Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
File: INJjO_-xbaLXXtr0m8ghGHz7iO8.mft (raw, json)
Hash identifier: fCnIQxVSGVcqRYL8zC2ycM/LsNEZxQeJIrY+xTvnuhU=
Subject key identifier: 0F:40:C0:0D:E1:9F:2D:02:11:20:56:21:DA:DD:81:AB:56:92:35:F7
Authority key identifier: 20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF
Certificate issuer: /CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
Certificate serial: 01A08C0C9FD405C4ABA9052F8D58BD4D20E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
Manifest number: 0EC1
Signing time: Thu 10 Sep 2026 16:00:32 +0000
Manifest this update: Thu 10 Sep 2026 16:00:32 +0000
Manifest next update: Fri 11 Sep 2026 16:00:32 +0000
Files and hashes: 1: INJjO_-xbaLXXtr0m8ghGHz7iO8.crl (hash: H4tCeLx7EPUC/LGpyJwFjwbEVE/q3auGjsrO22Gg2jE=)
2: p_-g8PelWdmqsdjOIMd952nJEQ0.roa (hash: SNcHznir+SSpk2nPwXwbT8vISszxA2KZ7EJsOdYVxCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0c:9f:d4:05:c4:ab:a9:05:2f:8d:58:bd:4d:20:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
Validity
Not Before: Sep 10 16:00:32 2026 GMT
Not After : Sep 11 16:00:32 2026 GMT
Subject: CN=0f40c00de19f2d0211205621dadd81ab569235f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:40:a8:f9:bc:01:eb:d8:10:c7:b7:f1:da:b5:
9a:01:a1:76:ba:fb:92:66:e4:87:c2:f9:60:3c:7d:
91:44:aa:2f:77:47:7a:ed:b9:f7:a5:30:5a:ae:f9:
05:8f:cb:f6:e1:91:8b:7f:ef:55:e0:1a:ce:9e:4f:
6f:3f:fb:20:db:cc:7b:cd:ae:3f:34:c6:b9:1a:0a:
6b:e8:06:cd:43:27:dd:0d:89:7b:f5:b8:59:d1:70:
2b:2d:a8:6e:70:4a:38:34:81:be:00:35:d2:97:40:
79:26:ea:52:5a:90:65:f4:8b:37:68:89:77:f3:f1:
bb:c3:06:07:9c:1e:1e:08:c0:8b:85:a7:30:19:1a:
e6:35:e8:6d:44:26:a1:d1:d3:54:43:86:22:90:b4:
d9:49:b0:72:31:00:a4:77:c1:61:17:77:99:95:bc:
88:a2:95:0c:b1:a8:ad:33:0e:60:97:30:43:c2:61:
e6:d8:c9:d9:d3:bc:dd:d0:3a:0b:01:2f:bc:5c:8a:
b7:c8:df:be:41:ec:f1:b5:b4:95:8f:14:e6:93:b3:
7c:08:a4:6d:99:a1:07:f3:ce:d3:e6:88:85:91:f9:
68:a7:c5:99:68:da:d0:5a:03:59:6b:3b:61:f0:69:
26:93:0e:b3:75:cc:b7:bb:38:12:60:e0:40:ed:1e:
a1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:40:C0:0D:E1:9F:2D:02:11:20:56:21:DA:DD:81:AB:56:92:35:F7
X509v3 Authority Key Identifier:
keyid:20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:21:b9:d5:6a:85:37:49:6f:3f:19:fe:75:f0:37:6b:de:c2:
32:87:21:a1:a0:63:d1:ff:52:7f:34:93:53:e3:ff:5b:ad:7b:
49:29:b2:73:c6:be:2d:79:46:01:6b:74:6f:6e:81:7f:81:de:
2d:1d:ce:5b:01:c5:a9:65:e3:71:d7:62:87:28:a3:f8:51:0e:
00:53:9a:38:35:c8:d0:4d:a6:b1:f0:b6:88:87:ee:a3:49:a8:
d8:1e:03:e7:dd:3a:6c:28:00:37:27:5f:b6:2b:c0:7e:da:fa:
eb:50:03:10:a3:ab:1b:00:eb:b7:22:3e:5d:c0:1c:f3:27:b5:
e0:9d:22:55:54:d3:b5:45:59:53:13:3c:0a:3b:d8:71:15:2a:
f4:81:3b:df:26:37:72:c3:22:3e:b3:7d:4f:3e:40:fc:61:b1:
eb:2b:c4:85:3f:0f:7a:89:ce:63:53:18:a1:e3:03:a6:94:19:
a6:91:5b:b4:78:b9:f0:a4:d9:3a:70:b0:e8:4b:3a:ef:15:89:
b7:c3:43:60:1e:21:fa:06:38:b4:3d:6c:bf:b8:7d:34:25:df:
c8:b0:52:62:81:c6:c9:ef:fa:23:07:be:84:59:b5:1e:c6:b5:
be:bd:2b:d4:47:66:45:c4:6f:bb:77:5d:cb:ea:09:56:bf:4b:
ec:16:fc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:03:38 2026 by rpki-client