Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
File: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft (raw, json)
Hash identifier: 6DFwdCsjv9fFqwSkMTfGnUhw+p5rJncq+Mb3jhEP04o=
Subject key identifier: 11:00:E1:78:26:5D:7F:69:58:1B:F4:0C:67:B6:62:99:40:9A:76:10
Authority key identifier: 88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
Certificate issuer: /CN=88e719f426793b1e9063771460abd311a3dff116
Certificate serial: 01A13CDC7BDA2717EA24D896370311FC6EC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
Manifest number: 1AA2
Signing time: Thu 15 Oct 2026 00:00:44 +0000
Manifest this update: Thu 15 Oct 2026 00:00:44 +0000
Manifest next update: Fri 16 Oct 2026 00:00:44 +0000
Files and hashes: 1: ImConIEQA2KDtzAT0CUbHUEbH_s.roa (hash: A7/XjtAfBEgLHLQ8oNWxPg8deYNIQ6lOIEhh+waSaZI=)
2: ZxLR_I6eiLsRd1oV4IP5PeLu7DE.roa (hash: kZngczWI+T3GrCv/8Yja3kQMBd7RGIDrozKXhV53UWY=)
3: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl (hash: 3deouerB8dne6Ty2EVD9+c+r0SpwCG2iwrxL4ctGo74=)
4: q2aBWG2CuEimsjXb18Ou0fyLb7k.roa (hash: A0AoTuyENlHBNdH6JVEsUQXr8MFCH3cXbTXxCbPc1hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:7b:da:27:17:ea:24:d8:96:37:03:11:fc:6e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e719f426793b1e9063771460abd311a3dff116
Validity
Not Before: Oct 15 00:00:44 2026 GMT
Not After : Oct 16 00:00:44 2026 GMT
Subject: CN=1100e178265d7f69581bf40c67b66299409a7610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:de:f3:72:72:02:c2:b7:ff:ca:06:39:8f:fd:
72:f5:fe:02:ea:f1:8a:d6:a8:ff:5e:64:39:32:d8:
8a:c8:3b:9c:ba:46:67:2b:b4:e6:4e:35:74:a8:ca:
db:5c:2a:5e:ab:a3:e2:6e:4a:5c:5a:ca:89:f3:32:
98:4f:e6:58:40:05:e0:22:c1:f8:5f:65:5e:d9:c0:
a8:91:32:3a:77:4b:03:98:64:07:4d:ad:de:01:ce:
24:19:88:ff:73:82:46:a1:f7:29:f1:33:de:c5:4c:
5c:eb:9e:1e:c5:b1:ef:60:47:7a:e1:57:ee:59:a9:
18:91:22:23:b0:cd:43:db:b0:12:3d:a7:ec:92:79:
6e:ff:7e:48:65:99:f6:9c:42:7d:79:6a:ea:de:9b:
c8:d5:36:03:6c:43:a4:2f:60:50:73:1c:17:61:48:
2f:4b:eb:e1:40:ef:1f:d4:79:e7:3c:7b:e1:63:cf:
b3:5e:43:e4:9a:54:f6:6a:95:79:c6:e5:60:3b:44:
ca:3b:e3:b1:28:f8:a2:0d:2e:95:30:ef:44:da:51:
bf:6d:f9:5d:4c:e1:c2:90:26:4e:8f:82:01:d6:d3:
b8:ce:d4:36:76:32:7b:ea:85:d8:c8:64:9b:5a:98:
5a:19:e8:a6:8f:08:d2:70:97:93:7a:73:b3:61:d1:
f3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:00:E1:78:26:5D:7F:69:58:1B:F4:0C:67:B6:62:99:40:9A:76:10
X509v3 Authority Key Identifier:
keyid:88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5d:da:a1:25:49:b1:a1:e8:39:cb:3d:55:8d:39:42:b1:55:
e1:4c:9b:54:c3:a0:39:56:1e:96:58:41:63:bd:0c:89:d9:5a:
2c:87:8c:51:14:e8:e0:43:b9:03:23:8a:19:f5:1a:d9:9e:29:
96:bf:e8:2b:3a:53:2d:da:87:85:64:86:8f:28:c6:63:b3:d7:
55:fe:a3:3b:61:86:81:af:37:a8:e7:6d:c9:cd:6c:60:e4:05:
fc:b2:1e:9e:e6:78:f1:a3:ec:53:4c:a2:65:99:4e:3e:db:f8:
73:d4:e5:42:b5:93:03:5f:69:6e:8d:aa:47:9c:c2:62:92:1d:
03:cb:88:a2:35:69:cd:71:e1:de:67:89:72:60:21:4c:59:fc:
66:d5:60:f9:63:da:40:aa:98:f9:89:fa:22:90:f7:ae:54:39:
8e:d3:6a:0d:d5:37:3a:a2:48:26:cc:69:c9:1f:16:54:96:1f:
f8:45:f8:fa:8f:94:3f:48:3a:3b:2c:59:48:71:37:7a:13:0b:
38:40:21:0b:f7:60:2b:43:09:8c:0c:26:cb:4d:62:6c:73:2c:
71:ac:56:b1:9a:76:63:2a:4d:a0:00:80:f9:16:d3:0f:ea:12:
13:45:bc:d1:a7:1c:18:3d:e4:78:77:fe:76:b6:cc:dc:5b:84:
f0:90:46:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:07 2026 by rpki-client