Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
File: iDg0C7z4K84GXO6zeMuqR7mjLN0.mft (raw, json)
Hash identifier: PBEflyadBUPsMrufRrmu8MuZ75k8eYlC0UQbic2tiMs=
Subject key identifier: 09:F2:C7:B8:B7:85:B6:63:E0:0F:E5:D3:60:26:11:81:B5:1B:28:D7
Authority key identifier: 88:38:34:0B:BC:F8:2B:CE:06:5C:EE:B3:78:CB:AA:47:B9:A3:2C:DD
Certificate issuer: /CN=8838340bbcf82bce065ceeb378cbaa47b9a32cdd
Certificate serial: 019EB9FDA773F3CA1ABBC48BDB5CF6A5B196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
Manifest number: 01A3
Signing time: Fri 12 Jun 2026 04:01:08 +0000
Manifest this update: Fri 12 Jun 2026 04:01:08 +0000
Manifest next update: Sat 13 Jun 2026 04:01:08 +0000
Files and hashes: 1: 82yqy0aGJzKzR4R_K7jhO-MXZ48.asa (hash: QLpjtYyVJWNod7Hjm1qgZ6D0o3OhLnBCKHSjT6fQXEI=)
2: iDg0C7z4K84GXO6zeMuqR7mjLN0.crl (hash: s4NZ6Elm/LZtnIfw3FjgwxA6YvsrpYFy/I3wswLrA80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:fd:a7:73:f3:ca:1a:bb:c4:8b:db:5c:f6:a5:b1:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8838340bbcf82bce065ceeb378cbaa47b9a32cdd
Validity
Not Before: Jun 12 04:01:08 2026 GMT
Not After : Jun 13 04:01:08 2026 GMT
Subject: CN=09f2c7b8b785b663e00fe5d360261181b51b28d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cf:5e:91:53:da:5e:ab:18:9d:70:3a:49:3f:
3d:55:c4:a4:78:85:3e:10:ca:6c:e3:13:d6:b5:f8:
f2:75:d4:61:b2:fc:a1:b3:dd:6b:72:b3:02:e6:73:
39:e0:55:8c:75:80:d3:b8:3b:e2:1b:15:f6:f7:b4:
a7:2e:93:c3:5b:c0:4f:3d:84:e2:21:12:16:b8:99:
90:49:a7:f8:23:a0:db:7a:4e:b5:ec:36:1c:7d:15:
e2:bd:5a:57:42:c1:f4:bb:9e:f4:65:3f:0c:6a:8b:
98:99:37:a7:0e:76:8a:f4:d3:64:9a:5d:85:35:72:
91:ff:35:7e:4c:ce:db:59:2e:cd:cf:ab:cf:4b:6c:
7f:3a:88:85:56:e3:8f:7c:8e:d8:dc:6c:00:68:34:
2b:2b:2e:32:2e:b0:1f:da:ba:75:0e:f4:9d:4b:e1:
af:6e:de:9f:c4:9f:aa:1a:64:40:64:03:2b:89:9c:
d8:1c:c1:da:ed:b8:54:56:c8:4a:e2:a3:50:79:7a:
db:fb:78:94:c9:29:eb:ee:af:5d:2a:b2:b6:0c:1f:
62:96:09:ca:c8:ce:50:6e:1c:bd:b4:39:8a:15:bd:
ba:7c:6d:37:82:89:3c:e4:65:9a:40:81:4c:5a:6c:
0b:f9:63:c0:13:a3:77:b3:6f:fd:35:c4:04:91:03:
ff:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F2:C7:B8:B7:85:B6:63:E0:0F:E5:D3:60:26:11:81:B5:1B:28:D7
X509v3 Authority Key Identifier:
keyid:88:38:34:0B:BC:F8:2B:CE:06:5C:EE:B3:78:CB:AA:47:B9:A3:2C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7d:a7:b7:af:64:6c:0d:8f:10:ae:ca:9e:46:f1:bf:20:d9:
ee:5c:b3:b3:87:96:94:b7:0f:18:fa:8e:c1:f4:d5:59:f7:e6:
39:c8:66:f3:ed:2d:fa:98:46:a5:7e:ba:f1:36:26:d9:1e:5f:
20:26:da:47:45:48:b7:d8:7d:2e:44:d8:8e:13:6c:96:58:d8:
75:75:f4:9d:97:fa:0b:c7:13:65:37:eb:13:d1:6f:a0:c5:06:
83:a4:56:f5:a4:6a:a3:99:e2:ce:47:a9:6a:36:88:1c:02:0c:
88:27:40:9a:57:20:86:43:4c:eb:b6:cc:35:56:20:0f:54:1f:
1b:b5:02:1e:91:05:36:8e:41:53:30:b7:34:31:ee:a2:2c:7e:
78:6a:26:ed:9b:d0:81:20:bd:49:1c:9f:38:bd:56:80:37:09:
6c:c3:ba:99:ad:8e:fb:64:0f:7a:53:20:a8:42:12:33:79:2a:
b8:be:d5:33:a2:1a:4e:52:25:e3:bf:09:1f:f3:91:91:aa:15:
ea:b4:95:61:22:70:0e:15:73:f0:30:fa:aa:03:7e:5d:ed:ff:
4c:c4:dc:c4:cf:05:55:06:99:8d:fc:3b:4e:7b:62:f5:56:74:
3b:f8:af:18:24:6c:8c:5b:61:ff:29:05:7a:83:37:96:4c:6e:
f1:46:36:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 13:27:24 2026 by rpki-client