Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/iMzUohaNl27yVSiXv8cZINYzvFU.mft
File: iMzUohaNl27yVSiXv8cZINYzvFU.mft (raw, json)
Hash identifier: k9+ITQipIzGyhZLz7EQPfGJESRd0Bx0N1FsKM2y4+To=
Subject key identifier: E4:7F:C5:48:04:9B:18:FD:5A:98:18:FC:18:6A:4D:5C:DD:3A:4C:7B
Authority key identifier: 88:CC:D4:A2:16:8D:97:6E:F2:55:28:97:BF:C7:19:20:D6:33:BC:55
Certificate issuer: /CN=88ccd4a2168d976ef2552897bfc71920d633bc55
Certificate serial: 01A192E82A2D95190201CDA6871E6AA962A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMzUohaNl27yVSiXv8cZINYzvFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/iMzUohaNl27yVSiXv8cZINYzvFU.mft
Manifest number: D8
Signing time: Sat 31 Oct 2026 17:00:50 +0000
Manifest this update: Sat 31 Oct 2026 17:00:50 +0000
Manifest next update: Sun 01 Nov 2026 17:00:50 +0000
Files and hashes: 1: Sebdq3Z-zI97Q_QmObG2yD2EvOo.roa (hash: 6XBHsle9CbbB6Dp19ZfuZYsFS8Vr9CEB/OKP2y66uY8=)
2: iMzUohaNl27yVSiXv8cZINYzvFU.crl (hash: CqQTFZn/Idtw5AFfqQAyVnCjd2ee7cfI598EkVuoVN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/iMzUohaNl27yVSiXv8cZINYzvFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/iMzUohaNl27yVSiXv8cZINYzvFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMzUohaNl27yVSiXv8cZINYzvFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:92:e8:2a:2d:95:19:02:01:cd:a6:87:1e:6a:a9:62:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ccd4a2168d976ef2552897bfc71920d633bc55
Validity
Not Before: Oct 31 17:00:50 2026 GMT
Not After : Nov 1 17:00:50 2026 GMT
Subject: CN=e47fc548049b18fd5a9818fc186a4d5cdd3a4c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:fe:d1:42:a7:af:69:7c:eb:8b:b5:18:f3:
36:d8:06:a8:c3:39:6e:0c:ac:7d:c5:82:30:da:32:
90:86:6c:aa:fd:7b:c9:7c:0e:f1:a7:53:d9:ef:bd:
ce:9c:53:d7:b3:00:b7:7c:b3:01:2c:5d:7c:30:9a:
4c:1f:99:04:c2:9c:6c:fc:92:69:e5:b6:c0:f8:f1:
c5:21:06:7f:bc:e1:99:57:03:0f:6c:2c:20:e6:37:
9f:79:d6:b8:9a:5f:bc:f8:fc:2f:95:e7:48:5c:52:
bb:2a:d0:2d:b5:fa:35:cf:42:b6:8f:2f:43:9b:4c:
e4:4f:e1:6f:b9:d2:8a:cb:81:b7:2b:96:31:40:37:
c5:a0:0c:c3:c4:69:ce:84:2c:e0:64:63:57:a7:76:
20:76:58:ad:28:e5:84:86:1e:63:fa:f2:e6:9b:76:
4b:50:4e:60:de:5c:d9:54:8c:eb:a5:00:39:18:3e:
dd:4a:ac:82:2d:5e:73:ba:ec:f2:85:a0:7c:10:47:
02:3f:84:fb:47:48:2a:13:27:f6:0e:8e:6e:d6:97:
97:eb:28:d6:3b:0f:41:6f:ba:c8:da:42:84:9b:01:
69:35:99:d6:d0:c9:3c:8d:15:74:d2:55:1b:f2:49:
84:df:a8:db:e6:e5:3e:e9:12:73:df:3d:5c:e4:f3:
e0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7F:C5:48:04:9B:18:FD:5A:98:18:FC:18:6A:4D:5C:DD:3A:4C:7B
X509v3 Authority Key Identifier:
keyid:88:CC:D4:A2:16:8D:97:6E:F2:55:28:97:BF:C7:19:20:D6:33:BC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMzUohaNl27yVSiXv8cZINYzvFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/iMzUohaNl27yVSiXv8cZINYzvFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/iMzUohaNl27yVSiXv8cZINYzvFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:2e:a2:a3:00:2c:0e:d9:44:49:42:22:37:b8:fb:46:dd:ee:
49:5f:15:b2:db:2d:3c:02:70:14:17:44:07:e7:83:a0:aa:59:
6f:1d:bd:99:96:1e:25:11:69:3a:7b:74:3a:23:ec:1f:e1:e2:
18:ac:cf:50:93:25:8c:6a:9e:9b:52:04:ea:d6:54:80:03:6e:
e1:54:bb:d6:34:ba:d7:78:9d:69:20:c6:27:5c:1f:bb:22:04:
8f:02:55:b2:33:d3:f5:11:f4:3e:5c:83:69:10:06:5e:61:d8:
30:4c:ad:05:7e:b9:db:ff:90:b1:d8:73:b5:34:f1:8a:5d:57:
e1:38:bf:40:6a:f6:15:15:38:a8:41:7c:a9:cd:20:b0:ad:c1:
7b:3f:af:ba:ea:58:61:c4:34:dc:91:53:18:5c:d2:72:48:fc:
42:d9:b3:55:6a:ec:28:ce:5a:92:9f:f1:ce:d3:4f:ec:11:ca:
c2:ce:49:f3:59:57:93:c1:61:6f:65:80:e4:ca:ca:f9:6f:df:
8f:13:98:23:0f:08:0a:af:82:bb:da:60:89:57:32:1d:84:7a:
d7:17:0b:85:94:9b:aa:a4:77:87:99:81:12:27:7f:d6:a5:44:
ce:35:e9:2b:9c:02:d9:da:23:7d:46:67:40:11:f4:58:f8:4c:
cd:34:02:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:55:26 2026 by rpki-client