Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
File: IAs7I0VxCglvajTX8Im-seP8U4g.mft (raw, json)
Hash identifier: SBmi1LfC43iahFT3UuBxGKlq9ekit2GrJCQQThZeaEY=
Subject key identifier: A1:B4:34:FF:88:E4:9A:BF:8B:C6:46:2B:BD:45:CF:37:58:13:CD:97
Authority key identifier: 20:0B:3B:23:45:71:0A:09:6F:6A:34:D7:F0:89:BE:B1:E3:FC:53:88
Certificate issuer: /CN=200b3b2345710a096f6a34d7f089beb1e3fc5388
Certificate serial: 01A181501556E5CE83E3BD6827A871970244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
Manifest number: 08E9
Signing time: Wed 28 Oct 2026 07:01:11 +0000
Manifest this update: Wed 28 Oct 2026 07:01:11 +0000
Manifest next update: Thu 29 Oct 2026 07:01:11 +0000
Files and hashes: 1: IAs7I0VxCglvajTX8Im-seP8U4g.crl (hash: D81upeSlxYrP4QcKiyn7kzpCNIf/6ijegFV8dTWnpwM=)
2: MGv8fe2IvQEr0upg_J3OguE6DTc.roa (hash: pyEnPsCzTcBBaKCxYIn3yVpRD7il4dwpBJHyZI57pbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:50:15:56:e5:ce:83:e3:bd:68:27:a8:71:97:02:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200b3b2345710a096f6a34d7f089beb1e3fc5388
Validity
Not Before: Oct 28 07:01:11 2026 GMT
Not After : Oct 29 07:01:11 2026 GMT
Subject: CN=a1b434ff88e49abf8bc6462bbd45cf375813cd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:64:6a:3d:8a:65:60:d8:af:30:23:3d:75:79:
c4:bf:f3:fd:9d:0f:eb:ed:2c:38:4f:fd:81:86:b6:
02:cc:18:e5:86:a0:a1:f8:91:eb:49:16:49:4c:a0:
09:b2:7e:41:45:ba:e5:57:f0:c2:49:d9:fb:b0:9b:
2b:49:df:09:16:b5:f5:b5:cc:08:a2:9a:53:81:be:
76:8c:47:6e:32:b8:38:80:c5:97:b5:8d:d4:56:bb:
ed:b8:a9:e1:7f:29:88:cc:64:13:dc:26:7b:30:75:
17:1f:dc:18:33:d7:7d:38:63:4b:cd:b0:c0:df:93:
7e:c0:34:6c:18:e1:c8:2c:4a:ce:d6:16:9f:0b:59:
ff:ed:16:68:9b:88:1a:b4:a7:45:04:1d:a6:1d:3b:
d6:ac:93:14:18:de:28:f3:72:65:b5:5c:f2:b7:67:
af:4e:a9:7a:67:d0:3e:dc:f7:ef:a1:59:f3:0c:f9:
38:cf:ee:02:0d:f7:58:3a:b0:97:ab:c3:0a:44:56:
df:6f:96:32:85:14:1e:ea:70:0b:b4:13:cb:fe:01:
3f:27:d6:c6:8b:f3:dd:74:39:24:1b:b5:88:7c:19:
44:9a:6a:66:3b:3d:b8:d0:e5:90:e3:08:29:57:3c:
53:68:07:77:88:35:f6:d2:7c:c4:39:e1:f3:92:c6:
67:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B4:34:FF:88:E4:9A:BF:8B:C6:46:2B:BD:45:CF:37:58:13:CD:97
X509v3 Authority Key Identifier:
keyid:20:0B:3B:23:45:71:0A:09:6F:6A:34:D7:F0:89:BE:B1:E3:FC:53:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:0c:ad:f2:77:be:85:f3:b9:8c:ba:fa:63:c9:f8:f4:cb:11:
92:db:cb:e7:4b:4d:d9:bf:31:4b:ab:a4:57:f5:03:0a:a0:b4:
7f:b4:af:96:08:b5:f4:93:14:53:51:e1:61:ad:02:8e:5a:0c:
0c:21:2b:cf:b5:35:1e:95:2e:9d:13:58:52:be:6b:37:20:88:
3c:3d:1b:2b:10:7c:f8:47:cf:6f:23:e6:32:29:dc:61:65:94:
5f:28:54:2e:72:9f:df:68:ac:56:03:44:2b:db:07:99:b8:13:
f0:4a:a3:25:b3:91:70:db:1f:02:26:9c:84:61:98:39:bb:49:
db:f5:be:5a:c1:aa:63:71:e8:68:87:77:65:79:d8:bb:3d:47:
ad:e5:42:f5:89:49:97:7b:51:a5:d2:af:6d:f4:e1:70:65:b9:
ea:7b:b4:83:c9:98:60:3b:dc:80:c9:5d:5b:5b:13:07:32:96:
99:1d:07:53:94:60:09:7a:b7:6b:58:23:ef:77:85:8f:c1:9d:
a8:26:fa:be:6b:50:5d:93:7c:8c:6c:66:6a:3e:3c:4f:8a:12:
b7:97:14:7c:db:b8:3f:74:0c:01:2f:fc:4f:2d:1d:ab:95:55:
be:a7:70:cc:b9:7c:e6:40:0f:fb:e5:8e:08:a9:6f:0d:64:2d:
49:38:2a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:31:08 2026 by rpki-client