tue 27 Oct 2026 01:00:31 +0000
Manifest next update: Wed 28 Oct 2026 01:00:31 +0000
Files and hashes: 1: IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl (hash: cBeoVlH9632Jf9M7mFifd9VJzXprYsCl0TUr7hzE0X4=)
2: vlgEFLVkNwRtCEx7sTNLVkmYtlg.roa (hash: +zusmP86eI1NBAkkNvI1Gm9fd+tKP132pkvvT3BYBhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:df:86:d9:24:b0:b2:cd:c1:63:5d:1b:19:a4:47:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b
Validity
Not Before: Oct 27 01:00:31 2026 GMT
Not After : Oct 28 01:00:31 2026 GMT
Subject: CN=6350ffbedaa3fd128de1a0077e85d9db18c4238c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f3:77:70:7a:45:4c:7f:de:df:d9:1b:ac:ca:
4d:76:20:45:18:ea:f2:b8:74:fc:96:14:b3:a3:b7:
b0:8f:18:2e:8a:a8:76:2a:b6:08:f9:91:f3:bb:45:
09:c3:7a:88:64:99:86:9d:bd:15:4e:ec:1d:58:4a:
42:a5:ab:2a:c1:a8:d1:ab:6a:dc:d8:d8:37:b7:00:
a2:9d:c0:87:a7:4a:c4:14:f6:49:2b:1e:7a:42:fb:
6e:af:b9:5b:d4:b0:76:10:f6:7a:2a:7d:ae:3e:b0:
a6:66:bb:30:06:9a:52:3b:17:23:e0:eb:57:4e:ae:
be:54:f6:04:3f:b9:a4:4e:fd:f9:4b:fe:79:f4:b8:
b7:58:9f:f1:b2:2c:d8:90:88:32:c5:d5:b8:cb:45:
2b:56:c7:48:cf:ed:3a:c7:2c:38:84:52:45:dc:24:
5f:e1:c0:5d:41:99:d6:58:6a:cd:d0:a4:ac:92:d1:
ff:2f:c8:00:3f:0d:7d:2b:71:03:a3:de:0b:dd:4a:
b8:e8:28:ec:26:f9:f0:a7:45:30:34:a1:92:d8:25:
78:41:aa:90:f0:83:9f:21:40:97:d0:95:78:f8:5d:
b8:22:b4:4b:64:68:e5:9e:75:10:13:bd:21:9d:48:
a9:cf:4d:cc:7f:9a:c5:65:07:ed:89:84:1a:2e:bb:
a3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:50:FF:BE:DA:A3:FD:12:8D:E1:A0:07:7E:85:D9:DB:18:C4:23:8C
X509v3 Authority Key Identifier:
keyid:20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b3:0c:8c:00:fd:1d:4e:85:28:cc:7c:4a:62:8d:dd:2b:66:
d4:4b:3b:a4:d6:93:9c:a2:2c:94:e7:dc:32:f7:33:83:61:3e:
e1:41:7a:16:1d:90:12:9d:4a:f0:b4:07:b7:3f:4a:ff:9a:b6:
2c:aa:e2:a5:86:e7:ec:53:d0:8a:6d:b0:1b:56:54:da:fd:e7:
89:39:83:8d:a5:19:27:62:8f:38:4b:54:f4:8d:6e:b7:8b:29:
a5:bc:10:fe:69:a1:d1:12:c5:54:3b:bc:25:72:5d:b9:1d:65:
98:9c:64:1f:e3:1c:97:d4:33:bb:35:0f:c6:80:c0:bc:42:c6:
60:29:08:98:98:ef:6f:99:72:8d:97:2f:6b:3d:b0:25:62:be:
af:f5:55:48:ba:26:08:2e:c4:91:e3:d8:4a:2c:40:3c:dd:cc:
19:43:95:23:08:16:aa:1f:0c:41:7d:1a:40:94:da:8e:71:19:
98:15:6a:36:f4:25:aa:20:0d:1b:50:07:9e:ec:1e:34:b0:34:
d8:d2:6d:34:9b:06:d9:84:70:a4:4c:1e:2e:52:fe:6d:4c:87:
de:49:48:22:6c:93:28:bc:44:8d:56:f5:0a:d3:d9:89:c3:2b:
b1:d7:ec:2e:aa:c7:a7:27:99:72:70:bd:c9:55:cd:64:2f:de:
d4:94:56:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:58:05 2026 by rpki-client